Moon Ideas, the company behind Fantasy Forts, cares a lot about your privacy. We therefore only process data that we need for (improving) our services and handle carefully the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.

This privacy policy applies to the use of the website and the service provided by Maan Ideeën. The effective date for the validity of these terms is 10/09/2020, with the publication of a new version voiding the validity of all previous versions. This privacy policy describes what information about you is collected by us, what this data is used for, and with whom and under what conditions this information may be shared with third parties. We also explain to you how we store your data and how we protect your data from misuse and what rights you have with regard to the personal data you provide to us.

If you have any questions about our privacy policy, please contact our privacy contact for privacy matters, you will find the contact information at the end of our privacy policy.

About data processing

Below you can read how we process your data, where we store it, what security techniques we use and for whom the data is insightful.

Quist ICT

We take web hosting and email services from Quist ICT. Quist ICT processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata on the use of the services. These are not personal data. Quist ICT has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Quist ICT is required to maintain confidentiality under the agreement.

Gmail

We use Gmail’s services for our regular business email traffic. This Party has taken appropriate technical and organisational measures to prevent the misuse, loss and corruption of your and our data as much as possible. Gmail does not have access to our inbox and we treat all our email traffic confidentially.

Payment processor Stripe

To handle a (part of) the payments in our online store, we use stripe’s platform. Stripe processes your name, address and residence information and your payment details such as your bank account or credit card number. Stripe has taken appropriate technical and organizational measures to protect your personal data. Stripe reserves the right to use your data to further improve the service and to share (anonymised) data with third parties. In the case of an application for a deferred payment (credit facility), Stripe shares personal data and information relating to your financial position with credit rating agencies. All of the above-mentioned safeguards relating to the protection of your personal data also apply to the components of Stripe’s services for which they engage third parties. Stripe does not keep your data for longer than permitted by the legal deadlines.

Online shopKeur

We collect reviews through the webwinkelKeur platform. If you leave a review via WebwinkelKeur then you are obliged to provide a name and email address. WebwinkelKeur shares this information with us, so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to provide an explanation of your review. In case we invite you to leave a review, we will share your name and email address with WebwinkelKeur. They only use this data for the purpose of inviting you to leave a review.

WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the purpose of providing the service, for this we have given webwinkelKeur permission. All the above mentioned safeguards regarding the protection of your personal data also apply to the components of the service for which WebwinkelKeur engages third parties.

Arvato Financial Services

This is a payment processing service payment product AfterPay.

Processing company

Arvato Payment Solutions GmbH

Gütersloher Str. 123 in 33415 Verl, Germany

Purposes of the processing

This list represents the purposes of data collection and processing.

• Verification of identity
• Verification of creditworthiness
• Execution of the contract

Data collected

This list reflects all (personal) data collected by or through the use of this service.

• Name
• IP address
• Date and time of visit
• Date of birth
• Address
• Payment information
• Financial information
• E-mail address

Legal basis

The required legal basis for the processing of data is set out below.

• Art. 6 par. 1 sentence 1 lit. f GDPR

Location of processing

European Union

Duration of retention

The retention period is the time period during which the collected data is stored for the purposes of processing. The data must be deleted as soon as it is no longer needed for the stated processing purposes. The data are deleted as soon as they are no longer needed for processing purposes.

Data Protection Officer of Processing Company

Please find below the e-mail address of the data protection officer of the processing company.

datenschutz@afterpay.de

Click here to read the data processor’s cookie policy https://documents.myafterpay.com/tnp/privacy-statement/de_de/

Shipping and logistics

If you place an order with us, it is our job to have your package delivered to you. We use dpd’s services to carry out the deliveries. It is necessary that we share your name, address and residence details with DPD. DPD uses this data only for the purpose of executing the agreement. In the event that DPD engages subcontractors, DPD will also make your data available to these parties.

General purpose of processing

We use your data exclusively for the purposes of our services. This means that the purpose of the processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share information with us and we use this information to contact you at a later date, unlike at your request, we will ask you explicitly for permission to do so. Your data will not be shared with third parties, other than to meet accounting and other administrative obligations. These third parties are all held to secrecy under the agreements between them and us or an oath or legal obligation.

Automatically collected data

Data that is automatically collected by our website is processed with the aim of further improving our services. This data (e.g. your IP address, web browser and operating system) is not personal data.

Cooperation in tax and criminal investigations

Where appropriate, Moon Ideas may be required by law to share your data in connection with government tax or criminal investigations. In such a case, we will be forced to share your data, but we will oppose it within the possibilities offered by the law.

Retention periods

We will keep your data for as long as you are our client. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also take this as a forgettable request. Due to applicable administrative obligations, we are required to keep invoices with your (personal) data, so we will keep this information for as long as the applicable period expires. However, employees no longer have access to your client profile and documents that we have produced as a result of your assignment.

Your rights

Under current Dutch and European law, you as a data subject have certain rights with regard to the personal data processed by or on our behalf. Below we will explain what these rights are and how you can invoke these rights. In principle, in order to prevent misuse, we only send copies and copies of your data to your already known email address. In the event that you wish to receive the data at another email address or for example by post, we will ask you to legitimize yourself. We keep an administration of processed requests, in the case of a forget request we administer anonymized data. All copies and copies of data are received in the machine-readable data format that we use within our systems. You have the right to file a complaint with the Dutch Data Protection Authority at any time if you suspect that we are using your personal data in the wrong way.

Inza court

You always have the right to view the data that we (have) processed that relate to your person or can be traced back to it. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors who have this information at our known email address, indicating the category under which we have stored this data.

Right of rectification

You always have the right to have the data that we (have) processed that relate to your person or can be traced back to it. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been changed at the email address known to us.

Right to restrict processing

You always have the right to limit the data that we (have) processed that relate to your person or can be traced back to it. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address known to us that the data will no longer be processed until you lift the restriction.

Right to transferability

You always have the right to have the data that we (have) processed that relate to your person or can be traced back to it, by another party. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of any information about you that we have processed or have been processed by other processors or third parties on our behalf. In all likelihood, in such a case, we will no longer be able to continue the service, because the secure linking of data files can no longer be guaranteed.

Right of objection and other rights

You have the right, where appropriate, to object to the processing of your personal data by or on behalf of Moon Ideas. If you object, we will immediately cease data processing pending the settlement of your objection. Is your objection well founded that we will make copies and/or copies of data that we (have) processed available to you and then permanently cease the processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our contact person for privacy matters.

Cookies

Google Analytics

Through our website, cookies are placed from the American company Google, as part of the “Analytics” service. We use this service to track and get reports on how visitors use the website. This processor may be required to provide access to this data under applicable laws and regulations. We have not allowed Google to use the analytics information obtained for other Google services.

Third-party cookies

In the event that third-party software solutions use cookies, this is stated in this privacy statement.

Privacy policy changes

We reserve the right to change our privacy policy at all times. However, on this page you will always find the latest version. If the new privacy policy affects the way in which we process already collected data in relation to you, we will notify you by email.

Contact information

Moon Ideas

Kolkweg 20, 7396AH Terwolde (NL)

Telephone (00316) 1966-9294

mail@fantasy-forts.com

Privacy Contact

Marco van den Berg