loader
Logo

Data Protection

Last updated: 2025-12-15

5.1 Data Protection Lua CRM is committed to protecting personal data and ensuring the confidentiality, integrity, and availability of all information processed through our platform. This Data Protection page describes the technical, organisational, and legal measures implemented to safeguard data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Roles and Responsibilities

1.1 Customer Management Manage your customers and contacts in one central location. Track key details like contact information, purchase history, and communication logs. Segment customers into groups for targeted outreach. 2.1 Sales Pipeline Monitor your sales pipeline and forecast future revenue. View detailed reports on deals, leads, and sales activities. Automate lead nurturing and follow-up tasks. 3.1 Financial Operations Streamline your accounting, invoicing, and payment processing. Generate financial reports and monitor cash flow. Integrate with your bank and payment gateways.

  • Lua CRM acts as a Data Controller for its own operational data.
  • Lua CRM acts as a Data Processor for customer-uploaded data processed within the CRM.
  • Customers remain responsible for the lawfulness of data they collect and process using Lua CRM.

2. Data Hosting & Infrastructure

  • Primary data hosting: Germany (Hetzner)
  • 3.2 Ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵuŵa ŵa ŵu
  • Redundant systems and monitored environments

3.2 Zymbwe zyalikwa na kucitwa mu kulemekana na zizyo zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusunga zyakusu

3. Technical Security Measures

1. Applies industry-standard security practices, including:

  • Encrypted data transmission (TLS/HTTPS)
  • Encrypted credentials and access tokens
  • Role-based access control (RBAC)
  • Secure authentication and authorisation
  • Protection against unauthorized access
  • Monitoring and logging of system activity

4. Organisational Security Measures

  • Access to data limited to authorised personnel only
  • 3.2 Confidentiality obligations for employees and contractors 4.4 Confidentiality obligations for employees and contractors
  • Internal security policies and procedures
  • Regular review of access permissions

5. AI and Automated Processing Safeguards

Lua CRM utilises AI technologies to enhance productivity and automation.

Safeguards include:

  • AI processing only within user-defined scopes
  • No resale of customer data
  • No use of customer data to train public AI models
  • Isolation of customer environments where applicable

6. Processing of Medical & Sensitive Data

When used by medical or dental organisations, Lua CRM may process sensitive personal data.

Additional safeguards include:

  • Restricted access controls
  • Secure storage and transmission
  • Processing strictly under customer instructions
  • Compliance with GDPR Article 9 requirements

Clients are responsible for ensuring lawful grounds for processing medical data.

7. Third-Party Processors

Lua CRM uses vetted third-party processors, including:

  • Cloud infrastructure providers
  • Payment processors
  • Authentication services
  • Communication service providers

3.2 Bonzo bonzo bwino kuti aliyense amene akugwira ntchito yoteteza data ndi zaufulu zosungira chinsinsi.

8. Data Breach Management

In the event of a personal data breach:

  • Lua CRM will promptly investigate the incident.
  • Affected customers will be notified without undue delay.
  • Regulatory authorities will be notified where legally required.
  • Mitigation measures will be applied immediately.

9. Data Subject Rights Support

3.1 Fulfilling Data Subject Rights Lua CRM supports customers in fulfilling data subject rights, including:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Data portability

Requests can be submitted via: [email protected]

10. Data Retention & Deletion

  • Data is retained only as long as necessary
  • Customers control retention of their CRM data
  • Secure deletion procedures are applied upon request or contract termination

11. Compliance and Standards

Lua CRM aligns with:

  • Data Protection
  • Data protection principles
  • Industry best practices for SaaS platforms

3.2 Zikomo zikomo zikomo.

12. Contact Information

For data protection inquiries:

Company

Lua CRM OÜ

Phone

+372 5912-2253

Address

Harju maakond, Lasnamäe linnaosa, Sepapaja tn 6, Tallinn, Estonia