Lunar Shows · Lycopodium Webshop

Privacy Policy

Version August 2026 · Applies to shop.lunarshows.com

Your privacy matters to usWe process your personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains which data we collect, why, how long we keep it, and what rights you have.

Art. 1

Who is responsible for your data?

The data controller within the meaning of the GDPR is:

Name: Manuel Maes, trading as Lunar Shows
Country of establishment: The Netherlands
Chamber of Commerce (KvK): 74317032
VAT number: NL002467974B46
Email: info@lunarshows.com

Art. 2

Which data do we collect and why?

We only process the personal data that is necessary for the purposes listed below. The legal bases for processing are: performance of a contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR), and where applicable your consent (Art. 6(1)(a) GDPR).

Purpose	Data	Legal basis	Retention period
Processing your order	Name, email address, shipping address, phone number, order history	Contract	7 years (statutory retention obligation)
Payment processing	Payment details (processed by our payment provider, see Art. 4)	Contract	7 years
Customer service	Name, email address, message content	Contract / legitimate interest	2 years after completion
Customer account (optional)	Email address, name, password (encrypted), address details	Consent / contract	Until the account is deleted
Newsletter (optional)	Email address, name	Consent	Until you unsubscribe
Analytics cookies	Anonymised usage data (pages, session duration)	Consent	26 months

We never use your data for purposes other than those listed above, and we never sell your data to third parties.

Art. 3

Cookies

Our webshop uses cookies. We distinguish the following types:

Functional cookies: Necessary for the shopping cart, login status and order processing to work. These cookies do not require consent.
Analytics cookies: We use Google Analytics to measure how the webshop is used (anonymised). These cookies are only placed after you give consent via our cookie banner.

You can withdraw your cookie consent at any time via the cookie settings at the bottom of the page, or by changing your browser settings.

Art. 4

Third parties with access to your data

We share your personal data with the following categories of third parties, only insofar as necessary to process your order:

Payment provider, Stripe: Your payment details are processed by Stripe (stripe.com), our payment provider. Stripe supports iDEAL, credit card, debit card and PayPal. We do not have access to your full payment details ourselves. Stripe is certified to PCI DSS Level 1. See stripe.com/privacy for Stripe's privacy policy.
Logistics provider: Your name and delivery address are shared with PostNL to deliver your parcel.
Hosting provider: The webshop runs on WordPress/WooCommerce, hosted on a server in the EU.
Email service: Order confirmations and notifications are sent via our email provider.

Data processing agreements in line with the GDPR have been concluded with all service providers that process personal data on our behalf. We do not share data with parties outside the European Economic Area (EEA) unless appropriate safeguards are in place.

Art. 5

Security of your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These include:

SSL/TLS encryption of all data connections (https://)
Encryption of passwords in the database
Restricted access to personal data, only for staff who need it
Regular security updates of the system

Do you suspect a data breach? Contact us immediately via info@lunarshows.com.

Art. 6

Your rights as a data subject

Under the GDPR you have the following rights regarding your personal data:

Right of access: You can request which data we process about you.
Right to rectification: You can have incorrect data corrected or completed.
Right to erasure: You can ask us to delete your data, unless statutory retention obligations prevent this.
Right to restriction: You can ask us to temporarily stop processing, for example during a dispute.
Right to data portability: You can request your data in a machine-readable format.
Right to object: You can object to processing based on legitimate interest, including direct marketing.

To submit a request, send an email to info@lunarshows.com with the subject "GDPR request". We will respond within 4 weeks. We may ask for a copy of your ID for verification. Please make your national ID number and passport photo unreadable.

Withdrawing consent

Have you given consent for newsletters or analytics cookies? You can withdraw this consent at any time without giving a reason, via the unsubscribe link in the newsletter or via the cookie settings on the website.

Art. 7

Filing a complaint

Do you believe we do not process your personal data in accordance with the GDPR? Please contact us first via info@lunarshows.com. We are happy to resolve it.

You also have the right to file a complaint with the supervisory authority:

Supervisory authority: Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Website: autoriteitpersoonsgegevens.nl
Phone: +31 88 1805 250

Art. 8

Changes to this privacy policy

We reserve the right to change this privacy policy. The most recent version is always available at shop.lunarshows.com/en/privacybeleid. Significant changes will be communicated to existing customers by email.

This policy was last updated in August 2026.