Privacy Policy

1. General Information
  1. This Privacy Policy sets out the principles for processing personal data in connection with the use of the online store available at: www.magicjersey.pl .
  2. The data controller is Kasjan Miśków , operating an unregistered business at the address: ul. Ogrodowa 8/1, 59-900 Zgorzelec, contact: kontakt@magicjersey.pl , tel. 798 486 300.
  3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
2. Scope of Data Collected The Administrator may process the following data:
  • first name and last name,
  • residential address or delivery address,
  • phone number,
  • email address,
  • billing information (if requested by the client),
  • data provided voluntarily in the newsletter form.
3. Purposes and legal basis for processing data

Personal data is processed for the following purposes:

  1. Order fulfillment – Article 6, paragraph 1, letter b of the GDPR (necessary for the performance of a contract).
  2. Payment and delivery processing – Article 6, paragraph 1, letter b of the GDPR.
  3. Contact with the client regarding order fulfillment – Article 6, paragraph 1, letter b of the GDPR.
  4. Maintaining accounting records and fulfilling tax obligations – Article 6, paragraph 1, letter c of the GDPR.
  5. Own marketing (newsletter) – only based on the customer's consent, Art. 6 para. 1 lit. a GDPR.
4. Recipients of personal data

Customer data may only be disclosed to:

  • to the payment operator (Przelewy24),
  • to courier companies (for the purpose of delivering the order),
  • hosting and IT service providers (maintaining the store and email),
  • to entities providing accounting services (in case an invoice needs to be issued).

The data is not shared with other entities for marketing purposes.

5. Data retention period
  1. Data related to order fulfillment will be stored for the period necessary to fulfill the contract, and then for the statute of limitations for civil claims (a maximum of 6 years).
  2. Accounting data is stored for the period required by tax law (currently 5 years).
  3. The data provided for receiving the newsletter is stored until the user withdraws their consent.
6. Rights of data subjects

Every customer has the right to:

  • access to your data,
  • correction of data,
  • deletion of data ("right to be forgotten"),
  • processing limitations,
  • data transfer,
  • objection to the processing of data for marketing purposes,
  • withdrawal of consent at any time (in the case of a newsletter),
  • filing a complaint with the supervisory authority (the President of the Office of Personal Data Protection).
7. Transfer of data outside the EEA

As a general rule, personal data is stored within the European Economic Area (EEA). In the case of using external tools (e.g., Google), data may be transferred to countries outside the EEA, only based on standard data protection clauses approved by the European Commission.

8. Cookies

This online store uses cookies, which are used for:

  1. proper functioning of the website (e.g., remembering the contents of the shopping cart),
  2. statistical analysis of website traffic (e.g., Google Analytics),
  3. handling newsletters and marketing activities (only with the user's consent).
  4. The user can change the cookie settings in their browser at any time or delete them completely.
  5. Restricting the use of cookies may affect some of the store's functionalities.
9. Data Security

The administrator applies technical and organizational measures to protect personal data from loss, unauthorized access, disclosure, or alteration.

10. Final Provisions
  1. The administrator reserves the right to make changes to the Privacy Policy if required by law or changes in the store's operation.
  2. The current version of the Privacy Policy will always be available on the website www.magicjersey.pl