Privacy Policy

We strive to provide you with detailed information about the processing of your personal data, regardless of how you communicate with us: via the website or in person. This Magic Crafts Personal Data Protection Policy (the “Policy”) also applies to the online platform www.naturalino.es (the “Website”), which is operated by naturalino, address: calle Barriada blas Infante 12 (“we” or “Naturalino”).
We care about protecting your personal data and privacy and consider your privacy to be a very important issue. We collect, store, and process all data in accordance with the EU General Data Protection Regulation 2016/679 (the “Regulation”), the Personal Data Protection Act (the “Act”), and other legal acts.

This Policy is intended to inform you about how we collect, use, and share the personal data you provide, as well as other personal data we may collect from you in other ways. We strive to ensure that the collection and use of your data is fair and transparent.
The services provided on our Website may only be available after the collection, storage, transfer, deletion, and/or other use (hereinafter referred to as “processing”) of specific data related to you. Personal data is any information about you that you provide or that we obtain from other sources and that allows you to be identified (hereinafter referred to as “Data”), such as your first name, last name, address or email address, information about agreements concluded with us and the history of their execution, etc.

Please read this Policy carefully, as it describes what data we collect from you and for what purposes we process it when you use our website. It also contains important information about the protection of your data, in particular your rights under the law. We may make changes to this Policy in the future, so we recommend that you review it periodically. If you have any questions, please contact us using one of the methods listed below.

Some services on our website are provided by third parties. When using these services, this Policy also applies to the data protection policies of third parties.

What personal data do we collect and process?

When you visit the Website, we collect and process your identification data, such as your device's IP address, information about the browser used by your device, and other browsing information, including data about when and from where the Website was visited, or specific pages you visited on the Website;
We will not use the personal data listed in this section, especially your IP address, without your explicit permission, except where such use is necessary (i) to provide our services and/or (ii) for security purposes, in particular to prevent cyber attacks such as data collection or interference with services, as well as to prevent unauthorized programs.

If you add items to your shopping cart but have not yet paid for them, we collect and process your key personal data, such as your first name, last name, phone number, email address, delivery address (information about the person or company to whom the goods are to be delivered, street name, house number, city, country).
If you purchase the goods you have selected, we collect and process your basic personal data, such as your first name, last name, telephone number, email address, delivery address (information about the person or company to whom the goods are to be delivered, street name, house number, city, country), product information, price, transaction time, and payment method.

Important: If you provide us with data about other persons related to you (especially in cases where you indicate that the items should be delivered to another person), you should obtain the consent of those persons and familiarize them with this Policy.

Why do we collect and use your personal data?
We process your data for the following purposes:

In order for you to easily purchase and pay for goods, and for us to provide you with services, identify you and contact you, as well as properly fulfill our contractual obligations, we process your first name, last name, email address, phone number, and other contact information, as well as data about transactions concluded with us and information we receive from you when you use our services.
To ensure remote service provision, we store your IP address and other identifying data, the content and time of messages, and other technical data.

For the purpose of communicating with you, for example, to respond to your questions and requests for services, as well as to obtain your feedback, send important notifications (regarding the General Terms and Conditions of Service, changes to this Policy or other documents) or send technical notifications, updates, security alerts, support and administrative messages, we process your contact information and the content of messages you receive and send.
To improve the quality of our products, services, and marketing, we automatically analyze your personal data, including information about the products you have ordered and your purchase history (i.e., which products you have purchased). We collect and analyze your data for internal purposes, such as tracking and analyzing trends in our products and services to understand which aspects of our products and/or offerings are most interesting to our customers. This helps us understand your needs, which makes our business more efficient and profitable, and helps us better manage, improve, and develop our products, services, and communications.

To send general direct marketing offers, we collect and use your email address and phone number (in some countries).
In order to adequately protect Magic Crafts and the legitimate interests of third parties, we will process data to protect ourselves from unauthorized actions, in particular fraud, to prevent cyber attacks and other threats to the integrity of our Site, as well as to protect our interests in order to resolve disputes in the event of improper enforcement of the Rules, and to protect and exercise any other rights.

What gives us the right to receive and use your personal data?
We receive and use your personal data under at least one of the following conditions:

you intend to conclude or have concluded a contract for the sale of goods;
you have given your consent;
the processing of personal data is possible on the basis of legal acts;
in pursuit of our legitimate interests, such as:
to improve the quality of our services, to ensure the consistency and sustainability of our activities, to ensure that the services we provide meet your expectations, to ensure maximum satisfaction with our services;
for the purpose of initiating legal proceedings and other legal actions, as well as defending against them in order to avoid or reduce losses.
Important: We will not be able to provide you with services if you do not provide us with any personal information that we need to conclude or perform the agreement.

Use of cookies
Necessary cookies

Cookies are small text files that are placed on your computer or other devices connected to the Internet (e.g., tablets, smartphones) when your browser settings allow the use of cookies. Our cookies are necessary for the functionality and operation of our website (e.g., to store information about items added to your shopping cart), and we use them only for this purpose. Most cookies are deleted from your device after you close your browser session (session cookies).

Other cookies and consent to their use

When you enter the Site, we ask you to agree to the installation of additional cookies on your device. By continuing to use the Website after the cookie notice is displayed, you agree that we will use cookies for the above purposes (“Cookie Consent”). These cookies help us:

Track the number of visitors to the Website and their behavior on it. This helps us improve the functionality of the Platform, for example, to ensure that users can find what they are looking for (analytical/operational cookies).
Track when you revisit our Platform. This helps us personalize content, greet you by name, and remember your settings (functional cookies).
We record your visits to our Platform, the pages you visit, the links you click on, and the products you add to your cart. We use this information to better tailor our Platform and show you advertisements tailored to your needs, as well as for direct marketing (targeted cookies).

Use of third-party cookies

When you use the Website's services, cookies or network data collectors from other providers may be used in relation to you. This may be done to measure groups, activate contextual advertising, or target campaigns. Once you have consented to the use of cookies, we will also evaluate user profiles using a pseudonym. It will not be possible to identify individuals. We have no control over third-party tracking technologies and their use. You can stop the storage and tracking of these third-party cookies by changing your browser settings.

Where do we obtain your personal data?
We use the personal data you provide when you contact us in connection with our services, and when you use them, we also use the data we record on the Website.

Who do we share your personal data with?
To provide certain services, Magic Crafts may engage third-party service providers who perform data processing procedures on our behalf and in accordance with our instructions. We carefully select these third-party service providers in accordance with the law. We strive to ensure that service providers comply with regulations, laws, policies, and other mandatory legal requirements. The relationship between us as the data controller and a specific data processor is governed by a written agreement or written terms and conditions, except where such relationship is governed by laws or regulations.

We provide your personal data in accordance with legal requirements. Your personal data may be transferred to payment and other service providers involved in our transactions with you (e.g., for refunds in the event of a return, etc.), courts or other dispute resolution bodies, as well as third parties in the event of a sale, merger, acquisition, or reorganization of all or part of the business, as well as in the event of similar changes in the business (including potential or existing buyers of the business and their advisors).

In this Policy, we may use various service providers as personal data processors, such as data centers, cloud services, companies providing website administration and related services, advertising and marketing companies, companies that create, provide, support, and develop software; companies providing technology infrastructure services, companies providing communication services, companies providing messaging, direct marketing, and related services, professional advisors and auditors, as well as other consulting companies, companies providing online viewing or online business analysis services.

Some of these service providers may be located in countries outside the EU/EEA where the level of data protection in accordance with EU/EEA standards may be considered insufficient. However, we have entered into appropriate agreements with such service providers (or have other effective safeguards in place) that ensure that all necessary measures are taken to protect your data in accordance with applicable requirements. If you have any questions about our service providers, please contact us at team@magiclinen.com. Upon request, we will always provide additional information about our data security safeguards (a copy of this information can be sent by email).

Important: Payment and other service providers involved in our transactions with you may be located or operate in a country that does not provide an adequate level of data protection. In this case, we will take all measures to ensure the secure use of your personal data, but in some cases we will not be able to guarantee that the recipient of the data will comply with EU requirements.

How long do we store your personal data?
We store your personal data for no longer than is necessary for the purposes for which it was collected, or for the period specified by law, for example:

We store the data of customers who have ordered goods for a further 10 years, but no longer than is necessary for accounting purposes in accordance with the periods specified by law.
Customer data obtained through cookies is stored until the end of the session or for another period of up to 2 years.
The data of customers who have subscribed to the newsletter will be stored for 1 month after unsubscribing from the newsletter.

How secure is your personal data?
We currently use and will continue to use various security technologies and procedures to protect your personal data from unauthorized access, use, or disclosure. Our service providers are carefully selected, and we require them to use appropriate measures to protect your privacy and ensure the security of your personal data. Access to data is only granted to those individuals who need it for the purposes described in this Policy.

However, we would like to draw your attention to the fact that data transmission over the Internet or by email is not always completely secure, and it is impossible to guarantee that third parties will not gain access to it, so you should exercise caution when providing information using a public computer.

What are your rights?
You have the following rights:

the right to request that we provide you with access to your personal data by providing you with copies of this data (right to information);
the right to request the correction of incorrect, inaccurate, or incomplete data (right to correction);
the right to restrict the processing of your personal data until the lawfulness of its processing has been verified at your request (right to restriction of processing);
the right to request the deletion of personal data (right to erasure);
the right to object to the processing of personal data for direct marketing purposes, as well as in cases where personal data is processed to pursue our legitimate interests;
the right to request the transfer of your personal data to another controller or to receive the data in a format that is directly accessible to you (this applies to personal data that you have provided yourself and that is processed on the basis of the conclusion and performance of a contract) (right to data portability)
the right to withdraw your consent without prejudice to the use of your personal data prior to the withdrawal of your consent (right to withdraw consent);
the right to lodge a complaint with the State Data Protection Inspectorate (right to complain) (for more information, see www.sanidad.gob.es


How to exercise your rights?
We make every effort to ensure that your rights are respected and to respond to any questions you may have regarding the information contained in this Policy. You may send requests to exercise the above rights, complaints, notifications, or inquiries (hereinafter referred to as “Requests”) to Naturalino using the contact information provided below.

We will respond to your request within 30 days of receipt. In exceptional cases requiring additional time, we reserve the right, after notifying you, to extend the processing time for the requested data or other claims specified in your request to 60 days from the date of your request.

We will refuse to satisfy your request with a reasoned response, notifying you of this in writing, when the circumstances specified in the Regulation and other legal acts are established.

Our contact details
If you have any questions regarding the processing of your data or questions regarding your rights, please contact us at n.naturalino@gmail.com, Spain, 29680 Estepona, calle barriada blas Infante 12/3c

What principles of personal data protection do we follow?

When collecting and using the personal data you have entrusted to us, as well as your personal data obtained from other sources, we follow the following principles:
Your personal data is processed in a lawful, fair, and transparent manner (principle of lawfulness, fairness, and transparency).
Your personal data is collected for specific, clearly defined, and legitimate purposes and will not be further processed in an incompatible manner (principle of purpose limitation).
Your personal data is sufficient, relevant, and necessary only for the purposes for which it is processed (principle of data minimization).
The personal data processed is accurate and updated when necessary (principle of accuracy).
Your personal data is stored in a form that allows identification for no longer than is necessary for the purposes for which your personal data is processed (principle of storage limitation).
Your personal data is processed in such a way as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by implementing appropriate technical or organizational measures (principle of integrity and confidentiality).

Our commitments

When collecting and using your personal data, we undertake to:

Process your personal data only for clearly defined and legitimate purposes.
Not process your personal data for purposes not specified in this Policy, except as provided by law.
Process your personal data in a lawful, accurate, transparent, and fair manner and in a manner that ensures the accuracy, authenticity, and security of the personal data being processed.
Ensure that no excessive personal data is processed.
Manage your personal data for no longer than is necessary to achieve the purposes for which the personal data is processed.
Be responsible for compliance with the principles set out in this Policy and be able to prove compliance.
Perform other duties established by law.

This Policy takes effect on November 20, 2025, and may be amended in connection with changes in legislation and our activities. We will notify you of any changes on the website www.naturalino.es