GDPR – Privacy and Cookies Policy

1. Data controller

2. What data we may collect

Depending on how the site is used, we may process the following categories of data:

• Identification data: first name, surname, username, customer account identification.
• Contact data: email, telephone, billing and/or delivery address.
• Order data: products purchased, amounts, order status, purchase history, downloads and invoices.
• Payment data: transaction information processed by external providers such as Stripe or PayPal. We do not store full card details.
• Technical data: IP address, browser, device, language, pages visited, access date/time and technical identifiers.
• Communication data: messages sent through the contact form, emails, support requests and complaints.
• Newsletter data: email, subscription status, consent, subscription date and interaction with communications, if applicable.
• Cookies and identifiers: necessary, functional, statistical or marketing cookies, according to the user’s preferences.

3. What we use the data for

Personal data may be used to:

• process orders and payments;
• deliver physical products or make digital products available;
• create and manage customer accounts;
• issue confirmations, receipts, invoices or order documents;
• respond to contact, support or complaint requests;
• manage returns, refunds and warranties;
• send newsletters if the user has subscribed;
• improve the operation, security and performance of the site;
• comply with legal, tax, accounting and administrative obligations;
• prevent fraud, abuse, spam or misuse of the site.

4. Legal bases for processing

Data processing may be based on:

• Performance of a contract: management of orders, payments, delivery, downloads, customer account and after-sales support.
• Compliance with a legal obligation: tax, accounting and legal obligations.
• Legitimate interest: site security, fraud prevention, responses to requests, technical maintenance and service improvement.
• Consent: newsletter, non-essential cookies, marketing or optional features.

5. Providers and third parties

To operate the site and provide services, we may use external providers that process data on our behalf or as independent controllers, as applicable.

• Stripe and PayPal: payment processing.
• Hostinger: website hosting.
• CookieYes: cookie consent management.
• POST Luxembourg / Mondial Relay / carriers: delivery of physical products, if applicable.
• Instagram / Meta: display of social content or link to the Instagram profile, if active.
• Newsletter services: sending newsletters, if used.
• Analytics or marketing tools: only if activated and according to applicable consent.

6. International transfers

Some providers may process data outside the European Economic Area. Where this occurs, appropriate safeguards will be applied under the GDPR, such as standard contractual clauses, adequacy decisions or other legally provided mechanisms.

7. Retention period

Data is kept only for the time necessary for the purposes described:

• Order and billing data: for the period required by legal, tax and accounting obligations.
• Customer account: while the account is active or until a deletion request, subject to legal obligations.
• Contact messages: for the time necessary to handle the request and keep a reasonable support history.
• Newsletter: until the user unsubscribes or withdraws consent.
• Cookies: according to the duration indicated in the cookie table or consent tool.

8. User rights

Under the GDPR, the user may exercise the following rights:

• right of access to their data;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent where processing is based on consent;
• right to lodge a complaint with the competent supervisory authority.

To exercise these rights, contact: info@moienmoney.com.

The competent supervisory authority in Luxembourg is the CNPD – Commission Nationale pour la Protection des Données.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including HTTPS/SSL connection, access control, data minimisation, technical updates and measures to prevent unauthorised access.

No system is completely immune to risks. In the event of a relevant incident, the necessary measures will be taken in accordance with applicable law.

10. Commercial communications and newsletter

The user may subscribe to the newsletter to receive content, news, tips, free materials or promotional communications. Subscription is voluntary.

The user may unsubscribe at any time through the link in the emails or by contacting us directly.

11. What are cookies?

Cookies are small files stored on the user’s device when visiting a website. They may be necessary for the site to function or used for features, statistics or marketing, as applicable.

12. Categories of cookies used

• Necessary cookies: essential for the operation of the site, cart, session, security and consent.
• Functional cookies: allow improvement of features, preferences or integration with external services.
• Statistical cookies: help understand site usage, if enabled.
• Marketing cookies: used for measurement, remarketing or personalised content, only if enabled and consented to.

13. Consent management

On first access to the site, the user may accept, refuse or configure non-essential cookies through the cookie banner.

The user may change their cookie preferences at any time through the options provided by the banner or the site’s consent management tool.

14. Indicative cookie table

15. How to disable cookies in the browser

In addition to the options provided on the site, the user may configure their browser to block, delete or limit cookies. Disabling necessary cookies may affect the operation of the cart, checkout, login or other essential features.

16. Purchases, customer account and order data

To process an order, we collect the data necessary for performance of the contract, including identification, contact, billing/delivery address, products purchased and order status.

For digital products, technical information relating to access or download may be recorded to ensure delivery of the product and provide support.

17. Changes to this policy

This policy may be updated to reflect legal, technical or operational changes. The version published on this page is the version in force.

18. Contact

For any question relating to personal data, privacy or cookies, contact:

Email: info@moienmoney.com