Data Privacy Policy

In the following, we will inform you about the type, scope and purpose of the processing of your personal data when you use our website “magaloop.com”. Personal data is any information which relates to an identified or identifiable natural person.

  1. Controller

The Controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. For the personal data processed when visiting our website, the Controller within the meaning of the GDPR is: MagaLoop GmbH, Windscheidstraße 4, 10627 Berlin, telephone +49 30 5490950 13, fax +49 30 5490950 23, email [email protected] (hereinafter referred to as “we”).

  1. When you visit our website

When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website (“referrer”), IP address and time of the page view.

We collect and process this data in order to ensure the failure-free operation of our website and to be able to recognize, prevent and track any misuse of our services. We also use the collected data for statistical purposes, for example to evaluate the end devices and browsers used to access our Platform, in order to continuously improve our services and adapt them to the needs of the users on this basis. This data processing is carried out on the basis of Article 6 (1) f GDPR.

We delete all of the above-mentioned personal data no later than twelve months after it has been collected.

  1. User account, order inquiries

You have the option to create a user account for our website. The data required for this purpose, which is processed by us, is entered into the input form when opening the user account. A user account can be opened in order to conclude a user agreement for the services which we offer to traders. The legal basis for the processing of your data is therefore the intended conclusion of a contract (Article 6 (1) b GDPR). We store the data relating to the user account until all mutual rights and obligations arising from the contractual relationship have been finally settled and the commercial and tax retention periods applicable to us have expired.

If you use your user account to send an order request to a Supplier who is connected to the Platform, we will send your request together with your name, address, email address and telephone or fax number – as long as you have stored these details on our Platform – to the requested Supplier in fulfilment of your user agreement with our Platform (Article 6 (1) b GDPR).

  1. Data analysis

We analyze the order inquiries placed on our Platform in an anonymous form for market research purposes. When doing so, we record such data as the goods that are ordered and the quantity in a certain cluster. A cluster can be a geographical area, for example a postcode area. We may make the results of our analyzes available to third parties, e.g. manufacturers or wholesalers, for a fee. The processed data cannot be used to identify a single customer.

  1. Third party advertising opportunities

MagaLoop can give its contractual partners, such as manufacturers or wholesalers, the technical option of displaying advertising on the Platform. The advertiser can specify certain characteristics of the target group selected to see the advertisement. However, MagaLoop does not provide advertisers with any personal data from participating retailers.

  1. Transfer of contact and order data to partners

If you have given your consent, we will send your contact details (name/company, business address, email, telephone and fax, if available) together with information about the items you have requested to manufacturers, dealers and service providers so that they can contact you by telephone, email, fax, post or even personally in order to make you offers relating to goods or services which may be of interest to your company. At the same time, these partners will gain a better overview of which products or services are in demand, where and to what extent, and can, if necessary, improve the coordination of their offers and advertising within the market. We will only transfer your data to partners based in the European Union.

The legal basis for the processing is your consent in accordance with Article 6 (1) a GDPR.

Participation in this data exchange is voluntary. If you do not consent to this or if you later revoke your consent, you will not suffer any disadvantages in relation to the rest of the contractual relationship with Magaloop.

  1. Processor

As a technical service provider for the operation of our website on the internet, we use the web hosting services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) as a processor in accordance with Article 28 GDPR.

Under the EU-US Privacy Shield Agreement, Google has committed itself to complying with the data protection regulations applicable to the EU.

We also use the services of Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, as a processor in accordance with Article 28 GDPR in order to deliver our website faster worldwide and at the same time protect it from misuse. Cloudflare Inc. has undertaken to comply with the data protection regulations applicable to the EU within the scope of the US-EU Privacy Shield Agreement.

To control our customer service activities, we use a service from the provider Zoho Corporation BV, Hoogoorddreef 15, 1101 BA Amsterdam, the Netherlands, as a processor in accordance with Article 28 GDPR.

  1. Contact

If you use the contact form on our website, we will process the data you enter in the form fields, in particular your name, email address, telephone number, location and your message.

If you send us a message by email, we will save your message, along with the sender data transmitted with it (name, email address and any other information added by your email program and the transmitting servers). We use an email provider to receive, store and send emails, who acts for us as a processor in accordance with Article 28 GDPR.

The legal basis for this data processing is our legitimate interest in responding to your message properly and quickly and also being able to respond to any follow-up questions from you (Article 6 (1) f GDPR). We will delete the data collected in connection with your message no later than twelve months after the last communication with you about your request, subject to the provision of the following paragraph.

If you send us a legally relevant declaration regarding an existing contractual relationship with us, the legal basis for the processing, regardless of the transmission method, is also Article 6 (1) f GDPR. In such a case, we will delete the data related to your declaration as soon as all mutual claims arising from the contractual relationship have finally been settled and the retention periods under commercial and tax law have expired.

  1. Use of cookies

We place a “cookie” on your device when you visit our website. This is a small text file which enables us to recognize your device if you visit our site again at a later date. With the help of cookies, we can also analyze certain user behavior, e.g. which sections of our website you use, how long you stay on our website and when and how often you return to our website. We delete a stored cookie no later than twelve months after your last visit to our website.

This data processing is carried out on the basis of Article 6 (1) f GDPR for the purpose of aligning our website even more closely with the interests of our visitors and the technology they use (device and browser types), and to analyze and optimize the functions of our website and the efficiency of any advertising measures.

You can prevent the creation of cookies by going to the cookie settings of your internet browser and objecting to the creation of cookies for our site or for all websites. You can also delete cookies which have already been stored. You can also delete cookies which have already been stored.

  1. Google Analytics

We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google stores a cookie on your device. Google can use this cookie to collect information about how you use our website. This information is transmitted to a server in the USA, where it is evaluated by Google and made available to us. The legal basis is Article 6 (1) f GDPR, namely our legitimate interest in evaluating and optimizing our website.

Under the EU-US Privacy Shield Agreement, Google has committed itself to complying with the data protection regulations applicable to the EU.

We use Google Analytics with activated IP anonymization. This means that your IP address is usually shortened within the scope of the GDPR in such a way that the IP can no longer be used to identify you. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transferred by your browser is not merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly.

  1. Facebook pixel

The website uses the Facebook pixel from Facebook Inc., 4 Grand Canal Square, Grand Canal Harbor, D2 Dublin, Ireland (“Facebook”). This enables users of this website to be tracked via other websites which use the Facebook pixel. This is used to analyze and optimize our online services, in particular re-targeting, i.e. renewed advertising on other websites and allocation to target groups for Facebook ads.

You can find more information about the collection and use of data by Facebook and your rights and options regarding the protection of your privacy in Facebook’s data privacy policy at https://www.facebook.com/about/privacy/. Alternatively, you can deactivate the re-marketing function “Custom Audiences” at https://www.facebook.com/settings/?tab=ads#=. You must be logged in to Facebook to do this.

In connection with this service, we process your personal data as follows:

a) Purpose of processing

We process your personal data in order to use the Facebook Pixel to display advertisements.

b) Legal basis for processing

The processing of your personal data for the use of the Facebook pixel to display advertisements takes place on the basis of your consent.

c) Recipients/recipient categories for your personal data

We disclose your personal data to Facebook.

d) Duration of the storage of your personal data

We store your personal data as long as this is necessary for the use of the Facebook pixel to display advertising.

e) Third-country involvement in the processing of your personal data

Facebook processes your personal data in the USA. The USA does not offer an adequate level of data protection. However, processing by Facebook takes place within the framework of an adequacy decision (EU-US Privacy Shield) (Art. 45 GDPR).

f) Obligation to provide your personal data

You are not obliged to disclose your personal data. Unless you have used the above-mentioned function to deactivate tracking by the Facebook pixel, it will not be possible to access this website without processing your personal data within the framework of the Facebook pixel.

  1. Your rights

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, we will inform you of the personal data stored about you and further information in accordance with Article 15 (1 and 2) GDPR.

You have the right to have any incorrect personal data relating to you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary declaration.

You can request the immediate erasure of your personal data under the conditions of Article 17 (1) GDPR, insofar as their processing is not required in accordance with Article 17 (3) GDPR.

You can request that we restrict the processing of your data if one of the requirements of Article 18 (1) GDPR is met. In particular, you can request the restriction instead of erasure.

We will inform all recipients to whom we have disclosed personal data concerning you about any correction or erasure of your personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients upon request.

You have the right to receive the personal data which you have provided to us in a structured, common and machine-readable format, and you can request that we transmit this data to another processor without hindrance, to the extent that this is technically possible.

If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the data processing which took place up until to your withdrawal.

RIGHT TO OBJECT: YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR REASONS ARISING FROM YOUR SPECIAL SITUATION; this right of objection exists in relation to data processing which takes place on the basis of Article 6 (1) f GDPR in order to safeguard our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data prevail. If you exercise your right of objection, we will no longer process the data concerned, unless we can demonstrate compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or that the processing serves the assertion, exercising or defense of legal claims.

IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT ADVERTISING PURPOSES (E.G. NEWSLETTERS), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNED, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THIS PURPOSE.

If you are of the opinion that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.