1. Registration option
When you place an order in our online shop, you can choose whether you want to enter the data required for the order just once for this order (guest order) or whether you want to create a password-protected customer account (order with registration), in which your data will be stored for future purchases.
2. Guest orders
2.1 Description and scope of data processing
The data entered in the respective input mask is transmitted to us and stored. It is not possible to place an order without filling in the fields marked as mandatory. We also store the user's IP address and the date and time of access.
2.2 Legal basis for data processing
Data processing is carried out on the basis of your order and is necessary in accordance with Art. 6 (1) (b) GDPR for the processing of your order or for the fulfilment of the obligations arising from the concluded purchase contract.
2.3 Purpose of data processing
This data is collected
- to identify you as our customer;
- to process, fulfil and handle your order;
- to correspond with you;
- for invoicing;
- to handle any liability claims that may arise and to assert any claims against you.
Your date of birth is required to verify that you are of legal age. As we will send you an order confirmation by e-mail, we also need your e-mail address.
2.4 Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data stored for the fulfilment of the purchase contract when the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store the personal data of the contractual partner in order to comply with contractual or legal obligations. The personal data collected by us for the processing of your order will therefore be stored until the expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 (1) (c) GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code, Criminal Code or Fiscal Code) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
3. Orders with registration
3.1 Description and scope of data processing
3.1.1 Data collection during registration
If you have decided to register by creating a personalised customer account, the data entered in the respective input mask will be transmitted to us and stored. Online registration is not possible without filling in the fields marked as mandatory. We also store the user's IP address and the date and time of access. By submitting the digital application form, you initiate the creation of a personalised, password-protected customer account. When you submit such an application, we use the double opt-in procedure. This means that we first send a confirmation email to the email address provided, asking you to confirm that you actually want to create a customer account. If you expressly confirm your registration, we will immediately send you another email confirming acceptance and activating your password-protected customer account.
3.1.2 Data collection after registration
After successful registration, your personal customer number will be assigned and stored. In addition, your purchases (date, item, item number, quantity, price, currency, type of transaction) will be stored.
3.2 Legal basis for data processing
By registering, you consent to the processing of your data, which is why the legal basis for this data processing is Art. 6 (1) (a) GDPR.
3.3 Purpose of data processing
Your customer account allows you to conveniently use your stored data for further orders without having to enter it repeatedly. You can also view the details of your completed, open or recently shipped orders and correct/manage the data you provided during registration.
3.4 Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data collected during the registration process if the registration on our website is cancelled or modified.
3.5 Right of revocation; right to deletion
As a user, you have the option of deleting your account or changing the data stored about you at any time. This can be done via the customer area on our website, by email to info@moon-buggy.com or by sending a message (e.g. fax or letter) to the contact details specified in I. of this declaration.
4. Data transfer for contract processing
To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. We pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you of this below. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.
4.1 Payment transactions; payment service providers
Payment transactions using common means of payment are carried out exclusively via an encrypted SSL or TLS connection.
4.1.1 PayPal
On our website, we offer payment via PayPal, among other methods. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as ‘PayPal’).
If you choose to pay via PayPal, the payment details you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).
For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You have the option to revoke your consent to data processing at any time or to object to data processing. A revocation does not affect the validity of past data processing operations.
4.1.2 Klarna
If you select the payment method ‘Klarna’, payment processing will be carried out by the payment service provider Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden (hereinafter: ‘Klarna’), to whom we will pass on the information you provided during the ordering process along with the information about your order.
The transfer of your data is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).
You can find more information about Klarna's privacy policy at the following internet address: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
You have the option to revoke your consent to data processing at any time or to object to data processing. A revocation does not affect the validity of past data processing operations.
4.1.3 Amazon Payments
If you select the payment method ‘Amazon Payments’, payment processing will be carried out by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: ‘Amazon Payments’), to whom we will pass on the information you provided during the ordering process along with the information about your order.
The transfer of your data is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).
You can find further information about Amazon Payments' data protection provisions at the following internet address: https://pay.amazon.com/de/help/201751600.
You have the option to revoke your consent to data processing at any time or to object to data processing. A revocation does not affect the validity of past data processing operations.
4.2 Shipping service providers
Our goods are delivered to you by the shipping service provider selected or specified during the ordering process.
We will pass on your email address to the shipping service provider in accordance with Art. 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or notifying you of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) (b) GDPR, we will only pass on the name of the recipient and the delivery address to the shipping service provider. The data will only be passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the shipping service provider in advance or to notify you of the delivery.
Consent can be revoked at any time with effect for the future by contacting the controller or the shipping service provider. Revocation does not affect the validity of data processing operations that have taken place in the past.