Privacy policy
This privacy policy explains how moshi moshi mind (''we'' or ''us'') processes your personal data.
1. Data Controller
The legal entity responsible for processing your personal data is:
moshi moshi aps
CVR: 30710924
Dag Hammarskjölds Allé 42G
DK-2100 Copenhagen Ø
Email: customercare@moshimoshimind.dk
Phone: +45 26 80 13 03
2. Description of Processing
Below, we have outlined the purposes for which we process your personal data.
2.1 When you make a purchase on our site
In connection with your purchase of our products, we will process personal data about you. We process your personal data to deliver the products you have ordered. We process various personal data about you, including name, address, email address, and phone number. The legal basis for processing your personal data is Article 6(1)(b) of the GDPR, as the processing is necessary for the performance of a contract to which you are a party. Where the processing of your personal data does not have a sufficient connection to the fulfillment of the contract, the processing of your personal data will instead be based on GDPR Article 6(1)(f), where our legitimate interest is to manage our sales. We may share your information with our IT providers, partners, warehouse, and shipping company. We will retain your information as long as it is necessary to manage our sales. However, we generally store your personal data for this purpose for the current fiscal year plus 5 years in accordance with the rules of the Accounting Act.
2.2 Newsletter
You have the option to subscribe to our newsletter to receive news and special offers. To send you the newsletter, we process personal data about you. We process your personal data in the form of your email address, which we need to send you the newsletter. The legal basis for processing your personal data is the legitimate interest rule in Article 6(1)(f) of the GDPR. You can always withdraw your consent under the Marketing Act if you no longer wish to receive the newsletter. We may share your information with our IT providers and partners. We will retain your information as long as it is necessary to send you our newsletter. We generally retain your information for one year after you unsubscribe from our newsletter for documentation purposes.
2.3 Social Media
We have a fan page or company page on several social media platforms that you can visit and use. We are jointly responsible with the social media platform for collecting personal data about you when you visit our page on the social media platform. You can read the joint data controller agreement with Facebook and Instagram here.
You can read in Facebook's privacy policy which information is collected and how it is processed when you visit our Facebook page. Read more in Facebook's privacy policy here.
You can read in Instagram's privacy policy which information is collected and how it is processed when you visit our Instagram page. Read more in Instagram's privacy policy here.
We also process the information about you that you send to us, e.g., in connection with a direct inquiry from you to us on one of the above platforms. This will typically be your name and your question to us. The legal basis for processing your personal data is Article 6(1)(f) of the GDPR, as we have a legitimate interest in getting to know the users of our social media pages.
We do not store or have access to information about your online behavior collected by the aforementioned social media. We only have access to aggregated statistical information about the number of visitors, etc.
3. Transfers to Countries Outside the EU/EEA
We or our data processors may transfer your personal data to countries outside the EU/EEA. You can read more below about which countries we and our data processors may transfer personal data to:
Facebook, USA: See European Data Policy here.
Klaviyo, USA: See the list of sub-processors here.
Shopify, Canada: See the list of sub-processors here.
Google, USA: See the list of sub-processors here.
3.1 Transfer Basis
Canada is assessed by the Commission, with certain limitations, as a country that generally ensures an adequate level of protection for personal data through legislation or other measures. Our data processor's processing of your personal data is covered by this adequacy decision. For transfers to countries not assessed by the Commission as ensuring an adequate level of protection, we will ensure that necessary safeguards are in place using the Commission's standard contracts or other contracts approved by competent authorities. You can obtain a copy of this contract/agreement by contacting us at customercare@moshimoshimind.dk (specify 'privacy' in the subject line). You can also read the agreement with Klaviyo here.
4. Mandatory Information
The information you provide in connection with purchases is mandatory. If you do not provide this information, we unfortunately cannot enter into an agreement with you to deliver our products.
5. Your Rights
You have the following rights:
- You have the right to request access to, rectification of, or deletion of your personal data.
- You also have the right to restrict the processing of your personal data.
- If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the legality of the processing carried out before your withdrawal of consent. You can withdraw your consent and exercise your rights by sending us an email at customercare@moshimoshimind.dk (specify 'privacy' in the subject line). There may be conditions or limitations to these rights. It is therefore not certain that you, for example, have the right to data portability in the specific case - this depends on the specific circumstances of the processing activities.
- You have the right to receive the personal data you have provided yourself in a structured, commonly used, and machine-readable format (data portability).
- You can always file a complaint with a data protection supervisory authority, such as the Danish Data Protection Agency.
Additionally, you have the right to object to our processing of your personal data in the following cases:
- If our processing of your personal data is based on Article 6(1)(e) (public interest or exercise of official authority) or Article 6(1)(f) (balancing of interests), as mentioned above under processing grounds, you have the right to object to such processing at any time on grounds related to your particular situation.
- You also have an unconditional right to object to our processing of your personal data if we process your information for direct marketing purposes.
You can exercise your rights by sending us an email at customercare@moshimoshimind.dk (specify 'privacy' in the subject line). There may be conditions or limitations to these rights. Therefore, it is not certain that you, for example, have the right to data portability in the specific case - this depends on the specific circumstances of the processing activities.
Last updated: July 11, 2024