Privacy Policy

A Magic Cabinet respects your privacy and is committed to protecting it through its compliance with this website privacy policy (“Policy”).

Safeguarding the integrity of the information entrusted to our care is of the utmost importance to A Magic Cabinet and it is for this reason that A Magic Cabinet has taken a series of organizational and technical measures to make sure that all of your data is secure.

This Policy describes the types of information we may collect from you or that you may provide when you visit our website as well as our practices for collecting, using, protecting and disclosing that information.

This Policy outlines our principles and practices regarding your personal data and how we process it.

The contents of this Policy may be amended from time to time therefore please keep in mind to check the Policy periodically for updates.

Principles of Processing

A Magic Cabinet processes personal data in accordance with the following principles and in compliance with the requirements of the GDPR:

Lawfulness, Fairness, Transparency: Personal data is processed lawfully, fairly and in a transparent manner.

Purpose Limitation: Personal data is collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

Data Minimization: Processing relates to data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

Accuracy: Personal data is accurate. Every reasonable step is taken to ensure that any personal data that are inaccurate are rectified without delay.

Storage Limitation: Personal data is held for no longer than is necessary for the purposes and scope of processing. However, in some cases A Magic Cabinet may hold the personal data for longer periods in order to comply with its legal obligations.

Confidentiality and Integrity: Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized and unlawful processing, access, loss etc.

Accountability: A Magic Cabinet complies with transparent data protection processing and adheres to its legal obligations in relation to data protection and privacy

Data Collection

We collect several types of data from and about the users of our Website and others, including:

Contact details such as your name, postal address, e-mail address or telephone number, username- in case of user registration-.If you are connecting into A Magic Cabinet website, via social media platform such as Facebook or Google, we may collect your account username and/ or profile picture ("personal information");
Data regarding your internet connection such as your IP address, browsing patterns, user’s behavioural patterns, equipment you use to access our Website and usage details connected through the use of cookies.
In connection with any transaction and payment services, data including but not limited to, bank account numbers, credit/debit card numbers, expiration dates and security codes. We do not store or process your card details ourselves, they are processed and stored via one of our contracted third-party service providers;
Information to assist us in detecting, preventing, and/or remediating fraud or any other harmful actions, we will verify the personal information you provide (including, but not limited to your name, address, details of user funding instruments, and details of payment transactions) with the relevant payment processors and/or credit reference and fraud agencies.
History of your orders placed via our Website
Details of when we contact you and when you contact us. We keep a record of any e-mail correspondence you send us or any other conversation with us, so we can track any problems or concerns you have had with any of the retailer's products or stores operated through the sites

We collect this data:

When you navigate through our Website
When you provide it to us.

Use of Information

We use information that we collect about you or that you provide to us, including any personal information in order to:

present our Website and its contents to you;
send you our newsletter, presenting any updates of our Website;
provide you with information, products or services that you request from us;
offer and carry out our core business purposes which include:
Electronic commerce
Online services
allow you to participate in interactive features on our Website;
process and manage your order so they we can complete the sale between us and you and to fulfil your order;
verify your identity and your payment method or credit card account for the detection, prevention, and/or remediation of fraud, terrorism or any other harmful or criminal actions;
carry out research and customer surveys where we have your consent;
provide customer service and respond to your queries, feedback, claims or disputes;
For any other purpose where we have your consent.

Disclosure of Information

Personal data collected and processed by A Magic Cabinet is not, generally, disclosed to third parties unless such disclosure is expressly required by law.

As part of our compliance with the principle of transparency and in order to be able to provide you with our services effectively, we may need to pass on your personal data to certain third parties.

Specifically, we may disclose personal information that we collect or you provide to:

To contractors, service providers and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To logistics and other shipping and delivery service providers;
payment processing and technology services;
To a regulatory or government authority where required by law or in order to exercise, establish, defend our legal rights or protect your vital interests;
Where require to do so, to payment processors, auditors, customer service providers, fraud agencies, credit reference agencies, financial product providers, credit card associations, commercial partners, etc.

The aforementioned service providers must be compliant with our data privacy policy and are only permitted to use your personal data in connection with the purposes specified above and not for their own purposes.

Your personal data rights

Right of Access

You have the right to obtain from A Magic Cabinet a confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and a receipt of a copy.

Right to Rectification

You have the right to obtain from A Magic Cabinet the rectification of inaccurate personal data concerning you.

Right to Erasure

You have the right to obtain from A Magic Cabinet the erasure of personal data concerning you. A Magic Cabinet will proceed to delete your personal data, where at least one of the following grounds applies:

The personal data are no longer necessary in relation to the purposes for which they were collected
You have withdrawn your consent on which the processing is based
You object to the processing and there are no overriding legitimate grounds for continuing such processing
The personal data have to be erased in order to comply with a legal obligation

Right to Restriction of Processing

You have the right to obtain from A Magic Cabinet the restriction of processing where one of the following applies:

The accuracy of the data is contested
The processing is unlawful and you oppose the erasure of the personal data
A Magic Cabinet no longer needs the personal data for the purposes of the processing

Right to Data Portability

You have the right to receive the personal data concerning you and which you have provided to A Magic Cabinet, in a structured, commonly used and machine-readable format where at least one of the following applies:

The processing is based on consent
The processing is based on a contract

Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, the data subject shall have the right to lodge a complaint to the Hellenic Data Protection Agency (www.dpa.gr) if the data subject considers that the processing of personal data relating to him or her infringes his rights under the General Data Protection Regulation.

If you would like to exercise any of the rights set out above, please contact us at gdpo@amagiccabinet.com

If you make a request and are not satisfied with our response, or believe that we are illegally processing your personal data, you have the right to lodge a complaint to the Hellenic Data Protection Authority.

Data Retention and Destruction

A Magic Cabinet will keep your personal data only for as long as is necessary in order to carry out the scope of the data processing. However, there may be times that we are required to store your personal data for longer periods in order to comply with a legal obligation.

Retaining personal data for a period longer than is actually necessary, contravenes the principles of data minimization and proportionality and therefore once the data processing is complete, or the time period set by Law has passed, we will proceed to delete your personal data.

Queries

If you have any queries or concerns about our privacy protection practices or believe we have not adhered to this Policy, please do not hesitate to contact us at gdpo@amagiccabinet.com