At Mag Technologies, S.L. (hereinafter "MAGSTORE"), with VAT number B19811686, we are committed to protecting your privacy. This policy explains how we collect, use, and safeguard the personal data you provide through our website, in compliance with the General Data Protection Regulation (GDPR) and Spanish law.
1. Data We Collect
We collect the following data when you register on our site:
- First and last name: To identify you and personalize our communication with you.
- Email address: To send order confirmations, updates, and, if you consent, promotional communications.
- Shipping address: To efficiently process and deliver your orders.
- Payment details: We use secure platforms to process your payments. We do not store your credit or debit card information.
2. Use of Data
The personal data we collect is handled with the utmost care and respect for your privacy. This data is used for the following purposes:
- Processing and managing your orders: We use your personal data, such as your name, shipping address, and payment details, to complete the entire purchase cycle. This includes verifying and confirming your order, securely processing payment, preparing the package, and managing its delivery to the address you provided. This data processing is essential to fulfill the sales contract between MAGSTORE and the customer.
- Providing customer support: Personal data is also used to provide efficient customer service. This includes responding to inquiries about the status of your orders, resolving issues related to delivery, returns, or exchanges, as well as handling any other queries related to our products or services. This information ensures personalized and relevant assistance.
- Sending promotional and marketing communications: If you have explicitly consented to receive marketing communications, we will use your email address to send you news, offers, and promotions for our products and services. These communications will be sent according to your preferences, and you may opt-out at any time by clicking the unsubscribe link included in each message or by contacting us directly to update your preferences.
3. Data Sharing
At MAGSTORE, we value your privacy and ensure that the personal data we collect is only shared with third parties when absolutely necessary to fulfill our contractual or legal obligations, or to provide you with the best possible service. These data transfers are carried out with strict security measures and always in compliance with the applicable regulations, including the General Data Protection Regulation (GDPR).
Purpose of Data Sharing
The data we share with third parties is limited to what is strictly necessary for the following purposes:
- Payment processing: We work with secure and certified payment service providers that comply with the highest security standards (such as PCI-DSS certification) to ensure secure financial transactions.
- Logistics and product delivery: Your contact details and shipping address are provided to courier and shipping companies to ensure the accurate delivery of your orders.
- Technical and web hosting services: To ensure the security and efficient operation of our platform, your data may be shared with hosting providers and server maintenance services that ensure the security and confidentiality of the information.
- Marketing and commercial communications: If you have given your consent, we share your data with email marketing platforms to send you promotional information and updates about our products and services.
Data Transfer Guarantees
We only work with third parties that provide adequate guarantees to ensure that your personal data is processed in accordance with the law. All third parties we collaborate with sign contracts that include data protection clauses, ensuring that data is processed with the required level of protection, in compliance with the GDPR.
4. Data Security
At MAGSTORE, we are committed to protecting your personal data by implementing best practices in e-commerce security. We have adopted a range of technical and organizational measures to ensure that your information is protected against unauthorized access, accidental loss, or any form of unlawful processing.
Technical and Organizational Security Measures
- SSL Encryption: All communications between your browser and our website are secured by SSL (Secure Socket Layer) encryption, ensuring that sensitive data, such as payment information, is encrypted and secure during transactions.
- Strict Access Control: We implement strict access controls to our systems to ensure that only authorized personnel can handle your personal data. This access is monitored to ensure that any action on the data is secure.
- Protection against Cyber Threats: We use advanced measures to protect our site from attacks, including Distributed Denial of Service (DDoS) protection, ensuring site stability and security even under malicious traffic conditions.
- Web Application Firewall: We employ web application firewalls to filter and monitor traffic to our site, protecting against known threats like SQL injection and cross-site scripting (XSS).
Security Certifications
Our payment system complies with the requirements of PCI DSS (Payment Card Industry Data Security Standard), an international security standard that protects credit and debit card data during transactions. This certification ensures that we follow the necessary protocols to safeguard your financial information.
5. Personal Data Protection
At MAGSTORE, we protect your personal data by applying appropriate technical and organizational measures in accordance with current regulations, such as the General Data Protection Regulation (GDPR). We ensure that your data is handled securely and confidentially, avoiding unauthorized access and misuse.
Your data is used exclusively for the indicated purposes, such as order management, customer service, and, if authorized, to send you promotional communications. Additionally, you have rights regarding your data, including access, rectification, deletion, and objection, which you can exercise by contacting us at soporte@magstore.es. We commit to retaining your data only for the time necessary to fulfill legal and contractual obligations, after which it will be securely deleted.