Legal
Privacy Policy
Last updated: 4 August 2026
1. Data Controller
The Data Controller for the personal data collected through this website is:
Sun & Moon S.r.l.
Registered office: Zona Industriale Fondo Valle Sinello snc, 66052 Gissi (CH), Italy
VAT / Tax code: 02873310698
Email: info@luminaexperience.it
The website luminaexperience.it is operated by Sun & Moon S.r.l. on behalf of Lumina Experience Restaurant, located at Su Entu Boutique Hotel, Sp 38 bis n° 30, 07026 Olbia (OT), Sardinia, Italy.
2. Types of data collected
In the course of ordinary use of the website, we process the following categories of data:
a) Browsing data — The IT systems and software procedures used to operate this website acquire certain personal data during normal operation, the transmission of which is implicit in the use of internet communication protocols (IP address, browser type, operating system, pages visited, access times). This data is used only to gather anonymous statistical information about the use of the site and to check that it is working correctly, and is deleted immediately after processing.
b) Data provided voluntarily by the user — The site collects personal data voluntarily provided through the "Careers" form: name, email address, phone number, role of interest, message and an optional CV attachment (PDF, DOC or DOCX).
c) Data collected through cookies and similar technologies — See our Cookie Policy for detailed information on the cookies that may be used by the site.
3. Purposes of processing
Personal data is processed for the following purposes:
— Managing job applications received through the "Careers" form and assessing the professional profile of the candidate;
— Responding to requests for information sent by email or phone;
— Ensuring the security and correct technical functioning of the site, including through anti-spam systems (honeypot);
— If enabled by the Data Controller, carrying out aggregated statistical analysis of site traffic (Google Analytics 4) and marketing/remarketing activities (Meta Pixel) — see the Cookie Policy.
4. Legal basis for processing
— Consent of the data subject (Art. 6(1)(a) GDPR), for submitting an application through the "Careers" form and for non-technical cookies;
— Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR), for site security and aggregated browsing statistics.
5. How data is processed
Processing is carried out using electronic tools, with logic strictly related to the purposes indicated, and in any case in a way that guarantees the security and confidentiality of the data. Data is stored on servers located within the European Union.
6. Data retention
Data relating to job applications (including CVs) is retained for a maximum of 12 months from receipt, unless otherwise agreed with the candidate, after which it is deleted or anonymised. Technical browsing data is retained only for as long as strictly necessary, and in any case no longer than 12 months.
7. Data disclosure
Personal data will not be disclosed to the public. It may be communicated to:
— Providers of technical services (hosting, CMS management) acting as data processors;
— Google LLC and Meta Platforms Inc., limited to browsing data, if Google Analytics 4 and/or Meta Pixel are enabled by the Data Controller (see the Cookie Policy).
8. International data transfers
If enabled, the Google Analytics 4 and Meta Pixel services may involve the transfer of data outside the EU (United States). Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission and the safeguards adopted by the respective providers.
9. Rights of the data subject
As a data subject, you have the right at any time to (Art. 15-22 GDPR):
— Access your personal data;
— Rectify or erase it;
— Restrict the processing concerning you;
— Object to processing;
— Request data portability;
— Withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
To exercise these rights, you can write to: info@luminaexperience.it
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if you believe that the processing of your data violates applicable law.
10. Minors
This website is not intended for individuals under the age of 16, and does not knowingly collect personal data from minors.
11. Changes to this policy
The Data Controller reserves the right to modify this policy at any time, notifying users by publishing the update on the website. We recommend checking this page periodically.