Privacy policy

Privacy Policy (Information on the Processing of Personal Data)This privacy policy explains how we process personal data when you visit or use our online shop magicflexcamera.com or otherwise contact us as a customer.
We do not use your data for automated individual decision-making or profiling that produces legal effects concerning you.
1. Data controller
The data controller responsible for the processing of your personal data in connection with this website and shop is:
Magicflexcamera - A. Kovalev - Bielefeld, Germany (Full contact details are provided in section 8 below.)
2. Categories of data and data subjects
We process personal data of the following categories of persons (“data subjects”):
  • Customers and prospective customers of the online shop magicflexcamera.com
  • Persons contacting us via the website, email or social media
Depending on how you interact with us, we process in particular:
Contact details
  • First and last name
  • Email address
  • Phone number (if provided)
  • Postal address (for shipping and invoicing)
  • Company name and VAT number (if applicable)
Customer and contract data
  • Information related to ordered / purchased products and services
  • Order history, payment status, shipping information
  • Communication related to orders, offers, complaints or requests
Account and technical data (if applicable)
  • Customer account login information (if you create an account)
  • Basic technical data generated when using the website (e.g. server logs)
Personal data is generally collected directly from you, for example when you place an order, fill in a form, create an account or contact us.
3. Purposes and legal bases of processing
We process your personal data only to the extent permitted by the EU General Data Protection Regulation (GDPR).
The main purposes and corresponding legal bases are:
  1. Processing and fulfilling your orders
  • Handling orders, payments, shipping, returns and customer service
  • Legal basis: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR)
  1. Legal obligations (e.g. tax and accounting)
  • Storage of invoices and accounting documents as required by law
  • Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR)
  1. Customer support and communication
  • Answering your enquiries, handling warranty and service issues
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR) or legitimate interest in good customer service (Art. 6(1)(f) GDPR)
  1. Direct marketing to existing customers
  • Informing existing customers about similar products or services
  • Legal basis: legitimate interest in marketing our products (Art. 6(1)(f) GDPR), taking into account your right to object at any time
  1. Newsletter and other communication based on consent (if used)
  • Sending information where you explicitly subscribed or consented
  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time
  1. Security and prevention of misuse
  • Securing our IT systems and preventing abusive use of the website
  • Legal basis: legitimate interest in secure operation of the website (Art. 6(1)(f) GDPR)
4. Recipients and categories of recipients
We do not sell your personal data. We only share it where necessary for the purposes described above and in accordance with GDPR.
Typical categories of recipients are:
  • Payment service providers (for processing your payments)
  • Shipping and logistics providers (postal services, courier companies)
  • IT and hosting providers (for operating the website and email services)
  • Accounting / tax advisors (for fulfilling legal accounting obligations)
  • Service providers for customer communication or shop systems
All service providers who process personal data on our behalf are contractually bound to process it only according to our instructions and in compliance with GDPR.
5. Transfer of data outside the EU / EEAIn some cases, our service providers may be located outside the European Union (EU) or the European Economic Area (EEA), for example email, hosting or payment services.
In such cases, we ensure that an adequate level of data protection exists, for example through:
  • An adequacy decision of the European Commission, or
  • Standard Contractual Clauses (SCCs) adopted by the European Commission, or
  • Other safeguards permitted by GDPR.
You can request further information about such safeguards using the contact details in section 9.
6. Storage periods
We store personal data only as long as necessary for the respective purpose or as required by law.
In particular:
  • Order and invoice data are generally stored for up to 10 years in accordance with applicable commercial and tax law.
  • Customer account data are stored as long as the account exists. If you request deletion, we will delete or anonymise the data unless legal retention obligations apply.
  • Contact enquiries are stored for the duration of handling your enquiry and, if necessary, for a period during which legal claims could be asserted.
  • Marketing data (e.g. newsletter subscriptions) are stored until you withdraw your consent or object to the processing.
If data is no longer needed for the original purpose and no legal retention periods apply, it will be deleted or anonymised.
7. Are you obliged to provide data?
For placing an order, some data (such as name, address, contact and payment information) are necessary to conclude and fulfil the contract. Without this data, we cannot process your order.
Providing data for pure enquiries or voluntary services (e.g. newsletter) is generally optional, but we may not be able to respond properly without at least basic contact details.
8. How to exercise your rights / contact details
To exercise your rights or if you have any questions about data protection, you can contact us at any time:
Magicflexcamera – A. Kovalev
Gnststr. 2
33613 Bielefeld
Germany
Email: alex@magicflexcamera.com
9. Your rights under GDPRAs a data subject, you have the following rights under the GDPR, subject to the applicable legal requirements:
  • Right of access (Art. 15 GDPR)
  • You may obtain confirmation as to whether we process personal data concerning you and, if so, receive information about this data.
  • Right to rectification (Art. 16 GDPR)
  • You may request the correction of inaccurate or incomplete personal data.
  • Right to erasure (Art. 17 GDPR)
  • You may request the deletion of your personal data, for example if it is no longer necessary for the purposes for which it was collected.
  • Legal retention obligations (for example under tax and accounting law) may require us to store certain data for up to 10 years.
  • Right to restriction of processing (Art. 18 GDPR)
  • You may request that we restrict processing, for example while we verify contested data.
  • Right to data portability (Art. 20 GDPR)
  • Where processing is based on consent or a contract and carried out by automated means, you may request to receive your data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21 GDPR)
  • You may object at any time to processing based on our legitimate interests, in particular to direct marketing. If you object to direct marketing, we will no longer use your data for that purpose.
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Where processing is based on your consent, you may withdraw that consent at any time with future effect.
  • Right to lodge a complaint (Art. 77 GDPR)
  • You may lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.