Privacy Policy

1. Introduction

Welcome to Moana Natura. We are committed to protecting your personal data and your privacy. This Privacy Policy explains how BMM Europe s.r.o. collects, uses, and protects your information when you visit moananatura.com and purchase our products.

We process your personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR).

2. Data Controller

The party responsible for the processing of your data (the "Controller") is:

3. What Data We Collect

We collect several different types of information for various purposes to provide and improve our service to you.

A. Information You Provide to Us

When you place an order, subscribe to a newsletter, or contact us, you may provide:

• Identity Data: Name, surname.
• Contact Data: Billing address, shipping address, email address, phone number.
• Financial Data: Payment information (Note: We do not store full credit card details; these are processed directly by our secure payment providers).

B. Information We Collect Automatically

When you visit our website, we may automatically collect technical data regarding your device and usage, including:

• IP address
• Browser type and version
• Time zone setting
• Pages you viewed and links you clicked

4. Legal Basis and Purpose of Processing

Under GDPR Article 6, we process your data based on the following legal grounds:

• Performance of a Contract: We need your name, address, and payment info to process your order, deliver products, and handle returns.
• Legal Obligation: We are required by Slovak tax and accounting laws to keep records of invoices and transactions (usually for 10 years).
• Consent: If you subscribe to our newsletter, we process your email based on your explicit consent. You can withdraw this at any time.
• Legitimate Interest: We use data to improve our website security, prevent fraud, and analyze customer trends to improve our offerings.

5. Sharing Your Data

We do not sell your personal data. We only share it with third parties necessary to provide our services ("Processors"), strictly under data protection agreements:

• Logistics/Shipping Partners: To deliver your package (e.g., Slovak Post, DHL, Packet/Zásielkovňa).
• Payment Gateways: To process secure payments (e.g., Stripe, PayPal, GoPay).
• IT & Hosting Services: Providers who host our website and maintain our servers.
• Accounting Services: External accountants processing our tax obligations.

6. Data Retention

We will strictly retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy.

• Order Data: Retained for the duration required by tax and accounting laws (typically 10 years in Slovakia).
• Marketing Data: Retained until you unsubscribe or withdraw consent.

7. Your Rights Under GDPR

As a user in the EU/EEA, you have specific rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data where it is no longer legally required for us to keep it.
• Right to Restrict Processing: You can ask us to suspend the processing of your data in certain scenarios.
• Right to Data Portability: You can request the transfer of your data to you or another party.
• Right to Object: You can object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact us at contact@moananatura.com.

8. Cookies

Our website uses cookies to enhance your browsing experience.

• Essential Cookies: Required for the shopping cart and checkout to function.
• Analytics Cookies: Help us understand how visitors interact with the site.

For more details, please see our Cookie Policy.

9. Security

We have implemented appropriate security measures (SSL encryption, secure servers) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

10. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority in Slovakia: