Controller:MAGIC PAW & CO, Owner Swana Muttschall, Carrer de la Misericòrdia 3, Piso 01, 07012 Palma de Mallorca, Spain, NIF/NIE: X4977047P, Email:support@magicpawco.com, Tel. +34 603 289 871
1. General Magic Paw & Co operates this shop to provide you as a customer with an individual shopping experience (the "Services"). The Services are operated on the basis of Shopify. This privacy policy describes how we collect, use and share personal data when you visit, use our website or make a purchase. In case of conflicts between our GTC and this privacy policy, this privacy policy takes precedence.
2. What personal data do we collect? Contact data: Name, postal, billing and shipping address, phone number, email address Financial data: Payment card information, transaction details, payment method and confirmation (processed by our payment service providers, see section 5) Account information: Username, password, security questions, settings Transaction information: viewed, purchased, returned or cancelled items and past transactions Communication: Information from your communication with us (e.g. customer support requests) Device information: Device, browser, network connection, IP address, unique identifiers Usage information: Interactions with the Services, browsing behaviour, time of use, collected via cookies and similar technologies (see section 6)
3. Sources of personal data Directly from you: when creating an account, placing orders, communicating or otherwise using the Services Automatically: via cookies and similar technologies when visiting our website From service providers: when they collect or process data on our behalf From advertising partners: e.g. Meta, TikTok, Google as part of ad measurement (only with your consent, see section 6)
4. How do we use your personal data? Provision of Services: payment processing, order fulfilment, account management, shipping, returns - Legal basis: performance of contract, Art. 6 (1) (b) GDPR Marketing by email/SMS, online advertising, tracking cookies - Legal basis: consent, Art. 6 (1) (a) GDPR Security and fraud prevention - Legal basis: legitimate interest, Art. 6 (1) (f) GDPR Customer support, answering enquiries - Legal basis: performance of contract / legitimate interest Compliance with legal obligations, authority requests - Legal basis: Legal obligation, Art. 6 (1) (c) GDPR
5. Sharing of personal data We share data with the following categories of recipients: Hosting/Platform: Shopify International Limited (see section 7) Payment processing: Shopify Payments, PayPal, Klarna, credit card acquirers (depending on the payment method you choose at checkout) Shipping/Fulfillment: shipping service providers commissioned by us (e.g. DHL, Correos) for delivery of your order Advertising and analytics partners: Meta Platforms Ireland Ltd. (Facebook/Instagram), TikTok Technology Limited, Google Ireland Limited – only insofar as you have consented to the corresponding cookies in the cookie banner (see section 6) At your request: if you expressly ask us to share Legal reasons: in case of legal obligations, law enforcement requests or to enforce our terms
6. Cookies We use cookies and similar technologies to ensure the operation of our shop. Technically necessary cookies are set by Shopify and are required for functions such as shopping cart, login, checkout and fraud prevention. Legal basis for this is Art. 6 (1) (b) and (f) GDPR.
For marketing and analytics purposes (e.g. Meta Pixel, TikTok Pixel, Google Analytics) we only set cookies after your active consent via our cookie banner. You can revoke or adjust your consent at any time via the "Cookie settings" link at the bottom of the page. Legal basis: Art. 6 (1) (a) GDPR in conjunction with § 25 TDDDG.
Details on individual providers: Shopify: Shopify International Ltd., Ireland Meta (Facebook/Instagram): Meta Platforms Ireland Ltd., Dublin – data may be transferred to the USA. TikTok: TikTok Technology Ltd., Ireland – data may be transferred to the USA. Google: Google Ireland Ltd., Dublin – data may be transferred to the USA.
7. Relationship with Shopify The Services are hosted by Shopify. Shopify collects and processes personal data about your access to the Services as an independent controller or as our processor, depending on the data category. Further information: Shopify Privacy Policy and Shopify Privacy Portal.
8. Third-party websites and links Our Services may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their privacy policies.
9. Children's data Our Services are not directed to children under 16 years of age. We do not knowingly collect personal data from minors. If you have questions:support@magicpawco.com.
10. Security and retention of your data We implement technical and organizational measures to protect your data. Retention period depends on the respective purpose: Invoice and accounting data: 6 years according to Spanish commercial/tax law Account data: until deletion of your customer account at your request Order/transaction data: as long as legally required for evidentiary purposes, usually up to 10 years Marketing consents and associated cookie data: until revocation of your consent Support communication: usually 3 years after completion of the process
11. Your rights Access: Insight into data stored about you Deletion: Request deletion of your data Rectification: Correction of incorrect data Data portability: Receipt of a copy of your data in machine-readable format Objection and restriction of processing Objection to direct marketing: You can object to the processing of your data for direct marketing purposes at any time and without giving reasons, Art. 21 (2) GDPR Withdrawal of consent: at any time with effect for the future To exercise your rights:support@magicpawco.com
12. Complaints You can contact us at any time with a complaint:support@magicpawco.com You also have the right to file a complaint with a data protection supervisory authority – either with the Spanish authority responsible for us: Agencia Española de Protección de Datos (AEPD) –www.aepd.esor with the supervisory authority of your own country of residence.
13. International data transfers When using Meta, TikTok and Google (see section 6) and possibly other service providers, personal data may be transferred to countries outside the EEA, in particular to the USA. We rely, depending on the provider, on the standard contractual clauses of the European Commission and/or the EU-US Data Privacy Framework.
14. Changes to this privacy policy Changes will be published on this page and the date of the "Last updated" will be adjusted.
15. Contact MAGIC PAW & CO – Owner: Swana Muttschall, Carrer de la Misericòrdia 3, Piso 01, 07012 Palma de Mallorca, Spain, NIF/NIE: X4977047P, Email:support@magicpawco.com, Tel. +34 603 289 871 We are the data controller within the meaning of applicable data protection laws.
