Privacy policy
1. INTRODUCTION
LUNAUME (AUREA BV) , a company incorporated under the laws of the Netherlands, having its registered office at Gijsbrecht van Amstelstraat 213, 1214 BA Hilversum, registered with the Dutch Chamber of Commerce under number 42053847, respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how LUNAUME (AUREA BV) collects, uses, stores, discloses and otherwise processes personal data when you visit or use our website WWW.LUNAUME.COM, purchase our products, subscribe to our services, communicate with us, participate in our marketing activities or otherwise interact with us.
For the purposes of Regulation (EU) 2016/679 (the “GDPR”) and applicable Dutch data protection legislation, LUNAUME (AUREA BV) is the controller of the personal data described in this Privacy Policy, except where another entity is expressly identified as the controller for a particular processing activity.
This Privacy Policy is primarily intended for customers and visitors in the European Economic Area (“EEA”). Where you access or use our services from another jurisdiction, additional local privacy laws may apply.
2. PERSONAL DATA WE COLLECT
We may collect and process personal data that you provide directly to us, that we collect automatically when you use the Website, or that we receive from third parties in accordance with applicable law.
2.1 Information you provide to us
Depending on your interaction with LUNAUME (AUREA BV), this may include your name, billing address, delivery address, email address, telephone number, account information, order information, subscription information, payment and transaction information, customer service communications, product reviews, preferences and other information that you voluntarily provide to us.
Where you participate in a promotion, competition, product testing programme, ambassador programme, affiliate programme or other LUNAUME (AUREA BV) initiative, we may also process information necessary to administer that activity.
2.2 Information collected automatically
When you access the Website, we may automatically collect certain technical and usage information, including your IP address, browser type, device type, operating system, language preferences, approximate location derived from your IP address, pages viewed, links accessed, referring website, date and time of access and information concerning your interaction with the Website.
Some of this information may be collected through cookies and similar technologies. Further information is provided in our Cookie Policy.
2.3 Information received from third parties
We may receive personal data from service providers, payment providers, logistics providers, advertising and analytics providers, social media platforms, technology providers, business partners and other third parties where permitted by applicable law. Where required by law, we will provide information concerning the source of such data.
3. PURPOSES AND LEGAL BASES FOR PROCESSING
LUNAUME (AUREA BV) processes personal data only for specified, explicit and legitimate purposes and only where an appropriate legal basis exists under applicable data protection law.
3.1 Processing and fulfilling orders
We use personal data to process and fulfil purchases, process payments, deliver products, administer returns and refunds, communicate with you concerning your orders and provide customer support. The legal basis is performance of our contract with you and, where applicable, compliance with a legal obligation.
3.2 Managing subscriptions
Where you purchase a LUNAUME (AUREA BV) subscription, we process information necessary to establish and administer the subscription, process recurring payments, fulfil recurring orders, communicate with you regarding your subscription and facilitate cancellation, modification, suspension or other changes to your subscription. The legal basis is performance of our contract with you and compliance with applicable legal obligations.
3.3 Customer service and communications
We process personal data when you contact us, including information contained in your communications, in order to respond to your enquiry, provide customer support, investigate complaints and maintain our relationship with you. The legal basis may be performance of a contract, our legitimate interest in providing effective customer service, or compliance with a legal obligation, depending on the circumstances.
3.4 Website operation, fraud prevention and security
We process technical and usage information to operate, maintain, secure and improve the Website, prevent fraud and abuse, detect security incidents and protect the rights, property and safety of LUNAUME (AUREA BV), our customers and other persons. The legal basis is our legitimate interest in operating a secure and reliable online service and, where applicable, compliance with legal obligations.
3.5 Marketing communications
Where permitted by applicable law, we may use personal data to send information about LUNAUME (AUREA BV) products, services, launches, promotions and other marketing communications.
Where consent is required, we will obtain your consent before sending such communications. Where applicable law permits marketing to existing customers on another lawful basis, we may rely on that basis, subject to your right to object.
You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the communication or by contacting us. Your right to object to direct marketing is absolute.
3.6 Personalised advertising and analytics
Subject to applicable law and, where required, your consent, we may use cookies, pixels, software development kits and similar technologies to understand how visitors use the Website, measure advertising performance, personalise content and advertising and deliver relevant advertising on our Website and on third party platforms.
Where consent is required, non-essential tracking technologies will not be activated until the relevant consent has been provided. You may manage your cookie preferences through our cookie consent mechanism.
3.7 Reviews, testimonials and user-generated content
If you submit a review, testimonial, photograph, video or other content to LUNAUME (AUREA BV), we may process the personal data contained in that submission for the purpose for which you provided it and, where applicable, for marketing purposes in accordance with the information provided to you at the time of submission.
Where consent is required for marketing use of such content, we will obtain it before using the content for that purpose.
3.8 Legal and regulatory compliance
We may process and retain personal data where necessary to comply with applicable laws, regulations, accounting and tax requirements, regulatory requests, court orders or other lawful requests from competent authorities. We may also process personal data for the establishment, exercise or defence of legal claims.
4. PAYMENT INFORMATION
Payments made through the Website may be processed by third party payment service providers. LUNAUME (AUREA BV) generally does not receive or store complete payment card details where such information is processed directly by the relevant payment provider. We may receive transaction information such as payment status, transaction reference, payment method and other information necessary to administer your order.
Payment providers process personal data in accordance with their own privacy policies and applicable law.
5. RECIPIENTS OF PERSONAL DATA
We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy and where permitted by applicable law.
Such recipients may include Shopify and other e-commerce technology providers, payment service providers, fulfilment and logistics providers, customer service providers, hosting and cloud service providers, information technology providers, analytics providers, marketing and advertising providers, email and communications providers, professional advisers, insurers, auditors, regulators, government authorities and legal advisers.
Where a third party processes personal data on our behalf, LUNAUME (AUREA BV) will require that party to process the data only in accordance with our instructions and applicable data protection law, including through an appropriate data processing agreement where required.
We may also disclose personal data where necessary in connection with a merger, acquisition, financing, restructuring, sale of assets, insolvency or similar corporate transaction.
6. SHOPIFY
The Website is operated using Shopify or related Shopify services. Shopify may process personal data relating to your use of the Website and your transactions in order to provide its services to us and to operate and improve its platform.
Depending on the relevant processing activity, Shopify may act as our processor or as an independent controller. Shopify’s processing of personal data is subject to its own privacy documentation.
7. COOKIES AND SIMILAR TECHNOLOGIES
The Website uses cookies and similar technologies. Some cookies are necessary for the operation, security and functionality of the Website. Other cookies, including certain analytics and advertising technologies, may require your prior consent under applicable law.
Where consent is required, we will provide appropriate choices before placing or accessing the relevant cookies or similar technologies. You may change or withdraw your cookie preferences at any time through the cookie management mechanism made available on the Website.
Further information concerning the cookies and similar technologies used by LUNAUME (AUREA BV), their purposes, providers and retention periods is contained in our Cookie Policy.
8. MARKETING AND ADVERTISING TECHNOLOGIES
LUNAUME (AUREA BV) may work with advertising and marketing technology providers to measure advertising effectiveness, understand customer interactions and deliver advertising.
Depending on the technology used and the applicable jurisdiction, this may involve processing identifiers, online activity, device information, transaction information or other pseudonymous information.
Where required by applicable law, we will obtain consent before activating advertising or tracking technologies. LUNAUME (AUREA BV) will not use personal data for incompatible purposes without an appropriate legal basis.
9. INTERNATIONAL TRANSFERS
Some of our service providers may process personal data outside the European Economic Area. Where personal data is transferred outside the EEA, LUNAUME (AUREA BV) will ensure that the transfer is made in accordance with applicable data protection law and that an appropriate transfer mechanism is in place where required.
Depending on the circumstances, this may include a European Commission adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism. Where required, LUNAUME (AUREA BV) will implement supplementary measures to provide an appropriate level of protection.
10. RETENTION OF PERSONAL DATA
LUNAUME (AUREA BV) retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
The applicable retention period depends on the nature of the information, the purpose for which it is processed and our legal and regulatory obligations.
Transaction and financial records may be retained for periods required by applicable accounting and tax legislation. Customer account information may be retained while the account remains active and for a reasonable period thereafter where necessary to comply with legal obligations, resolve disputes or enforce contractual rights. Marketing data will generally be retained until you unsubscribe or otherwise object, subject to any legal requirements concerning suppression records.
Where personal data is no longer required, it will be securely deleted or anonymised.
11. DATA SECURITY
LUNAUME (AUREA BV) takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include access controls, authentication procedures, encryption where appropriate, contractual safeguards, security monitoring and procedures for handling security incidents.
No method of transmission or storage can be guaranteed to be completely secure.
12. YOUR RIGHTS
Subject to applicable law and relevant exceptions, you may have the following rights in relation to your personal data: the right to access your personal data; the right to request correction of inaccurate or incomplete data; the right to request deletion in circumstances provided by law; the right to request restriction of processing in circumstances provided by law; the right to object to processing based on our legitimate interests; the absolute right to object to processing for direct marketing purposes; the right to withdraw consent where processing is based on consent; and, where applicable, the right to data portability.
You may also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, subject to the exceptions provided by law.
13. EXERCISING YOUR RIGHTS
You may exercise your privacy rights by contacting us at lunaume@lunaume.com or by post at Gijsbrecht van Amstelstraat 213, 1214 BA Hilversum.
Please provide sufficient information for us to identify you and understand the nature of your request. We may need to verify your identity before processing certain requests in order to protect personal data against unauthorised disclosure.
We will respond to valid requests within the period required by applicable law. Under the GDPR, requests are generally to be handled without undue delay and, in any event, within one month, subject to the circumstances and extensions permitted by law.
We will not normally charge a fee for exercising your rights. Where applicable law permits a reasonable fee or refusal to act on a request that is manifestly unfounded or excessive, we may do so.
14. COMPLAINTS
If you have concerns about the manner in which we process your personal data, we encourage you to contact us first so that we may investigate and address your concern.
You also have the right to lodge a complaint with the competent data protection supervisory authority. For LUNAUME (AUREA BV)’s establishment in the Netherlands, the relevant supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), Postbus 93374, 2509 AJ Den Haag, The Netherlands.
15. CHILDREN
The Website and LUNAUME (AUREA BV) products are intended for adults. LUNAUME (AUREA BV) does not knowingly collect personal data from children where such collection is prohibited by applicable law. If you believe that a child has provided personal data to us in circumstances where such collection was not permitted, please contact us so that we can investigate and take appropriate action.
16. AUTOMATED DECISION-MAKING AND PROFILING
LUNAUME (AUREA BV) may use automated tools and profiling technologies for purposes such as analytics, audience segmentation, advertising measurement and personalisation.
We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you unless permitted by applicable law and subject to the safeguards required by law. Where applicable, further information concerning significant automated decision-making will be provided at the time of collection or processing.
17. THIRD PARTY WEBSITES AND SERVICES
The Website may contain links to websites, applications, social media platforms or other services operated by third parties. LUNAUME (AUREA BV) is not responsible for the privacy practices of such third parties. We recommend reviewing the applicable privacy policies before providing personal data to third party services.
18. CHANGES TO THIS PRIVACY POLICY
We may amend this Privacy Policy from time to time to reflect changes to our business, services, technology, applicable law or regulatory requirements. Where appropriate, we will notify you of material changes through the Website or by other appropriate means. The date at the beginning of this Privacy Policy indicates when it was most recently updated.
19. CONTACT DETAILS
LUNAUME (AUREA BV)
Gijsbrecht van Amstelstraat 213,
The Netherlands
Email: lunaume@lunaume.com
Chamber of Commerce: 42053847
VAT number: NL869495707B01
Website: WWW.LUNAUME.COM
