Privacy Policy

PRIVACY POLICY

Thank you for your interest in our company, website, services and/or products.

When you want to establish a relationship with us and use the services of our company MAGNEVITAL SRL (hereinafter referred to as "MAGNEVITAL"), you entrust us with information about yourself, also referred to as personal data, and we thank you for your trust. The protection and confidentiality of personal data is a very important subject for us and we strive to store them securely and process them carefully, and to this end we explain to you in a clear and transparent manner what our practices are regarding the confidentiality of your data.

This information is set out in this document (hereafter referred to as the "Privacy Policy", "This Document" or "Document") and please read it together with the Terms and Conditions section (which you can find here magnevital.com).

Our Privacy Policy is intended to inform you about the processing of your Personal Data in connection with your visit to our website magnevital.com (the "Website") and your use of any additional services offered by MAGNEVITAL.

By visiting the Site, purchasing our products and/or services, or interacting with us through any means, you signify your agreement to our Privacy Policy. If you do not agree with what is described in this Document, please do not use our services.

We inform you that MAGNEVITAL is a personal data controller within the meaning of the GDPR for the processing of personal data.

Definitions.

Personal data - means any information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity;

Processing - shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

GDPR (General Data Protection Regulation) or RGPD (General Data Protection Regulation) or Regulation - means REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF THE EUROPEAN UNION No 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, together with the repeal of Directive 95/46/EC;

Operator or Company or We - means MAGNEVITAL SRL, a Romanian company with registered office in Gura Humorului, Wurzburg str. 75A, room 1, Suceava county, registered in the Trade Register under order no. J2024045069006, with fiscal registration code 50952679;

Data subject - means any identified or identifiable natural person whose data are processed by us as controller, such as customers, potential customers or visitors to the website;

Consent - shall mean any freely given specific, informed and unambiguous indication of the data subject's free will by which he or she signifies his or her agreement, by an unequivocal statement or action, to personal data relating to him or her being processed;

Anonymization - means the irreversible elimination of the identifiability of personal data so that it is impossible to identify the individual by the use of reasonable time, cost and technology, whether by the Controller or any other person, to identify that natural person. The personal data processing principles do not apply to anonymized data, as it is no longer personal data.

Who are we?

Please find below our contact details:

Name	MAGNEVITAL SRL
Head office	Gura Humorului, str. Wurzburg 75A, room 1, Suceava county
Commercial Register Number	J2024045069006
Tax registration code	50952679
E-mail	hello@magnevital.com
Phone	+40.753.407.513

In accordance with the applicable legislation, our company is a personal data controller, and in order to process your data securely, we make every effort to implement reasonable and appropriate technical and organizational measures to protect your personal data.

Who are you?

According to the law, you, the natural person receiving our services/products, the representative or contact person of a company that is our customer or potential customer, a visitor to our website or a person in any relationship of any kind with us, are a "data subject", i.e. an identified or identifiable natural person. In order to be fully transparent about our data processing and to enable you to easily exercise your rights at any time, we have implemented measures to facilitate the exercise of your rights.

Other services

This Privacy Policy does not cover other third party applications and websites that you may reach by accessing links on our website, and we encourage you to review the Privacy Policy of any website and/or application before providing any personal data.

We are also not responsible for any links from our commercial partners or those who place advertising within our podcasts or articles, including those on social media profiles. When you click on those links, third parties may collect or share data about you.

You should be aware that we do not control any kind of link that is placed on the site by us or by other Users (such as, for example, links left in comments, videos, community, social networks, etc.) and that you are fully responsible when you access such links and you assume any kind of damage (direct or indirect) that may occur.

Complaints

If you have any problems or concerns about the processing of your personal data, you should be aware that you can lodge a complaint with the personal data supervisory authority, but please send us a request first to the address mentioned in this document and we will make every effort to resolve your request as soon as possible, amicably.

For Romania, the contact details are as follows:

Name	National Supervisory Authority for Personal Data Processing
Address	B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone	+40.318.059.211 or +40.318.059.212
E-mail	anspdcp@dataprotection.ro

Purpose of the privacy policy

The purpose of this Privacy Policy is to explain to you what information we process (collect, use, share), why we process it, how we process it, your rights under the GDPR and how you can update, manage, export and delete it, and for this purpose we act as a controller and are required by law to provide you with this information.

Please be aware that this Privacy Policy applies wherever you find us online.

Processing and type of personal data - Rights of visitors/registered users

Personal data or personal information is all information about an individual that can help to identify that person, and does not include data where the identity has been removed (anonymized data).

When you browse our website and use our services/products or when you contact us for any purpose and using any communication channel, you may communicate your personal data to us. We may need to collect, use, store or transfer certain personal data directly from you or from other sources.

7.1. Processing of personal data

In case of an online order, the MAGNEVITAL Company will process the user's personal data declared by the user during the creation of his/her account and/or his/her order in the data registration form, in order to finalize the specific order through the online shop. Each user of the magnevital.com website has the possibility to choose between two ways to finalize an online order and to declare his/her personal data:

a) As a simple visitor. In this case, his/her personal data will be kept in the MAGNEVITAL Company's archives for ninety 90 (ninety) days from the delivery or finalization of the respective order, and their processing will relate exclusively to the execution of the distance selling contract. However, the information proving the completion of the transaction will be kept for tax purposes (invoice document), and his/her contact details will be used by the Company for commercial advertising purposes, unless the User has declared that he/she does not wish to receive such communications.
b) As a registered user of the MAGNEVITAL online shop. Once a year, MAGNEVITAL Company will ask the registered user to confirm the veracity of the data he/she keeps and to update it in case of any changes. The registered user can modify or rectify his/her data at any time by logging into his/her account at magnevital.com (login) with his/her username and password.

7.2. Type of personal data and purpose of processing

In particular, the personal data that each user must provide (either as a visitor or as a registered user) in order to carry out any transaction through the magnevital.com online store of the MAGNEVITAL Company and to place orders for its products are as follows:

the person's full name;
delivery address of the products;
the billing address of the order (if different from the delivery address);
Full billing details such as name, profession, tax administration and a tax identification number (if a commercial tax invoice has been chosen);
phone number;
his e-mail address.

In addition to the above, MAGNEVITAL also collects and stores the following personal data for registered users only:

order history;
date of last access;
products in your shopping cart or favorites list;
participating in promotions.

Where delivery of products or services is requested to a third party other than the registered visitor or user, the registered visitor or user acknowledges that he/she shall be fully responsible for informing and fully consenting the person, whom he/she designates as the recipient, to the disclosure of his/her personal data to MAGNEVITAL for the sole purpose of delivering those products to him/her and shall assume full responsibility for any claims of that person against MAGNEVITAL.

The credit card details used by the visitor or the registered user are not stored on MAGNEVITAL's storage channels during the transaction, but are recorded directly in a secure environment of the partner company that handled the card operations.

The visitor/registered user is also informed that for MAGNEVITAL Company's communications with him/her, in the context of Law no. 365 of June 7, 2002 on electronic commerce, it processes the contact data provided by the user.

Also, when the registered user is sent notifications by SMS/email etc. for changes to the terms of use of the magnevital.com portal with a hyperlink, it is possible to record the IP address of his/her electronic device (mobile phone, tablet, computer etc.) to prove that the registered user has received the notification.

The purpose of the basic data processing is the execution of the contract and the finalization of the specific order, communicating with the registered visitor/user and sending information messages about the order processing steps, providing clarifications related to the order and in general information about the purchases made, delivering the order to the place chosen by the registered visitor/user, confirming and identifying the registered visitor/user in any necessary case and informing about the status of the order.

The visitor/registered user is informed that the provision of the above personal data and mandatory processing data is necessary and a prerequisite for the correct execution of the order and delivery of the products and services. For this reason, his/her consent is not required for this specific processing.

Each visitor/registered user who uses magnevital.com is hereby informed that his/her personal data relating to the receipt, fulfillment and delivery of an order, as well as inquiries regarding purchases, MAGNEVITAL Company's products and services and orders placed on magnevital.com will be processed for the purpose of servicing the users - customers both by MAGNEVITAL Company's competent employees and by third party recipients and/or processors on behalf of MAGNEVITAL in the context of fulfilling an order. These third party recipients are transport companies, individual or group shipping companies, internet and e-commerce service providers and customer service call centers, with which MAGNEVITAL cooperates and which are subject to the specific strict conditions for the processing of personal data agreed with MAGNEVITAL as data controller. MAGNEVITAL Company requires its employees, the operators who maintain its website, as well as its third-party partners to take all necessary technical and organizational measures (including policies and procedures to prevent disclosure of personal data of visitors/registered users - customers that it processes and holds and to implement procedures to manage and process personal data in a lawful and GDPR-compliant manner and to protect it.

No further processing or transmission of information about registered visitors/users will be carried out by the MAGNEVITAL Company and its online shop magnevital.com, unless there is prior information and full consent, where necessary.

How we process personal data

8.1. Account creation

The account you create on magnevital.com is a real control panel that allows you to centralize information about your purchases and preferences.

Thus, the account you create on magnevital.com gives you the possibility to track the progress of your order, view your purchase history, etc.

Also here you can choose your preferences for our marketing communications (offers and personalized communications about MAGNEVITAL discounts, products, services, events, as well as requests for product reviews).

In addition, for certain features of the account created on magnevital.com, you may be asked for your location details. You have a choice whether to allow or refuse the use of these features. We will not have access to your location as this data is stored locally on your device. If you have chosen to enable this functionality, you can disable it at any time from your device settings.

We may also process certain account data in order to develop new functionalities or to ensure the accuracy and security of your data.

Account creation is required to place orders within the magnevital.com online shop.

To create your account, we will process your email address and the password of your choice. In some cases we may also process your country of origin. If you choose to create an account on magnevital.com by associating it with your Facebook/Google/Apple account, we will retrieve the necessary data from these providers: first name, last name and email address.

In addition, if you update your account information created on magnevital.com, we may process the following information about you: first name, last name, phone number, date of birth, gender, shipping address, billing address, purchase history or other information that may be entered into your account.

8.2. Reviews

We want to know what you think about our products, services, website and shops. At the same time we can improve the quality of our products and services.

When you write a review on our website, we process your first and last name, e-mail address, the length of time you have used the product, the ratings given to products or services and the content of the review. Gender and age are optional and you can publish reviews without this information.

The purpose of processing your personal data is to manage and publish your reviews on our website or on other websites owned by MAGNEVITAL.

8.3. Managing marketing communications

In our marketing communications, we attach great importance to the messages we send to you. Our marketing communications may contain information about products, services, offers, discounts and events created on magnevital.com, collecting feedback or soliciting opinions and reviews about MAGNEVITAL products and services.

8.4. Customer service

To assist you in dealing with situations that may arise and answer your questions, you have several ways to contact us: phone, e-mail, Facebook Messenger, Instagram, Whatsapp, etc.

In order to handle your phone calls and messages and to find out your opinion about our products and services, we will process certain data about you. Depending on the nature of the request, this data may be shared with other internal departments or partners.

For this purpose, we may process the data necessary for handling the call or message: name, surname, e-mail address and telephone number and the data in the content of the call/message, such as - delivery address, order number. We will also process your data by recording your telephone call in order to improve the quality of the services we offer and for evidential purposes. In addition, we will have access to your image within your public profiles from which you contact us (e.g. Facebook, Instagram). You are under no obligation to provide us with your personal data, but without it we may not be able to handle your request.

8.5. Statistical purposes

In certain situations, we may use for statistical or scientific research purposes your personal data collected for the above processing purposes. Statistical information is not considered personal data because it does not allow the individualization of individuals.

The statistical information obtained (e.g. in the form of charts) will contain anonymized data. This means that we will not be able to associate the statistical information with you or any other natural person. As the statistical information obtained does not contain personal data, it may be stored for an unlimited period of time.

We inform you that the processing of your data for statistical purposes does not mean that we will no longer be able to identify you in accordance with the other activities involving the processing of your data. We will continue to process your personal data for the above purposes. For example, we will continue to hold information about you if you have a customer account created on magnevital.com or if you have performed a product review.

8.5. Data processing on social networks

This Privacy Policy is applicable to MAGNEVITAL's official Facebook, Instagram, TikTok and other official pages managed by MAGNEVITAL.

MAGNEVITAL is the administrator of the official MAGNEVITAL pages and communities and is responsible for your personal data processed through these pages. At the same time, Facebook is responsible for your personal data with regard to, for example, the transfer of data to other countries.

In some situations, MAGNEVITAL and Facebook share obligations in relation to your data and act as associated operators (e.g. statistical data made available to MAGNEVITAL by Facebook, collected as a result of your interaction with magnevital.com pages.

8.5.1. What personal data do we process?

a) When you visit magnevital.com pages, we may process the following data:

- if you like/share or leave a comment on our posts, we have access to your public profile (first name, last name, photos and other public profile details) as well as the content of your comment;

- if you send us a private message, we have access to your public profile as well as to the content of the message you send. For example, we may privately ask for your phone number or e-mail address to handle your request or to validate contest winners;

- if you are a person who receives a tag from a friend in the framework of a contest/contest/contest organized on one of the magnevital.com pages, we will have access to your first and last name and to your public profile.

b) Content distribution. As a rule, Stories published on the Instagram page are automatically transferred to the official Facebook page.

At the same time, we may distribute content from partners' pages (e.g. influencers' or legal entities' pages) or followers' pages on our pages. For example, we may share a Story in which we are tagged by an influencer or follower, we may share an influencer or partner post on which you have commented, in which you have been tagged, or in which your image/voice appears, or we may repost/distribute a post of yours in which your image/voice and public profile appear.

c) When Facebook/Instagram users interact with com pages, Facebook provides us with general statistics about user actions. For example, no. of page views, no. of clicks on a post, no. of interactions with page content (like, share, comment, etc). These statistics are anonymized and magnevital.com cannot identify you based on them.
d) When personalizing Facebook/Instagram advertising campaigns, we set interest categories that may include you. Facebook uses pre-defined categories and shows our ads to people who fall into the category we specify.

We process your data for the purposes of promoting MAGNEVITAL's brand, products, services or certain public events or charitable actions in which MAGNEVITAL is an organizer or partner, to respond to public or private messages, to analyze statistics about the audience of our pages and to personalize the audience of our posts or advertising campaigns.

Please note that the provision of data is not mandatory, but Facebook or other social network providers operate on a one-size-fits-all basis for all pages and all users, so if you interact with our pages, we will automatically have access to certain data about you, as described above.

Storage period of personal data

The data of the user of the magnevital.com website will be kept and processed by MAGNEVITAL until the respective order is finalized, except for the data required to be kept for tax purposes.

The data of the user registered on magnevital.com will be kept and processed by MAGNEVITAL until the user requests the deletion of his/her account or, for any processing of his/her data based on his/her consent, until the user declares the withdrawal of consent for the purpose of providing the services of MAGNEVITAL Company. However, some personal data relating to transactions with MAGNEVITAL, as well as the member's information, consent and withdrawal of consent to the processing of his/her data will remain as information for the registered user-customer, in order to ensure proof of the lawfulness of the processing of his/her data by MAGNEVITAL and to protect the legal rights of the parties.

Please be advised that we do not collect any Special Categories of Personal Data about you (this includes data about your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for your unique identification, health or sex life data or sexual orientation or information about your criminal convictions and offenses.

What happens if you don't give us your data

When we ask you to fill in personal data in order to provide you with access to certain functionalities or services of the website, we will mark some fields as mandatory, as this is information we need in order to provide you with the service or to give you access to the functionality.

Please note that if you choose not to provide us with this information, you may not be able to complete your user registration or take advantage of these services or features.

Please note that we will only use your personal data for the purposes for which we collected it, unless we reasonably believe that we need to use it for another reason and that that reason is compatible with the original purpose.

Please be aware that we may process your personal data without informing you or needing your consent, in accordance with the above rules, where the law allows us to do so.

Legal grounds for processing personal data

Our legal grounds for processing your personal data will generally be the following:

There is your consent to process personal data;
The processing is necessary for the conclusion or performance of a contract between you and us;
Processing is necessary for our legitimate interests or the legitimate interests of another party.

Disclosure of personal data and data transfers

Please be advised that we may disclose your data, in compliance with applicable law, to business partners or other third parties. We make reasonable efforts at all times to ensure that these third parties have adequate safeguards and security measures in place. We have contractual clauses with these third parties so that your data is protected. In these situations, we will ensure that any transfer is lawful under the law.

We may also transmit the data to other parties with your consent or in accordance with your instructions, for example, if you exercise a portability request or to authorized state bodies, on the basis of and within the limits of the legal provisions and following expressly formulated requests.

The transfer of personal data to a third State may take place only if the State to which the transfer is intended ensures an adequate level of protection.

The transfer of data to a State whose legislation does not provide for a level of protection at least equal to that afforded by the General Data Protection Regulation is possible only if there are sufficient safeguards with regard to the protection of the fundamental rights of the data subjects. These safeguards will be established by us through contracts with the providers/service providers to whom your personal data will be transferred.

Whenever we transfer your personal data outside of the EEA, we will ensure that a similar level of protection is in place through one of the following safeguards:

we will transfer your personal data to countries where the European Commission has demonstrated that they provide an adequate level of security for personal data.
when we use certain service providers, we will be able to use certain model contracts provided and approved by the European Commission which offer the same protection for personal data as they have in Europe.

Data security

We understand how important the security of personal data is, and we take the necessary measures to protect our customers and others whose data we process from unauthorized access to personal data, as well as from unauthorized alteration, disclosure or destruction of the data we process in the course of our business.

We have implemented the following technical and organizational personal data security measures:

Dedicated policies	We adopt and constantly review internal personal data processing practices and policies (including physical and electronic security measures) to protect our systems from unauthorized access or other possible threats to their security. These policies are under constant review to ensure that we comply with legal requirements and that our systems are functioning properly.
Data minimization	We ensure that the personal data we process is limited to only that which is necessary, appropriate and relevant for the purposes stated in this Policy.
Restricting access to data	We try to restrict access to the personal data we process as much as possible to the minimum necessary: employees, collaborators and others who need to access this data in order to process it and carry out a service. Our partners and collaborators are subject to strict confidentiality obligations (either by contract or by law).
Specific technical measures	We use technologies to ensure the security of our customers, always trying to implement the most optimal solutions for data protection. We also periodically back-up data to be able to recover it in the event of an incident and have regular audit procedures in place to audit the security of the equipment used. However, no website, no application and no internet connection is completely secure and untouchable.
Ensuring the accuracy of your data	Sometimes we may ask you to confirm the accuracy or timeliness of your data to make sure that it reflects reality.
Staff training	We constantly train and test our employees and collaborators on legislation and best practices in the field of personal data processing.
Data anonymization	Where we can, we try as far as possible to anonymize/pseudo-anonymize the personal data we process so that we can no longer identify the individuals to whom it relates.

However, while we are constantly striving to ensure the security of the data you entrust to us, it is possible that we may also experience less fortunate events and security incidents/breaches. In these cases, we will strictly follow the procedure for reporting and notifying security incidents and will take all necessary measures to restore the situation to normal as soon as possible.

Your rights - questions, requests and exercising your rights

For any further information concerning his or her data as well as their processing and protection, each data subject may contact the MAGNEVITAL Data Protection Officer (the Data Protection Officer) at hello@magnevital.com and +40.753.407.513 . Your rights under the GDPR are as follows:

Right to be informed about the processing of your data.
Right of access to data	You have the right to obtain from us a confirmation as to whether or not we are processing personal data concerning you and, if so, access to that data and to the information referred to in Article 15(15). (1) of the GDPR.
Right to rectify inaccurate or incomplete data	You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you.
Right to erasure ('right to be forgotten')	In the situations set out in Article 17 of the GDPR, you have the right to request and obtain erasure of personal data.
Right to restrict processing	In the cases set out in Article 18 of the GDPR, you have the right to request and obtain restriction of processing.
The right to transfer the data we hold about you to another controller ("right of portability").	The right to transfer the data we hold about you to another controller ("right of portability")
Right to object to data processing	In the cases set out in Article 21 of the GDPR, you have the right to object to data processing.
The right not to be subject to a decision based solely on automated processing, including profiling with legal or similarly significant effects on you.
The right to go to court to defend your rights and interests.

Please note that the rights listed above are not absolute. There are exceptions, so each request we receive will be analyzed to decide whether or not it is well-founded. If the request is justified, we will facilitate the exercise of your rights, and if the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to lodge a complaint with the Supervisory Authority and to go to court.

We will also try to respond to your request within 30 (thirty) days. However, this time limit may be extended depending on various factors, such as the complexity of the request, the large number of requests received or the inability to identify you within a reasonable time. If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable us to identify you, we are not obliged to comply with your request.

Privacy Policy Changes/Modifications/Updates

We may update this Privacy Policy from time to time and will notify you via the Website or by e-mail of the most recent version. All updates and changes to this document are effective immediately upon notice, which we will provide by posting on the Site and/or notifying you by e-mail. Even if you do not receive a notification, we encourage you to access and read the Privacy Policy periodically to stay up-to-date with the latest versions.