magicgift.ro

Privacy Policy

Last updated: 17 September 2026

1. The data controller

TOP GUIDE S.R.L., Tax ID (CIF) 54815518, J2026036188000, Str. Calea Roșiori, Nr. 104, Sat Văcărești, Comuna Drăgănești de Vede, Teleorman, 147132, Romania, is the controller of your personal data.

Email: comenzi@magicgift.ro · Phone: 0779 243 541

Data is processed in accordance with Regulation (EU) 2016/679 (GDPR), Romanian Law no. 190/2018 and Law no. 506/2004.

2. What data we collect

We collect the following personal data needed to process orders:

  • First and last name;
  • Delivery address (county, locality, street, postal code);
  • Phone number;
  • Email address;
  • The photos, texts and, for the artwork with a speaker, the audio recording uploaded to personalise the product;
  • For orders started but not completed: the name, phone and email entered in the form, the products in the cart, the IP address and the approximate country/locality derived from the IP (see the “Uncompleted orders” section).

3. Purposes of processing

  • Processing and delivering orders;
  • Communicating with the customer about the order status;
  • Sending the order confirmation by email;
  • A single message (email and, for Romanian mobile numbers, SMS) about an order that was started but not completed;
  • Fulfilling legal obligations (invoicing, accounting);
  • Direct marketing and promotion to existing customers (offers, new products, personalised ads).

4. Legal basis

Processing is based on the performance of the contract (placing the order) under Art. 6(1)(b) GDPR and on legal obligations under Art. 6(1)(c) GDPR.

For direct marketing to existing customers — including showing personalised ads through customer lists (Customer Match) — processing is based on legitimate interest under Art. 6(1)(f) GDPR. You can object to this processing at any time.

5. Retention period

Personal data is stored for as long as necessary to fulfil the stated purposes, but no longer than 3 years from the last order, except for data required under legal obligations (invoices — 10 years).

Data categoryRetention period
Order and contact dataMaximum 3 years from the last order
Invoices and accounting documents10 years (legal obligation)
Photos, texts and audio files from placed ordersMaximum 12 months from delivery
Data from orders started but not completedMaximum 30 days from the last activity

6. Recipients

Data may be shared with:

  • Courier services (FanCourier, Sameday) — to deliver orders;
  • Hosting and storage services (Vercel, Supabase, Cloudflare) — to run the website;
  • Email services (Resend) — for notifications;
  • The payment processors Netopia Payments (Romania) and Stripe (international) — for online card payments. Card details are entered directly on the processor's secure platform; we do not see or store them;
  • Invoicing services (FGO) — to issue invoices;
  • Analytics services (Google Analytics 4, Vercel Analytics) — for website usage statistics;
  • Advertising platforms (Google — Google Ads; Meta — Facebook/Instagram; TikTok) — to measure conversions and show relevant ads. Contact details are shared exclusively in encrypted (hashed) form.

Transfers outside the European Economic Area

Some of the providers above (Vercel, Cloudflare, Google, Meta, TikTok) are companies based in the United States or process data outside the EEA. These transfers are carried out on the basis of the Standard Contractual Clauses approved by the European Commission and/or the EU-U.S. Data Privacy Framework, which ensure an adequate level of data protection.

The photos and texts you upload

  • Purpose: we use them exclusively to make, show you (preview, confirmation email) and deliver the ordered product. We do not use them in ads, on the website or on social media without your written consent, requested separately.
  • Storage and access: they are stored on Cloudflare R2, at randomly generated addresses that are not publicly listed. Only the people working on your order have access.
  • How long we keep them: no more than 12 months from delivery, for complaints or a possible reorder.
  • Deletion on request: write to us at comenzi@magicgift.ro and we will delete them within 30 days at the latest (usually within 2 working days), unless the order is still in production.
  • Image rights: by uploading a photo, you confirm that you have the right to use it and the consent of the persons appearing in it. For photos of minors, you confirm that you are their parent or guardian or have their parent's or guardian's consent.

Uncompleted orders

When you fill in your name, phone or email in the order form, we save this data together with the products in the cart, the IP address and the approximate country/locality derived from the IP, even if you do not complete the order. The purpose is to be able to contact you only once (an email and, if you have a Romanian mobile number, an SMS) with a link to your order, sometimes accompanied by a discount. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in completing an order you started. The data is deleted after 30 days at the latest if you do not place the order. You can object at any time by replying to the message or writing to comenzi@magicgift.ro.

7. Marketing and advertising audiences (Customer Match)

We may use your email address and/or phone number, shared in irreversibly encrypted form (SHA-256 hashing), with advertising platforms such as Google (Google Ads) and Meta (Facebook/Instagram), in order to:

  • show you relevant ads for our products;
  • create lookalike audiences (people with a profile similar to our customers);
  • exclude you from certain campaigns (for example, so as not to show you ads for products you have already bought).

The data shared is encrypted, is not sold and is not used by these platforms for any purposes other than those above. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). You can object at any time by writing to comenzi@magicgift.ro or manage your ad preferences directly in your Google or Facebook account.

8. Your rights

Under the GDPR, you have the right to:

  • Access your personal data;
  • Rectification of inaccurate data;
  • Erasure of data (“right to be forgotten”);
  • Restriction of processing;
  • Data portability;
  • Object to processing.

To exercise these rights, contact us at comenzi@magicgift.ro or 0779 243 541.

9. Complaints

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.

For consumer disputes, you can also contact the Romanian National Authority for Consumer Protection (ANPC) or use the European online dispute resolution platform: consumer-redress.ec.europa.eu.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including SSL/TLS encryption, restricted access and secure storage.

magicgift.ro

TOP GUIDE S.R.L.

CIF: 54815518

Reg. No.: J2026036188000

Str. Calea Roșiori, Nr. 104

Sat Văcărești, Comuna Drăgănești de Vede, Teleorman, 147132, România

Contact

+40 779 243 541

comenzi@magicgift.ro

Monday-Friday, 09:00-18:00

Useful links

Product categoriesSearchPersonalize

Legal information

About usShippingReturnsPayment PolicyTerms and conditionsPrivacy policyCookie policyCookie settingsContact

© 2026 magicgift.ro — All rights reserved

Netopia PaymentsANPC SALSOL - Solutionarea Online a Litigiilor