Moon Ideas, the company behind Fantasy Forts, cares a lot about your privacy. We therefore only process data that we need for (improving) our services and handle carefully the information we have collected about you and your use of our services. We never make your data available to third parties for commercial purposes.
About data processing
Below you can read how we process your data, where we store it, what security techniques we use and for whom the data is insightful.
We take web hosting and email services from Quist ICT. Quist ICT processes personal data on our behalf and does not use your data for its own purposes. However, this party may collect metadata on the use of the services. These are not personal data. Quist ICT has taken appropriate technical and organizational measures to prevent loss and unauthorized use of your personal data. Quist ICT is required to maintain confidentiality under the agreement.
We use Gmail’s services for our regular business email traffic. This Party has taken appropriate technical and organisational measures to prevent the misuse, loss and corruption of your and our data as much as possible. Gmail does not have access to our inbox and we treat all our email traffic confidentially.
Payment processor Stripe
To handle a (part of) the payments in our online store, we use stripe’s platform. Stripe processes your name, address and residence information and your payment details such as your bank account or credit card number. Stripe has taken appropriate technical and organizational measures to protect your personal data. Stripe reserves the right to use your data to further improve the service and to share (anonymised) data with third parties. In the case of an application for a deferred payment (credit facility), Stripe shares personal data and information relating to your financial position with credit rating agencies. All of the above-mentioned safeguards relating to the protection of your personal data also apply to the components of Stripe’s services for which they engage third parties. Stripe does not keep your data for longer than permitted by the legal deadlines.
We collect reviews through the webwinkelKeur platform. If you leave a review via WebwinkelKeur then you are obliged to provide a name and email address. WebwinkelKeur shares this information with us, so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to provide an explanation of your review. In case we invite you to leave a review, we will share your name and email address with WebwinkelKeur. They only use this data for the purpose of inviting you to leave a review.
WebwinkelKeur has taken appropriate technical and organizational measures to protect your personal data. WebwinkelKeur reserves the right to engage third parties for the purpose of providing the service, for this we have given webwinkelKeur permission. All the above mentioned safeguards regarding the protection of your personal data also apply to the components of the service for which WebwinkelKeur engages third parties.
Arvato Financial Services
This is a payment processing service payment product AfterPay.
Arvato Payment Solutions GmbH
Gütersloher Str. 123 in 33415 Verl, Germany
Purposes of the processing
This list represents the purposes of data collection and processing.
- Verification of identity
- Verification of creditworthiness
- Execution of the contract
This list reflects all (personal) data collected by or through the use of this service.
- IP address
- Date and time of visit
- Date of birth
- Payment information
- Financial information
- E-mail address
The required legal basis for the processing of data is set out below.
- Art. 6 par. 1 sentence 1 lit. f GDPR
Location of processing
Duration of retention
The retention period is the time period during which the collected data is stored for the purposes of processing. The data must be deleted as soon as it is no longer needed for the stated processing purposes. The data are deleted as soon as they are no longer needed for processing purposes.
Data Protection Officer of Processing Company
Please find below the e-mail address of the data protection officer of the processing company.
Shipping and logistics
If you place an order with us, it is our job to have your package delivered to you. We use dpd’s services to carry out the deliveries. It is necessary that we share your name, address and residence details with DPD. DPD uses this data only for the purpose of executing the agreement. In the event that DPD engages subcontractors, DPD will also make your data available to these parties.
General purpose of processing
We use your data exclusively for the purposes of our services. This means that the purpose of the processing is always directly related to the assignment you provide. We do not use your data for (targeted) marketing. If you share information with us and we use this information to contact you at a later date, unlike at your request, we will ask you explicitly for permission to do so. Your data will not be shared with third parties, other than to meet accounting and other administrative obligations. These third parties are all held to secrecy under the agreements between them and us or an oath or legal obligation.
Automatically collected data
Data that is automatically collected by our website is processed with the aim of further improving our services. This data (e.g. your IP address, web browser and operating system) is not personal data.
Cooperation in tax and criminal investigations
Where appropriate, Moon Ideas may be required by law to share your data in connection with government tax or criminal investigations. In such a case, we will be forced to share your data, but we will oppose it within the possibilities offered by the law.
We will keep your data for as long as you are our client. This means that we will keep your customer profile until you indicate that you no longer wish to use our services. If you indicate this to us, we will also take this as a forgettable request. Due to applicable administrative obligations, we are required to keep invoices with your (personal) data, so we will keep this information for as long as the applicable period expires. However, employees no longer have access to your client profile and documents that we have produced as a result of your assignment.
Under current Dutch and European law, you as a data subject have certain rights with regard to the personal data processed by or on our behalf. Below we will explain what these rights are and how you can invoke these rights. In principle, in order to prevent misuse, we only send copies and copies of your data to your already known email address. In the event that you wish to receive the data at another email address or for example by post, we will ask you to legitimize yourself. We keep an administration of processed requests, in the case of a forget request we administer anonymized data. All copies and copies of data are received in the machine-readable data format that we use within our systems. You have the right to file a complaint with the Dutch Data Protection Authority at any time if you suspect that we are using your personal data in the wrong way.
You always have the right to view the data that we (have) processed that relate to your person or can be traced back to it. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a copy of all data with an overview of the processors who have this information at our known email address, indicating the category under which we have stored this data.
Right of rectification
You always have the right to have the data that we (have) processed that relate to your person or can be traced back to it. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation that the data has been changed at the email address known to us.
Right to restrict processing
You always have the right to limit the data that we (have) processed that relate to your person or can be traced back to it. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you a confirmation at the email address known to us that the data will no longer be processed until you lift the restriction.
Right to transferability
You always have the right to have the data that we (have) processed that relate to your person or can be traced back to it, by another party. You can make a request to our privacy contact for privacy matters. You will receive a response to your request within 30 days. If your request is granted, we will send you copies or copies of any information about you that we have processed or have been processed by other processors or third parties on our behalf. In all likelihood, in such a case, we will no longer be able to continue the service, because the secure linking of data files can no longer be guaranteed.
Right of objection and other rights
You have the right, where appropriate, to object to the processing of your personal data by or on behalf of Moon Ideas. If you object, we will immediately cease data processing pending the settlement of your objection. Is your objection well founded that we will make copies and/or copies of data that we (have) processed available to you and then permanently cease the processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe that this is the case, please contact our contact person for privacy matters.
Through our website, cookies are placed from the American company Google, as part of the “Analytics” service. We use this service to track and get reports on how visitors use the website. This processor may be required to provide access to this data under applicable laws and regulations. We have not allowed Google to use the analytics information obtained for other Google services.
Kolkweg 20, 7396AH Terwolde (NL)
Telephone (00316) 1966-9294
Marco van den Berg