Lunavo procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. the Bavarian State Office for Data Protection Supervision (BayLDA)” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ This data is not merged with other data sources. The data is processed on the legal basis of Art. 6 (1) (f) GDPR (legitimate interest) for the purpose of ensuring secure and stable operation of the website and for error analysis. Server logs are stored for [LOG_RETENTION_TAGE] days and then deleted automatically.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ All web fonts used on this site (Inter, Space Grotesk, JetBrains Mono) are served from our own servers. No data is transferred to third parties such as Google Fonts when the page is loaded.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Hetzner Online GmbH , Industriestr. 25, 91710 Gunzenhausen, Germany. All servers are located in Germany. A data-processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ When you click any “Book a meeting” button on this site, we load a booking widget provided by:” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The widget is loaded only after you actively click the button. If you book a meeting, Cal.com processes the name, email address and time slot you provide on its own servers in order to confirm the appointment. The legal basis for this processing is Art. 6 (1) (b) GDPR (steps prior to entering into a contract). Cal.com is certified under the EU–US Data Privacy Framework. For more information see the Cal.com Privacy Policy .” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.