Privacy policy

Privacy Policy

Last updated: October 16, 2025

This Privacy Policy describes how ASTRUMOON collects, uses, and shares your personal data when you visit www.astrumoon.store, use our services, make a purchase, or otherwise interact with us.

For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of our services, whether you are a customer, a website visitor, or another person whose information we collect in accordance with this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised version, update the “Last Updated” date, and take any further steps required by law.

In addition to the specific purposes listed below, we may use the information we collect about you to communicate with you, provide or improve our services, comply with legal obligations, enforce applicable terms of service, and protect or defend our services, our rights, and the rights of our users or others.

Please read this Privacy Policy carefully.

1. Data Controller

Jamie Aniser
An der Stadtmauer 11
87435 Kempten, Germany
Email: info@astrumoon.com

2. Collection and Use of Personal Data

We collect the following personal data:

When visiting our website: IP address, browser type, visited pages, access time
When placing an order or registering: name, address, email, phone number, payment information
When contacting us: name, email address, and any additional information you provide

Legal bases for processing:

Art. 6(1)(b) GDPR – performance of a contract
Art. 6(1)(a) GDPR – consent (e.g., for newsletters or marketing cookies)
Art. 6(1)(f) GDPR – legitimate interests (e.g., improving our services or IT security)

3. Storage and Deletion of Personal Data

We store personal data only as long as necessary for the respective purpose or as required by law:

Order data: 10 years (tax and commercial retention obligations)
Contact data: 2 years after the last interaction
Newsletter data: until consent is withdrawn

Data will be deleted once it is no longer required for the stated purpose, provided there are no statutory retention obligations.

4. Sharing of Data with Third Parties

We only share personal data when:

it is necessary for contract fulfillment (e.g., payment or shipping providers),
a legal obligation exists, or
there is a legitimate interest (e.g., fraud prevention).

Recipients may include:

Shopify Inc. (E-commerce platform, based in Canada)
Payment service providers (e.g., PayPal, Stripe, Klarna)
Shipping companies (e.g., DHL, UPS, DPD)
Marketing partners within the EU (e.g., Meta Platforms Ireland Ltd., Google Ireland Ltd.)

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for:

Essential functions (e.g., shopping cart, login)
Analytics (e.g., improving the user experience)
Marketing (e.g., personalized ads via Google Ads or Meta Pixel)

You can manage your cookie preferences via our consent banner.
You may withdraw or modify your consent at any time.

For more information, please refer to our separate Cookie Policy (if available).

6. Data Transfers to Third Countries

Personal data may be transferred to countries outside the EU (e.g., Canada, USA) only if:

there is an adequacy decision by the EU Commission, or
appropriate safeguards under Art. 46 GDPR (e.g., EU Standard Contractual Clauses) are in place.

Shopify processes data in Canada and the USA; both countries provide adequate or safeguarded data protection standards in accordance with the GDPR.

7. Your Rights as a Data Subject

You have the right to:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to certain processing (Art. 21 GDPR)

You may withdraw your consent to data processing at any time.

Right to lodge a complaint:
You have the right to file a complaint with your national data protection authority.
In Germany, this is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach, Germany
poststelle@lda.bayern.de

If you reside in another EU Member State, you may alternatively contact your local data protection authority.
(A list is available here: https://edpb.europa.eu/about-edpb/about-edpb/members_en)