This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur,
Germany. Each time this website is accessed, connection data (e.g. IP
address, date/time, file requested, browser type) is automatically collected
and stored in log files.
IONOS processes this data on our behalf (data processing agreement under
Art. 28 GDPR). Log files are stored for a maximum of eight weeks. Processing
is based on Art. 6 (1) (f) GDPR (legitimate interest in the stability and
security of website operations).
3. Collection and storage of personal data
When you visit our website, information is automatically transmitted by the
browser used on your device to our server and temporarily stored in log
files. The following data may be collected:
IP address of the requesting device
Date and time of access
Name and URL of the accessed file
Referrer URL (website from which access occurs)
Browser type, operating system and name of the access provider
This data is processed to ensure a smooth website connection, comfortable
usage, analysis of system stability and for administrative purposes. The
legal basis is Art. 6 (1) (f) GDPR.
4. Data disclosure
Your personal data will not be transferred to third parties for purposes
other than those listed below. Data is only shared if:
You have given your explicit consent (Art. 6 (1) (a) GDPR),
disclosure is necessary under Art. 6 (1) (f) GDPR and there is no
overriding legitimate interest to the contrary,
a legal obligation exists (Art. 6 (1) (c) GDPR), or
processing is lawful and necessary for the performance of a contract or
pre-contractual measures (Art. 6 (1) (b) GDPR).
5. Contact form
When you send us an enquiry using the contact form, the information you
provide, including your contact details, will be processed solely for the
purpose of handling your request and any follow-up questions.
This data will not be passed on without your consent. Processing of data
entered in the contact form is based on Art. 6 (1) (b) GDPR (pre-contractual
measures or contract performance) and, where applicable, on Art. 6 (1) (a)
GDPR (consent).
The data will be deleted once the purpose no longer applies (e.g. after the
request has been processed), unless statutory retention requirements apply.
6. Appointment booking
Our website allows you to book consultation appointments online. We process
the data you enter (e.g. name, e-mail address, phone number, preferred time)
to reserve, confirm and prepare the appointment.
Processing is carried out on the basis of Art. 6 (1) (b) GDPR (performance
of pre-contractual measures or contractual obligations). Your data is stored
only for as long as necessary to manage the appointment and deleted
afterwards, unless retention obligations apply.
Calendar management is provided by a service of the IONOS group (data
processing under Art. 28 GDPR). Appointment and contact details are
processed in our calendar at IONOS. No further use or disclosure takes
place.
6a. Own server infrastructure (contact and appointment management)
Both the contact form and online appointment scheduling are handled via our
own server infrastructure. The data entered (e.g. name, e-mail address,
message, preferred appointment time) is processed exclusively on our own
systems (livin-home.com:8088), which we administer and operate
within the European Union.
Data transmission is encrypted. No transfer to third parties takes place.
The legal basis for processing is Art. 6 (1) (b) GDPR (performance of
pre-contractual measures or contract performance). Where additional data is
provided voluntarily, processing takes place on the basis of Art. 6 (1) (a)
GDPR (consent).
To ensure technical operation, temporary connection data (IP address,
timestamp, browser type) is stored server-side in log files. This is used
solely for troubleshooting and security purposes and is automatically
deleted after no more than 14 days.
7. Data subject rights
You have the right to:
request information on your personal data processed by us (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure of stored data (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
withdraw consent at any time (Art. 7 (3) GDPR),
lodge a complaint with a supervisory authority (Art. 77 GDPR).
8. Data security
We use SSL/TLS encryption during website visits to protect your data against
unauthorised access.
9. Validity and amendments
This Privacy Policy is currently valid as of November 2025. Due to future
development of our website or legal requirements, it may be necessary to
amend this Privacy Policy.
Responsible for content pursuant to Section 55 (2) RStV
EU online dispute resolution
The European Commission provides a platform for online dispute resolution
(ODR):
https://ec.europa.eu/consumers/odr
Our e-mail address can be found above in the legal notice.
“We have worked very successfully with spotlight core²code for a long
time – in a way characterised by trust, reliability and creativity. We
are particularly impressed by how flexibly even short-notice changes
are taken on and implemented. There are also exceptionally good
suggestions that go far beyond expectations and repeatedly take our
projects to a new level. This is how a collaboration has become a
genuine partnership.” – Lissi’s Passion
Smart Home Control - LIVIN HOME
General project information
Project name / title:livin-home
Client / industry:Private users / smart home
Project timeframe:since 2023
Project duration:ongoing
Initial situation / challenges
Starting point:
Smart-home devices from different vendors each require their own
app.
No unified control across platforms and device types.
Complex setup and low ease of use for end users.
Objectives:
Central control of all devices via a PWA.
Simpler operation for users through a consistent interface.
Extensibility through a modular architecture.
Solution / implementation
Approach:
Client (frontend):
Svelte 5 (component-based, reactive)
Framework7-Svelte 8 (UI components, mobile-first)
Vite 6 (build & dev server)
TypeScript (static type checking)
Auth0 SPA SDK (secure authentication)
Workbox / Vite-PWA (offline capability, push)
PostCSS & Less (CSS preprocessing)
Server (backend):
Node.js (CommonJS, server-side logic)
Express (HTTP API framework)
Redis (in-memory cache & messaging)
WebSockets / Socket.IO client (real-time status)
OAuth2 / JWT with Auth0 (authentication & security)
Helmet & rate limiting (security headers & API protection)
