Skip to content

Security and data

Your hotel's material stays your hotel's

All of it is in place today. Answered here so a vendor review does not need a call.

Everything leaves through one gate

Your team holds it. Nothing reaches your website that somebody there has not read.

What Lumina holds

The material you connect

Guest reviews, the brand book, approved photography, the events calendar and your live pages. If you did not connect it, Lumina does not have it.

What the product writes

Pages, search copy, newsletters, and a record of which source each line came from, so a brand team can check any sentence against its source.

Who signed in, and when

The accounts your team uses, and who approved each asset. Approval is a field in the product, so it is on the record.

Questions a vendor review asks

One, and only for counting visits. It holds a random string, no personal data, and no other site can read it. It lasts thirteen months, does not renew itself, and can be switched off from our privacy notice.

No. Nothing we run works outside this website, there are no advertising or social pixels, and no third-party analytics. How many people return and who has written to us are held in two separate places, with no key joining them.

No, and not on anybody else’s. Your material writes your work and nothing else. It never becomes part of the product, and no supplier we use is permitted to train on it.

No. Each property’s material stays with that property. Two hotels in the same group never read each other, and corporate sees a property only where the group has given itself that access.

Not yet. Both are in progress. Today we complete your vendor security questionnaire line by line and sign it. Every commitment above holds whether or not a certificate is on the wall. If a certificate is a condition of signing, tell us early and we will tell you whether we can meet your date.

Ask us and we will confirm it in writing, per supplier and for the environment we would set up for your property. The suppliers are listed in the privacy notice. If residency is a condition of signing, raise it before a walkthrough.

No. There is no write path to your CMS. Lumina prepares the asset, someone at the property approves it, and publishing happens the way it happens today, by the person who does it today.

Everything written for you is yours and stays yours. Write to us and we delete what we hold, and confirm when it is done.

Two people, Marco Di Cesare and Giampiero Virago, and only to set the property up or to fix something you have reported. Every one of those accesses is on the record in the product.

Procurement, without another portal

The current status and the documents your reviewer needs, on the same page as the controls they describe.

SOC 2 Type II and ISO 27001

Status
Both in progress. Lumina is not certified today.

GDPR and Swiss nFADP

Role
Lumina Frontier AG is the controller for this website and a processor for a licensed hotel’s material.

Data processing agreement

Document
Available on request, signed. It travels with the licence agreement.

Vendor questionnaire

Turnaround
Completed line by line and signed within a week.

Sub-processors and residency

Current list
Every supplier is named in the privacy notice. Residency is confirmed in writing for the environment set up for your property.

Trusted by teams at

Kempinski Hotels

Send us the questionnaire

Send it over and you get it back completed and signed within a week.

Write to us Current sub-processors