Privacy Policy

1. Personal Data Controller

1.1 The personal data controller is Lunari Moda, located at:
Unit 2A, 17/F Glenealy Tower, No.1 Glenealy, Central, Hong Kong.

1.2 Data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Personal Data Protection Act.

2. Source of personal data

2.1 Personal data is obtained directly from Users as a result of using services offered by Lunari Moda via the website.

3. Purposes and legal bases of data processing

3.1 Personal data is processed for purposes necessary to perform a contract or take steps before entering into a contract (Art. 6(1)(b) GDPR), including:

  • 3.1.1 order and payment processing,

  • 3.1.2 creating and managing the User's account,

  • 3.1.3 technical and administrative account support,

  • 3.1.4 handling complaints,

  • 3.1.5 contacting the User regarding service-related matters.

3.2 Data is also processed based on a legal obligation incumbent on the controller (Art. 6(1)(c) GDPR), e.g.:

  • 3.2.1 tax and accounting obligations.

3.3 With the User's consent (Art. 6(1)(a) GDPR), data is processed for the purpose of:

  • 3.3.1 sending commercial and marketing information electronically,

  • 3.3.2 preparing offers tailored to interests (profiling).

3.4 Lunari Moda also processes data based on legitimate interest (Art. 6(1)(f) GDPR), including for the purpose of:

  • 3.4.1 direct marketing,

  • 3.4.2 IT security assurance and fraud prevention,

  • 3.4.3 claims investigation and defense,

  • 3.4.4 data storage for archival and accountability purposes,

  • 3.4.5 statistical analysis and service optimization.

4. Scope of processed data

4.1 Lunari Moda may process the following personal data:

  • first and last name,

  • residential and correspondence address,

  • email address,

  • tax identification number (if applicable),

  • IP address,

  • transaction data.

5. Data recipients

5.1 Data may be transferred to:

  • 5.1.1 to payment operators (e.g., PayLane Sp. z o.o.),

  • 5.1.2 to companies servicing IT systems or accounting – based on a data processing agreement,

  • 5.1.3 to public authorities – when required by law.

6. Data transfer outside the EEA

6.1 Personal data is not transferred outside the European Economic Area, except when service providers are located outside the EEA and provide appropriate safeguards in accordance with Article 46 of the GDPR.

7. Data retention period

7.1 Data is stored for the period:

  • 7.1.1 for the duration of the contract and as required by law,

  • 7.1.2 until consent is withdrawn (in case of processing based on it),

  • 7.1.3 for the time necessary to pursue or defend claims.

8. Rights of the data subject

8.1 The user has the right to:

  • 8.1.1 access to data,

  • 8.1.2 data rectification,

  • 8.1.3 data deletion ("right to be forgotten"),

  • 8.1.4 restriction of processing,

  • 8.1.5 data portability,

  • 8.1.6 objecting to processing,

  • 8.1.7 withdrawing consent at any time,

  • 8.1.8 lodging a complaint with the President of the Personal Data Protection Office.

9. Automated data processing and profiling

9.1 User data may be processed in an automated manner, including profiling – e.g., to tailor offers.

10. Voluntariness of providing data

10.1 Providing personal data is voluntary but necessary to conclude and perform the contract or to use certain functionalities of the service.

11. Contact

For matters related to personal data protection, please contact:
info@lunarimoda.com

Company address:
Lunari Fashion
Unit 2A, 17/F Glenealy Tower
No.1 Glenealy, Central
Hong Kong