Privacy Statement

Lunar Shows is a provider of fire and light shows and installations, based in the Netherlands.

• Company name: Lunar Shows (Manuel Maes)
• Address: Boezem 9, 2959 AE Streefkerk
• Chamber of Commerce number: 74317032
• VAT number: NL002467974B46
• Email: info@lunarshows.com
• Phone: +31 639 186 861

We are the data controller for the personal data processed via this website, as defined by the General Data Protection Regulation (GDPR).

We only collect data that we need to help you with your enquiry or event:

• Contact details you provide yourself: name, email address, phone number and the content of your message, when you reach out by email, phone or WhatsApp.
• Event details: date, location, type of event, guests and any other details you choose to share with us so we can prepare a suitable quote.
• Technical data: IP address, browser type, language, device type and pages visited. This data is collected by our hosting partner for security and to keep the site working correctly.

We do not collect special or sensitive personal data (such as health data, religious beliefs or biometric data).

• To respond to your question or enquiry and to prepare a quote.
• To plan and carry out arrangements for your event.
• To send a requested brochure or quote.
• To meet our administrative and legal obligations (such as invoicing and retention requirements).
• To keep the website secure and functional.

We do not use your data for automated decision-making or profiling.

We process your personal data on the basis of:

• Your consent: when you contact us voluntarily or ask to receive information.
• Performance of a contract: when you book a show or installation with us.
• Legal obligation: for administrative and tax obligations (such as keeping invoices).
• Legitimate interest: for the security and proper functioning of our website.

• Enquiries that do not lead to a booking: up to two years after the last contact.
• Client data and project files: up to seven years after completion, in line with tax retention requirements.
• Invoices and accounting records: seven years (statutory retention period in the Netherlands).
• Server logs: up to thirty days.

We never sell your data. We only share it with partners we work with to deliver our service or to keep the website running:

• Hosting partner (Vercel Inc.): to run the website technically. Vercel processes server logs and standard technical data.
• Content platform (Sanity.io): for managing the website content. Contains no visitor data.
• Google Analytics (Google LLC): for anonymised visitor statistics, only when you give your consent. See section 7 for details.
• Email and calendar services that we use to communicate with you and manage scheduling.
• Bookkeeper or accountant: to comply with our tax obligations, where applicable.
• Competent authorities: when we are legally required to do so.

Where required, we have a data processing agreement in place with each of these parties, in accordance with the GDPR.

Our website only places functional cookies and, with your consent, analytical cookies from Google Analytics. You can change your cookie preferences at any time through your browser settings or by reopening the cookie banner.

• Functional cookies and local storage: needed to make the site work properly (for example, to remember your cookie choice). No consent is required for these.
• Google Analytics: to gain anonymised insight into which pages are visited, for how long and through which channels. These are only placed after you click "Accept" in the cookie banner. We have configured Google Analytics with privacy in mind: IP addresses are anonymised, data is not shared for advertising or profiling purposes, and we have a data processing agreement in place with Google.

Google Analytics is a service from Google LLC. Google may process this data on servers outside the European Economic Area. Google provides appropriate safeguards for this through the EU-US Data Privacy Framework. More information can be found in Google's privacy policy.

We take appropriate technical and organisational measures to protect your personal data against loss or unlawful use. Our website runs over HTTPS, and access to personal data is limited to people who need it to do their job.

Under the GDPR, you have the following rights:

• Access: request which data we process about you.
• Rectification: have inaccurate data corrected.
• Erasure: have your data deleted when there is no longer a valid reason to keep it.
• Restriction: ask for processing to be restricted.
• Objection: object to processing based on legitimate interest.
• Data portability: receive your data in a common format.
• Withdrawal of consent: when we process your data based on consent.

Would you like to exercise one of these rights? Send an email to info@lunarshows.com. We will respond within four weeks.

Are you not satisfied with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority.

We may update this privacy statement from time to time, for example when we introduce new services or when laws and regulations change. The most recent version is always available on this page; the date at the top shows when it was last updated.