Last updated: August 9, 2026
This page supplements the Luna Tails Privacy Policy and should be read together with it. It provides additional information about how Luna Tails processes personal data under the EU General Data Protection Regulation (GDPR/AVG).
Data Controller
Luna Tails is the controller responsible for the personal data described in this notice.
Luna Tails
De Windturbine 7
3815 KP Amersfoort
Netherlands
Email: shoplunatails@gmail.com
Legal Bases for Processing
Where the GDPR applies, Luna Tails processes personal data only where there is a valid legal basis.
Performance of a contract
We process personal data where necessary to process and fulfil your order, take or facilitate payment, personalise your Birthday Box, arrange delivery, manage your customer account and provide customer service relating to your purchase.
Legal obligations
We process and retain certain information where necessary to comply with Dutch tax, accounting, consumer-protection and other legal obligations.
Legitimate interests
Where appropriate, we may process personal data where necessary for our legitimate interests in operating and protecting Luna Tails, maintaining the security and integrity of our store, preventing and investigating fraud, responding to enquiries, and establishing, exercising or defending legal claims. We rely on legitimate interests only where those interests are not overridden by your rights and freedoms.
Consent
Where required, we rely on your consent for activities such as sending marketing communications and using non-essential cookies or similar technologies for analytics, personalisation or advertising. You may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Retention of Personal Data
We keep personal data only for as long as necessary for the purpose for which it was collected and to meet applicable legal obligations.
Order, transaction, invoice and other information that forms part of our legally required business administration may be retained for 7 years in accordance with Dutch tax and accounting requirements.
Marketing information is retained until you unsubscribe, withdraw your consent, or the information is otherwise no longer required for the relevant marketing purpose.
Customer-account, enquiry and customer-service information is retained while needed to provide the relevant service and afterwards only for as long as reasonably necessary for administration, legal obligations, dispute resolution or the establishment, exercise or defence of legal claims.
Where personal information is no longer required, it will be deleted or anonymised where reasonably possible, subject to applicable legal retention obligations.
Your GDPR Rights
Where the GDPR applies, you may have the right to request access to your personal data, correction of inaccurate data, deletion of your data, restriction of processing, data portability, or to object to certain processing.
Where processing is based on consent, you may withdraw that consent at any time.
These rights may be subject to exceptions provided by law. For example, we may need to retain certain order or transaction information even after a deletion request where Dutch law requires us to retain that information.
To exercise your rights, contact shoplunatails@gmail.com. We may ask for information necessary to verify your identity before processing your request.
Complaints
If you have a concern about how Luna Tails processes your personal data, please contact us first so that we can review your concern.
You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority, or with another competent supervisory authority where applicable.
Contact
For questions about privacy, this notice, or the exercise of your privacy rights, contact:
Luna Tails
De Windturbine 7
3815 KP Amersfoort
Netherlands
Email: shoplunatails@gmail.com