I. CONTROLLER; DATA PROTECTION OFFICER

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

MOON GmbH
Maierhof 2
94167 Tettenweis
Germany

Tel: +49 8532 9243-0
Fax: +49 8532 9243-70
Email: info@moon-buggy.com

The data protection officer of the controller can be contacted by email at info@boessl.biz and at the above postal address with the addition of ‘Data Protection Officer’.

II. GENERAL INFORMATION ON DATA PROCESSING

1. Scope of processing personal data

We only process personal data of our users, interested parties or customers to the extent necessary to provide a functional website or to provide our services. The processing of personal data is carried out regularly only with the consent of the person concerned. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.


2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing.


3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

III. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  • Browser type/version of the user;
  • User's operating system;
  • User's IP address/internet service provider;
  • Date/time of access;
  • Websites from which the user's system accesses our website;
  • Websites accessed by the user's system via our website.

The data is stored in our system's log files. This data is not stored together with other personal data relating to the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.


3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.


4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

In the case of data storage in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to assign them to the calling client.


5. Right to object and right to erasure

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no right to object on the part of the user.

IV. USE OF COOKIES

1. Description and scope of data processing

Our website uses cookies; these are text files that are stored in the internet browser or by the internet browser on the user's device.

Some of the cookies used are deleted at the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognise your browser the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data and IP address data, to the extent specified in each individual case. Persistent cookies are automatically deleted after a predefined period of time, depending on the cookie.

2. Legal basis for data processing

Insofar as the data subject has given their consent to the use of cookies, Art. 6(1)(a) GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

The legal basis for the processing of personal data using cookies is, in particular, Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Purpose of data processing

We use cookies to ensure the best possible functionality of the website and a customer-friendly and effective design of the page visit.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.


4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.

The duration of the respective cookie storage can be found in the overview of your web browser's cookie settings and, in particular, in the cookie consent tool implemented on the website (link ‘Change cookie settings’ in the footer of the website).


5. Right to object and removal option

Cookies are stored on the user's computer and transmitted to our site. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically by setting the maximum storage period in your browser settings. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.


The following links will help you to change your settings for rejecting or accepting cookies in the most commonly used browsers:

  • Internet Explorer / Windows Edge: http://windows.microsoft.com/de-de/windows-vista/block-or-allow-cookies
  • Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
  • Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
  • Safari: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
  • Opera: http://help.opera.com/Windows/10.20/de/cookies.html

In particular, a cookie consent tool implemented on the website (link ‘Change cookie settings’ in the footer of the website) allows users to activate/deactivate individual cookies according to their individual preferences

V. ONLINE SHOP

1. Registration option

When you place an order in our online shop, you can choose whether you want to enter the data required for the order just once for this order (guest order) or whether you want to create a password-protected customer account (order with registration), in which your data will be stored for future purchases.


2. Guest orders

2.1 Description and scope of data processing

The data entered in the respective input mask is transmitted to us and stored. It is not possible to place an order without filling in the fields marked as mandatory. We also store the user's IP address and the date and time of access.

2.2 Legal basis for data processing

Data processing is carried out on the basis of your order and is necessary in accordance with Art. 6 (1) (b) GDPR for the processing of your order or for the fulfilment of the obligations arising from the concluded purchase contract.


2.3 Purpose of data processing

This data is collected

  • to identify you as our customer;
  • to process, fulfil and handle your order;
  • to correspond with you;
  • for invoicing;
  • to handle any liability claims that may arise and to assert any claims against you.

Your date of birth is required to verify that you are of legal age. As we will send you an order confirmation by e-mail, we also need your e-mail address.

2.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data stored for the fulfilment of the purchase contract when the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store the personal data of the contractual partner in order to comply with contractual or legal obligations. The personal data collected by us for the processing of your order will therefore be stored until the expiry of the statutory retention period and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 (1) (c) GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code, Criminal Code or Fiscal Code) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Orders with registration

3.1 Description and scope of data processing

3.1.1 Data collection during registration

If you have decided to register by creating a personalised customer account, the data entered in the respective input mask will be transmitted to us and stored. Online registration is not possible without filling in the fields marked as mandatory. We also store the user's IP address and the date and time of access. By submitting the digital application form, you initiate the creation of a personalised, password-protected customer account. When you submit such an application, we use the double opt-in procedure. This means that we first send a confirmation email to the email address provided, asking you to confirm that you actually want to create a customer account. If you expressly confirm your registration, we will immediately send you another email confirming acceptance and activating your password-protected customer account.


3.1.2 Data collection after registration

After successful registration, your personal customer number will be assigned and stored. In addition, your purchases (date, item, item number, quantity, price, currency, type of transaction) will be stored.


3.2 Legal basis for data processing

By registering, you consent to the processing of your data, which is why the legal basis for this data processing is Art. 6 (1) (a) GDPR.


3.3 Purpose of data processing

Your customer account allows you to conveniently use your stored data for further orders without having to enter it repeatedly. You can also view the details of your completed, open or recently shipped orders and correct/manage the data you provided during registration.

3.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for data collected during the registration process if the registration on our website is cancelled or modified.

3.5 Right of revocation; right to deletion

As a user, you have the option of deleting your account or changing the data stored about you at any time. This can be done via the customer area on our website, by email to info@moon-buggy.com or by sending a message (e.g. fax or letter) to the contact details specified in I. of this declaration.

4. Data transfer for contract processing

To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. We pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you of this below. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.


4.1 Payment transactions; payment service providers

Payment transactions using common means of payment are carried out exclusively via an encrypted SSL or TLS connection.

4.1.1 PayPal

On our website, we offer payment via PayPal, among other methods. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as ‘PayPal’).

If you choose to pay via PayPal, the payment details you enter will be transmitted to PayPal.

The transmission of your data to PayPal is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).

For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You have the option to revoke your consent to data processing at any time or to object to data processing. A revocation does not affect the validity of past data processing operations.

4.1.2 Klarna

If you select the payment method ‘Klarna’, payment processing will be carried out by the payment service provider Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden (hereinafter: ‘Klarna’), to whom we will pass on the information you provided during the ordering process along with the information about your order.

The transfer of your data is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).

You can find more information about Klarna's privacy policy at the following internet address: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

You have the option to revoke your consent to data processing at any time or to object to data processing. A revocation does not affect the validity of past data processing operations.

4.1.3 Amazon Payments

If you select the payment method ‘Amazon Payments’, payment processing will be carried out by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: ‘Amazon Payments’), to whom we will pass on the information you provided during the ordering process along with the information about your order.

The transfer of your data is based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract).

You can find further information about Amazon Payments' data protection provisions at the following internet address: https://pay.amazon.com/de/help/201751600.

You have the option to revoke your consent to data processing at any time or to object to data processing. A revocation does not affect the validity of past data processing operations.

4.2 Shipping service providers

Our goods are delivered to you by the shipping service provider selected or specified during the ordering process.


We will pass on your email address to the shipping service provider in accordance with Art. 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or notifying you of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) (b) GDPR, we will only pass on the name of the recipient and the delivery address to the shipping service provider. The data will only be passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the shipping service provider in advance or to notify you of the delivery.


Consent can be revoked at any time with effect for the future by contacting the controller or the shipping service provider. Revocation does not affect the validity of data processing operations that have taken place in the past.

VI. PRODUCT WARRANTY REGISTRATION

1. Description and scope of data processing

We offer the option of online registration for selected products, requiring the provision of personal data. The data entered in the respective input mask is transmitted to us and stored. Registration is not possible without filling in the fields marked as mandatory. We also store the user's IP address and the date and time of access. The data is not passed on to third parties. During the registration process, the user's consent to the processing of this data is obtained.


2. Legal basis for data processing

The legal basis for the processing of the data is the user's consent, Art. 6 (1) (a) GDPR.

3. Purpose of data processing

User registration is required to activate the product warranty. User identification is required to prevent the misuse of serial numbers and to verify the validity of the registration.


4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.


5. Right to object and right to erasure

You can cancel your registration at any time. You can have the data stored about you changed at any time.

VII. NEWSLETTER; PRODUCT RECOMMENDATIONS FOR SIMILAR GOODS; DIRECT ADVERTISING BY LETTER

1. Newsletter

1.1 Description and scope of data processing

With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are specified in the declaration of consent.

We use the double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. You must confirm your registration within 24 hours to activate your registration. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal data.

The only mandatory information required for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will store your email address for the purpose of sending you the newsletter.

1.2 Legal basis for data processing

The legal basis is Art. 6(1)(a) GDPR.


1.3 Purpose of data processing

The user's email address is collected for the purpose of delivering the newsletter.


1.4 Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.


1.5 Right of revocation and removal

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter e-mail or by sending an e-mail to newsletter@moon-buggy.com.

1.6 Shipping service provider CleverReach

We use the services of CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede.

CleverReach is a service that can be used to organise and analyse the dispatch of the newsletter. If you enter data for the purpose of receiving the newsletter (e.g. email address), this data will be stored on CleverReach's servers in Germany or Ireland. We would like to point out that we evaluate your user behaviour when sending the newsletter. With the help of conversion tracking, it is also possible to analyse whether a predefined action has taken place after clicking on the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/. If you do not want CleverReach to analyse your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. The information is stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely for statistical and anonymous purposes. For more details, please refer to CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.

1.7 Newsletter tracking

Please note that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the web beacons to your email address and an individual ID. Links received in the newsletter also contain this ID. [EITHER:] The data is collected exclusively in pseudonymised form, i.e. the IDs are not linked to your other personal data, and direct personal references are excluded. [OR:] We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them, and use this information to deduce your personal interests. We link this data to your actions on our website.

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information will be stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely for statistical and anonymous purposes. [OPTIONAL: Such tracking is also not possible if you have disabled the display of images in your email programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.]

2. Product recommendations for similar goods

2.1 Description and scope of data processing

In addition to contract processing, we use the email address you provided in connection with the purchase of goods or product registration to regularly inform you about our own similar goods by means of direct marketing via email. This occurs regardless of whether you have subscribed to the newsletter or not.


2.2 Legal basis for processing

The legal basis for sending product recommendation emails following the sale of goods or services is Section 7 (3) of the German Unfair Competition Act (UWG).


2.3 Purpose of data processing

The user's email address is collected for the purpose of sending the product recommendation email.


2.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

2.5 Right to object and right to removal

You may object to the use of your email address for sending product information at any time without incurring any costs other than the transmission costs according to the basic rates. You can declare your objection by clicking on the link provided in every product recommendation email or by sending an email to info@moon-buggy.com.


3. Direct advertising by letter

3.1 Description and scope of data processing

We use the postal address you provide in connection with the purchase of goods or services (along with your name) to send you regular direct advertising by letter (e.g. to send you interesting offers and information about our products).

3.2 Legal basis for processing

The legal basis for direct marketing by letter is Art. 6(1)(f) GDPR.


3.3 Purpose of data processing

The collection of your name and address also serves to send you direct marketing by letter. According to Recital 47 of the GDPR, the processing of personal data for the purpose of direct marketing may be considered processing based on a legitimate interest. In this context, it should be noted in particular that a customer relationship exists between you and us on the basis of your purchase and that we therefore have a legitimate interest in informing you about current offers in future.

3.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.


3.5 Right to object

You may object to this form of direct advertising by letter at any time. You can declare your objection by email to info@moon-buggy.com or by sending a message (e.g. fax or letter) to the contact details provided in I. of this statement.

VIII. E-MAIL CONTACT

1. Description and scope of data processing

When you contact us by e-mail, the data you provide (your e-mail address and any other data you provide) will be transmitted to us and stored by us. In this context, the data will not be passed on to third parties. The data will be used exclusively for the purpose of processing the conversation.


2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given their consent.

The legal basis for processing the data transmitted in the course of establishing contact is also Art. 6 para. 1 sentence 1 lit. f GDPR.

If the purpose of establishing contact is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

3. Purpose of data processing

The processing of personal data serves solely to process the contact request.


4. Duration of storage

We delete the data collected in this context once storage is no longer necessary, or restrict processing if there are legal retention obligations.

5. Right to object and right to erasure

The user may revoke their consent to the processing of their personal data or object to the storage of their personal data at any time. In this case, all personal data stored in the course of establishing contact will be deleted.

IX. Web analytics

This website uses its own service for web analysis. This service does not use any personal data. No data is read or stored on the website visitor's device. The IP address of the website visitor is anonymized. It is not possible to identify the website visitor after visiting the website. Cookies are not set; any cookies that may exist are transmitted as a technical necessity but are not used.

Web analysis enables the website operator to record and analyze how website visitors use this website. For this purpose, the website operator receives miscellaneous usage data, such as usage time, page views, dwell time, operating systems, or screen resolution. It is also possible to record whether website visitors perform certain actions, such as clicks or purchases.

Hosting

The anonymized analysis data is transferred to Google Analytics without the use of personal data of the website visitor. There, it is usually stored on a Google server in the USA. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Profiling or a link to other sources is not possible as a result of this anonymized analysis data.
Please refer to Google's privacy policy for information on the handling of user data at Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en.

Objection to data collection

You can block the collection of your data by clicking on the following link: Opt out of data collection.
An opt-out cookie will be set. This cookie will prevent the collection of your data during future visits to this website using your current browser.

X. ONLINE ADVERTISING

1. Google AdSense

1.1 This website uses the online advertising service Google AdSense, which allows us to present you with advertisements tailored to your interests. Our aim is to show you advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements can be identified by the label ‘Google Ads’ in the respective advertisement.


1.2 When you visit our website, Google receives information that you have accessed our website. Google uses a web beacon to place a cookie on your computer. The data specified in section III of this statement is transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data is transferred to the USA and evaluated there. If you are logged in with your Google account, your data can be directly assigned to it. If you do not want your data to be assigned to your Google profile, you must log out. It is possible that this data may be passed on to third parties and authorities by Google's contractual partners. The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. This website does not display third-party advertisements via Google AdSense.


1.3 You can prevent the installation of Google AdSense cookies in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements; b) by deactivating interest-based advertising on Google via the link http://www.google.de/ads/preferences, although this setting will be deleted if you delete your cookies; c) by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.


1.4 Further information on the purpose and scope of data collection and processing, as well as further information on your rights in this regard and settings options for protecting your privacy, can be obtained from: Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; Advertising privacy policy: http://www.google.de/intl/de/policies/technologies/ads. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.


2. Google AdWords Conversion

2.1 We use Google AdWords to draw attention to our attractive offers on external websites with the help of advertising material (known as Google AdWords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

2.2 These advertising materials are delivered by Google via so-called ‘ad servers’. For this purpose, we use ad server cookies, which allow certain parameters for measuring success, such as the display of advertisements or clicks by users, to be measured. If you access our website via a Google advertisement, Google Adwords will store a cookie on your computer. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted) are usually stored as analysis values for this cookie.

2.3 These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

2.4 Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address.

2.5 You can prevent participation in this tracking process in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain ‘www.googleadservices.com’, https://www.google.de/settings/ads, although this setting will be deleted when you delete your cookies; c) by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, although this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.

2.6 The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

3. Google Remarketing

In addition to AdWords Conversion, we use the Google Remarketing application. This is a process we use to target you again. This application allows us to display our advertisements to you when you continue to use the internet after visiting our website. This is done using cookies stored in your browser, which Google uses to record and evaluate your usage behaviour when you visit various websites. This allows Google to detect your previous visit to our website. According to Google, the data collected as part of remarketing is not merged with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

4. Processing of IP Addresses for Advertising Purposes

4.1 When Google advertising services are used, Google processes IP addresses that are automatically transmitted when you use our website (e.g. via embedded tags and HTTP requests). In addition to technical provision and abuse and fraud prevention, Google also uses these IP addresses to recognise devices for measuring advertising effectiveness and, subject to your consent, for the personalisation of advertising. According to Google, privacy-enhancing technologies are used for this purpose, such as on-device processing, trusted execution environments and secure multi-party computation.

 

4.2 IP addresses are personal data within the meaning of the GDPR. Processing for the purposes of advertising measurement and personalisation takes place exclusively on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR, which you can give via our consent banner. You can revoke your consent at any time with effect for the future by reopening the cookie settings on this website and adjusting your selection.

 

4.3 The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Personal data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR).

 

4.4 Further information on how Google processes data from websites and apps that use Google services can be found at: https://policies.google.com/technologies/partner-sites. Information on Google's use of IP addresses can be found at: https://policies.google.com/technologies/ip-address and in Google's privacy policy: https://policies.google.com/privacy

XI. PLUGINS AND TOOLS

1. Google Fonts

1.1 On this website, we use Google Fonts to ensure the uniform display of fonts provided by Google. This serves to ensure the appealing presentation of our website and constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.


1.2 When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in III. of this declaration is transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

1.3 Further information on the purpose and scope of data collection and its processing by the provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.


2. Google Maps

2.1 We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

2.2 When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in III. of this declaration is transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

2.3 Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

3. YouTube

3.1 We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in ‘extended data protection mode’, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transferred. We have no influence on this data transfer.

3.2 When you visit the website, YouTube receives information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in III. of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this assignment to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

3.3 Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

XII. SOCIAL MEDIA BUTTONS

Our website uses social media buttons from social networks.

This serves to safeguard our legitimate interests in the optimal marketing of our offering in accordance with Art. 6(1)(f) GDPR, which prevail in the context of a balancing of interests. In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page as plugins without restriction, but only using an HTML link. This integration ensures that when you visit a page on our website that contains such buttons, no connection is established with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, where you can (after entering your login data, if necessary) click on the Like or Share button, for example.

For the purpose and scope of data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your rights in this regard and setting options for protecting your privacy, please refer to the providers' privacy policies:

  • Facebook Inc., http://www.facebook.com/policy.php
  • Instagram Inc., https://instagram.com/about/legal/privacy/

XIII. DATA PROCESSING FOR CONTRACTUAL PURPOSES

1. Purpose of data processing

We only process our customers' personal data (in particular their name, address, email address and telephone number) to the extent necessary for the provision of our services (contractual and pre-contractual obligations).

2. Legal basis for data processing

When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company (enforcement of contractual claims) or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing.

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.

3. Data transfer

Personal data will only be transferred to third parties on your behalf and/or with your consent. We may pass on personal data within the scope of the service contract to the following recipients, for example: Processors (hosting providers, IT service providers, etc.) whose services we use. The legal basis for these transfers is Art. 6 (1) (b), Art. 6 (1) (f) and Art. 6 (1) (a) GDPR.


4. Duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

XIV. RIGHTS OF THE DATA SUBJECT

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent to data protection (Art. 7(3) GDPR); withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

There is no limit when it comes to giving a child the best start in life. Become part of the MOON family and experience how our sophisticated products support you in your everyday life. Join us in shaping your little one's future brightly and safely – and experience how precious every shared moment can be!

Contact

MOON GmbH
Maierhof 2, 94167 Tettenweis

Hotline: +49 (0) 8532 9243 0

E-Mail: