Privacy statement
Last updated: 8 October 2026
This statement explains which personal data we process when you visit our web shop, create an account or place an order, why we do so and what your rights are. We process no more data than necessary and never sell data to anyone.
Who is responsible?
Moritz Automotive B.V., trading as Moritz Tuning
Molenlaan 30, 1422 AZ Uithoorn
Chamber of Commerce no.: 74566121
E-mail: info@moritztuning.nl
Phone: 020-6862709
What data we process and why
When you order: your name, e-mail address, address and, if you fill them in, your phone number and company name, plus the items ordered and the amounts. We use this data to process your order, deliver it or have it ready for collection, issue an invoice and keep in touch with you about your order. Legal basis: performance of the purchase contract, and for the invoice our legal (tax) obligation.
When you create an account: your username, e-mail address, password (stored only in encrypted form, we cannot read it) and the addresses you save. For a business account also your company name, VAT number and Chamber of Commerce number. We check your VAT number in the European Commission’s VIES system. Legal basis: performance of the contract (your account).
When you pay: payments are handled by Stripe. You enter your card or bank details with Stripe; we never see them, only whether the payment succeeded and a payment reference.
E-mail: we only send messages that belong to your account or order, such as a confirmation code, the order confirmation with invoice and a shipping notice. No newsletters or advertising.
Statistics: we measure how the site is used in order to improve it. Vercel Web Analytics does so without cookies and without data that identifies you as a person (legal basis: our legitimate interest in a well-functioning site). We only use Google Analytics if you consent to it in the cookie notice; Google’s advertising features are switched off.
Who we share data with
We only share data with parties needed to run the web shop. They may only use the data on our behalf (processors), or process it under their own responsibility where that is appropriate (carrier, payment provider, authorities):
- Vercel (website hosting)
- Stripe (payment processing)
- our e-mail provider (sending e-mail)
- the carrier, for example PostNL (name and delivery address, to deliver your parcel)
- the European Commission (VAT number check via VIES, business accounts only)
- Google (Google Analytics, only with your consent)
- the Dutch tax authorities, where the law requires it
Our database with accounts and orders runs on servers we manage ourselves, within the European Union.
Vercel, Stripe and Google are (also) based in the United States, so data may be transferred outside the EU. This happens on the basis of the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Cookies and local storage
We only use the cookies needed to run the web shop, and Google’s analytics cookies if you consent to them. You can change your choice at any time via "Cookie settings" at the bottom of every page.
| Name | Purpose | Retention | Type |
|---|---|---|---|
| mt_owner | Remembers your cart(s) when you are not logged in | 1 year | Functional |
| mt_session | Keeps you logged in | 30 days | Functional |
| mt_consent (local storage) | Remembers your choice in the cookie notice | 1 year | Functional |
| __stripe_mid, __stripe_sid | Fraud prevention when paying (Stripe), on the checkout page only | Up to 1 year | Functional |
| _ga, _ga_* | Google Analytics: visitor statistics | Up to 2 years | Analytics, only with consent |
How long we keep data
- Orders and invoices: 7 years, as required by (tax) law.
- Your account and saved addresses: as long as your account exists. If you want your account deleted, e-mail us; data we are legally required to keep (invoices) is then kept for that purpose only.
- Carts: until you delete them, or until the cart cookie expires after a year without a visit.
- Google Analytics statistics: 14 months at most.
Security
The site only works over a secure connection (https). Passwords are only stored in encrypted form. Only staff who need it for their work have access to orders and customer data.
Your rights
You have the right to access your data, have it corrected or deleted, have its processing restricted, object to its processing and receive your data in a common format. You can withdraw consent at any time. You can change much of your data yourself in your account; for anything else, e-mail us. We respond within one month.
Not happy with how we handle your data? Let us know. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Changes
We update this statement when our web shop or the law changes. The date at the top shows when that last happened.