Privacy Policy
Privacy Policy of the MAGALL Shop https://magall.pl (the “Shop”)
Dear User!
We care about your privacy and want you to feel comfortable while using our services. That is why below we present the most important information on the rules under which we process your personal data and on the cookies used by our Shop. This information has been prepared taking into account the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
PERSONAL DATA CONTROLLER
MARCIN PIOTR GAJDA, an entrepreneur conducting business activity under the business name MAGA MARCIN GAJDA, entered in the Central Register and Information on Business Activity (CEIDG) maintained by the minister competent for the economy and for maintaining the Central Register and Information on Business Activity, NIP 6442805577, REGON 385628622, ul. Obrzeżna Północna 17B lok. 18, 41-400 Mysłowice.
If you wish to contact us in connection with our processing of your personal data, please write to us at the e-mail address: biuro.maga@outlook.com.
YOUR RIGHTS
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Art. 15 GDPR or – where applicable – Art. 13(1)(f) GDPR),
- their rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- transfer of the data to another controller (Art. 20 GDPR).
As well as the right:
- to object at any time to the processing of your data:
- on grounds relating to your particular situation – to the processing of personal data concerning you based on Art. 6(1)(f) GDPR (i.e. on the legitimate interests pursued by us), including profiling (Art. 21(1) GDPR);
- where personal data are processed for direct marketing purposes, including profiling to the extent that it is related to such direct marketing (Art. 21(2) GDPR).
Contact us if you wish to exercise your rights. You may express your objection to our use of cookies (which you can read about below) in particular by means of the appropriate browser settings.
If you consider that your data are being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
PERSONAL DATA AND PRIVACY
Below you will find detailed information on the processing of your data depending on the actions you take.
1. Placing an order in the Shop – part 1
| For what purpose? | |
|---|---|
| performance of your order | |
| On what basis? | |
| sales contract (Art. 6(1)(b) GDPR) | a legal obligation, relating in particular to accounting, product safety and product compliance with legal requirements, obliging us to process your personal data (Art. 6(1)(c) GDPR) |
| For how long? | |
| for the term of the above-mentioned contract | until the expiry of the legal obligations incumbent on us |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) | |
| What happens if you do not provide the data? | |
| you will not be able to place an order | |
2. Placing an order in the Shop – part 2
| For what purpose? |
|---|
| improving the quality of our services thanks to reviews submitted by Users via a satisfaction survey service |
| On what basis? |
| our legitimate interest, consisting in processing your data in order to survey your satisfaction with our services (Art. 6(1)(f) GDPR) |
| For how long? |
| if you do not submit a review – for a period of 15 days from your purchase or until we uphold your objection to the processing; if, however, you submit a review – until it is deleted or until we uphold your objection to the processing* |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) |
| What happens if you do not provide the data? |
| we will not take your review of our services into account when further developing them |
3. Creating an account in the Shop
| For what purpose? |
|---|
| performance of the contract for the provision of the Shop account service |
| On what basis? |
| contract for the provision of services (Art. 6(1)(b) GDPR) |
| For how long? |
| for the term of the above-mentioned contract |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) |
| What happens if you do not provide the data? |
| you will not be able to create an account and use its functions, such as viewing your order history or checking the status of an order |
4. Contacting us (e.g. to ask a question)
| For what purpose? | |
|---|---|
| handling your enquiries or requests | |
| On what basis? | |
| a contract or steps taken at your request with a view to entering into it (Art. 6(1)(b) GDPR) – where your enquiry or request concerns a contract to which we are or may become a party | our legitimate interest, consisting in processing your data in order to communicate with you (Art. 6(1)(f) GDPR) – where your enquiry or request is not related to a contract |
| For how long? | |
| for the term of the contract binding us or – if the contract is not concluded – until the expiry of the period for pursuing claims – see the last table of this section* | until the expiry of the period for pursuing claims – see the last table of this section – or until we uphold your objection to the processing* |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) | |
| What happens if you do not provide the data? | |
| we will not be able to respond to your enquiry or request | |
5. Browser settings or other similar action permitting marketing activities
| For what purpose? |
|---|
| direct marketing, consisting in displaying personalised advertisements (you can read more about this in the “Profiling” and “Cookies” sections of the Privacy Policy) |
| On what basis? |
| our legitimate interest, consisting in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| For how long? |
| until the expiry or your deletion of the cookies used for marketing purposes* |
| What happens if you do not provide the data? |
| you will not receive suggestions of products or services that may interest you |
6. Browser settings or other similar action permitting analytical activities
| For what purpose? |
|---|
| analysis of how you use and navigate the Shop website, in order to improve its functionality (you can read more about this in the “Analytical activities” and “Cookies” sections of the Privacy Policy) |
| On what basis? |
| our legitimate interest, consisting in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| For how long? |
| until the expiry or your deletion of the cookies used for analytical purposes* |
| What happens if you do not provide the data? |
| we will not take into account how you use and navigate the Shop website when developing it |
7. Your consent to receiving marketing content from us (e.g. information about special offers)
| For what purpose? | |
|---|---|
| sending marketing information, in particular special offers | analysis of the effectiveness of the messages we send, in order to establish general rules for effective message sending in our business (you can read more about this in the “Analytical activities” section of the Privacy Policy) |
| On what basis? | |
| your consent to our marketing activities (Art. 6(1)(a) GDPR) | our legitimate interest, consisting in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| For how long? | |
| until you withdraw your consent – remember, you may withdraw your consent at any time. The processing of data until you withdraw your consent remains lawful. | until we uphold your objection to the processing |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) | |
| What happens if you do not provide the data? | |
| you will not receive our marketing materials, including information about our special offers | |
8. Subscribing to the newsletter
| For what purpose? | |
|---|---|
| sending the newsletter | analysis of the effectiveness of the content we send, in order to establish general rules for effective message sending in our business (you can read more about this in the “Analytical activities” section of the Privacy Policy) |
| On what basis? | |
| contract for the provision of the newsletter sending service (Art. 6(1)(b) GDPR) | our legitimate interest, consisting in processing data for the purpose stated above (Art. 6(1)(f) GDPR) |
| For how long? | |
| until you unsubscribe from our newsletter | until we uphold your objection to the processing |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) | |
| What happens if you do not provide the data? | |
| you will not be able to receive information about the Shop and our services | |
9. Using services (other than those listed above), such as browsing our website or using other functions available on it – if they require data processing
| For what purpose? |
|---|
| performance of the contract concluded between us |
| On what basis? |
| contract for the provision of services (Art. 6(1)(b) GDPR) |
| For how long? |
| for the term of the above-mentioned contract |
| in addition, your data will be processed until the expiry of the period during which claims may be pursued – by you or by us (you will find more information on this in the last table of this section) |
| What happens if you do not provide the data? |
| you will not be able to use those functions for which data processing is necessary |
10. Taking an action or omission that may give rise to claims relating to the Shop or our services
| For what purpose? |
|---|
| establishment, exercise or defence of possible claims relating to the concluded contract or the services provided |
| On what basis? |
| our legitimate interest, consisting in processing personal data for the purpose indicated above (Art. 6(1)(f) GDPR) |
| For how long? |
| until the expiry of the limitation period for claims or until we uphold your objection to the processing* |
| What happens if you do not provide the data? |
| inability to establish, exercise or defend claims |
PROFILING
Within the Shop we carry out profiling – in your case this will take place if you permit such activities. This profiling consists in automatically assessing which products or services you may be interested in, using information about the content you view. As a result, advertisements for products or services displayed within the online services you use will be better tailored to you and your needs.
The profiling we carry out does not result in decisions that produce legal effects concerning you or similarly significantly affect you.
ANALYTICAL ACTIVITIES
On the Shop website we carry out analytical activities aimed at making it more intuitive and accessible – in your case this will take place if you permit such activities. As part of the analysis we will take into account the way you navigate the Shop – e.g. how much time you spend on a given subpage or where in the Shop you click. Thanks to this, when developing the Shop, we will be able to optimise its layout, appearance and the content published in it so as to improve its functionality.
In addition, if you indicate that you wish to receive marketing messages or the newsletter from us, we may analyse the effectiveness of the mailings we have sent. For example, we may check whether and how they affected activity in our Shop. Such activities will help us establish general rules for sending this type of message in our business – e.g. regarding optimal sending times or how to formulate effective content.
DATA SECURITY
When processing your personal data, we apply organisational and technical measures in accordance with the applicable legal provisions, including encryption of the connection by means of an SSL/TLS certificate.
COOKIES
Like most websites, our Shop uses so-called cookies. These files:
- are stored in the memory of your device (computer, phone, etc.);
- do not cause changes to the settings of your device.
In this Shop, cookies are used for the following purposes:
- remembering your session
- statistical
- marketing
- providing Shop functions
To find out how to manage cookies, including how to disable them in your browser, you can use your browser’s help file. You can access information on this by pressing the F1 key in your browser. In addition, you will find relevant guidance on the following subpages, depending on the browser you use:
Below you will find information on the functions of the cookies we process and their validity period.
| cookie name | cookie validity period | cookie function |
|---|---|---|
| magall | session duration | tracking traffic in the shop for statistical purposes |
| _ga | 2 years | Google Analytics – distinguishing users for statistical purposes |
| _ga_* | 2 years | Google Analytics – storing the session state for statistical purposes |
| _gcl_au | 3 months | Google Ads – measuring advertising effectiveness (conversions) |
| _fbp | 3 months | Meta (Facebook) Pixel – displaying tailored advertisements and measuring their effectiveness |
| basket | session duration | remembering the contents of the basket |
Using the appropriate options of your browser, you may at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases we will no longer process them.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in running our business. We entrust your data to them for processing – these entities process the data solely on our documented instructions.
Below you will find a list of the recipients of your data:
| ACTION | DATA RECIPIENTS | TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION |
|---|---|---|
| any action in connection with the Shop | hosting provider | not applicable |
| entity providing us with technical/IT support | not applicable | |
| persons cooperating with us under civil-law contracts, supporting our day-to-day business | not applicable | |
| provider of sales software | not applicable | |
| law firm | not applicable | |
| staying on the Shop website with settings permitting marketing activities | entity providing marketing services | yes – United States of America ** |
| staying on the Shop website with settings permitting analytical activities | entity enabling analytical activities on the website | yes – United States of America ** |
| placing an order in the Shop | payment provider | not applicable |
| entity delivering the product to you – unless you have chosen the personal collection option | not applicable | |
| provider of software facilitating business operations (e.g. accounting software) | not applicable | |
| provider of standard office software (including e-mail mailboxes) | not applicable | |
| accounting office | not applicable | |
| entity providing an instalment system | not applicable | |
| subscribing to the newsletter or consenting to the sending of marketing messages | entity providing the sending of the newsletter or marketing messages | not applicable |
| using the online chat available in the Shop | entity providing the online chat available in the Shop | not applicable |
| your use of services provided to us by social networks in connection with the Shop | social networks | yes – United States of America ** |
| taking part in a satisfaction survey regarding our services or products | entities enabling the posting of reviews of the Shop or products and their comparison | not applicable |
| contacting us (e.g. asking a question) | provider of standard office software (including e-mail mailboxes) | not applicable |
In addition:
the relevant public authorities to the extent that we are obliged to make data available to them.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** In connection with the above, your personal data may also be processed by entities from outside the European Union. An adequate level of protection of your data, including through the use of appropriate safeguards, is ensured by:
- the participation of these entities in the so-called Data Privacy Framework, i.e. a programme established by an implementing decision of the European Commission as a set of rules guaranteeing adequate protection of your privacy – in the case of entities from the United States of America