Privacy Policy for Magic Farm

Last Updated: 24.01.2025

Magic Farm (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and protect your information when you interact with our website (https://magic-farm.eu), register for an account, and make purchases. This policy complies with the General Data Protection Regulation (GDPR) applicable in the European Union.

1. Data Controller

Magic Farm is the data controller responsible for your personal data. Our business is registered in Slovenia, and our contact details are as follows:

Address: Magic Farm, Kogler Ex d.o.o., Cesta ob gramoznici 17A, 2204 Miklavž na Dravskem polju, ID: 5821509000
Email: info@magic-farm.eu
Phone: +386 70 428 292

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

a. Information You Provide to Us:

Account Registration: Name, email address, phone number, and password.
Order Information: Billing and shipping addresses, payment details, and order history.
Contact Forms: Any information you provide when contacting us.

b. Automatically Collected Information:

Device Information: IP address, browser type, operating system, and device type.
Usage Data: Pages viewed, time spent on the website, and navigation paths.

c. Payment Information:

For card payments via the Nestpay payment provider, we collect payment details securely. We do not store full card details on our servers; this data is processed by Nestpay in compliance with PCI DSS standards.

3. How We Use Your Data

We use your personal data for the following purposes:

Account Management: To register and manage your account.
Order Fulfillment: To process and deliver your orders, including payment confirmation and shipping.
Customer Support: To respond to your inquiries and resolve issues.
Marketing: To send you promotional offers and updates (with your consent).
Compliance: To comply with legal obligations, such as tax regulations.

4. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

Contractual Necessity: To fulfill our contractual obligations when you place an order.
Legitimate Interests: To improve our website and services.
Consent: For sending marketing communications (you can withdraw consent anytime).
Legal Obligations: To comply with EU laws and regulations.

5. Sharing Your Data

We may share your data with:

Service Providers: Payment processors (Nestpay), shipping companies, and IT service providers.
Legal Authorities: When required by law or to protect our legal rights.
Business Transfers: In case of a merger, acquisition, or sale of assets.

We ensure that all third parties comply with GDPR and protect your data securely.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. For example:

Order Information: Retained for tax and accounting purposes (typically 10 years).
Account Information: Retained until you delete your account.

7. Your Rights Under GDPR

As an EU resident, you have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request corrections to inaccurate or incomplete data.
Erasure: Request the deletion of your data (right to be forgotten).
Restriction: Request the limitation of data processing.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to data processing based on legitimate interests.
Withdraw Consent: Withdraw consent for marketing communications.

To exercise these rights, contact us at info@magic-farm.eu.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience and analyze website performance. For detailed information, please refer to our Cookie Policy.

9. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. These include:

SSL encryption for data transmission.
Secure servers and firewalls.
Regular security audits.

10. International Data Transfers

As we operate within the EU, your data is stored and processed within the European Economic Area (EEA). We ensure all data transfers comply with GDPR requirements.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any personal data.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with the date of the last update.

13. Contact Us

For questions or concerns about this Privacy Policy or your data, please contact us at:

Email: info@magic-farm.eu
Phone: +386 70 428 292
Address: Magic Farm, Kogler Ex d.o.o., Cesta ob gramoznici 17A, 2204 Miklavž na Dravskem polju, ID: 5821509000