GDPR Compliance Statement
AI Lumière complies with the General Data Protection Regulation (GDPR) to protect the personal data of individuals in the European Economic Area (EEA).
1. Data controller
AI Lumière is the data controller for personal data collected through its website and services. Address: 58 Rue Monceau, 75008 Paris, France.
2. Principles
- Lawfulness, fairness and transparency. We process data legally and openly.
- Purpose limitation. Data is collected for specified, legitimate purposes only.
- Data minimisation. We collect only what we need.
- Accuracy. We keep personal data accurate and up to date.
- Storage limitation. We keep data only as long as needed.
- Integrity and confidentiality. We protect data against unauthorised access, loss or destruction.
3. Lawful bases
- Consent, for the waitlist and marketing messages.
- Contractual necessity, to provide our services.
- Legal obligations.
- Legitimate interests, such as security and service improvement.
4. Your rights
If you are in the EEA you have the following rights:
- Right to access: request a copy of your personal data.
- Right to rectification: correct inaccurate or incomplete data.
- Right to erasure: request deletion of your data, subject to legal limits.
- Right to restrict processing: limit how we use your data.
- Right to data portability: receive your data in a structured format.
- Right to object: object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent: where processing is based on consent, withdraw it at any time.
To exercise them, write to welcome@ailumiere.com.
5. Transfers outside the EEA
Where data is transferred outside the EEA, we rely on safeguards such as Standard Contractual Clauses.
6. Project data and AI
Photos, footage and other materials you send us, including material used to train a character model for your project, are used only for that project and are deleted on request once it is closed, unless your contract states otherwise. See our AI & Content Usage page for details.
7. Security
We apply reasonable technical and organisational measures to protect personal data.
8. Complaints and contact
If you believe your data rights have been violated, you may lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with your local authority.
For any GDPR enquiry: