Privacy policy
Last updated: 1 May 2026
Thank you for your interest in our online shop, our website and our products. Protecting your personal data matters to us.
In this privacy policy we explain which personal data we collect, how we use it, for what purposes it is processed, which categories of service provider may be involved and what rights you have.
This privacy policy applies to the online shop, the website and all connected features, tools, products, services, communication channels, payment, shipping, tracking, returns, marketing, analytics and support processes of Magic Milk Germany.
1. Controller
The controller for the processing of personal data is:
Magic Milk Germany – Mertorhan Avci
Weidenauer Strasse 174
57076 Siegen
Germany
Email: support@magicmilk.de
WhatsApp/phone: +49 15565 408252
Within the meaning of the General Data Protection Regulation (GDPR) we are the controller for the processing of personal data, unless stated otherwise in this privacy policy.
2. General information on data processing
We process personal data only to the extent necessary to provide our website, handle orders, process payments, carry out deliveries, answer customer enquiries, meet legal obligations, protect our systems, prevent fraud, run marketing activities or improve our shop technically and commercially.
Where consent is required for particular processing, that processing takes place only after you have given your consent, for example through our cookie or consent banner. You may withdraw consent at any time with effect for the future.
Certain features of our shop are technically necessary for it to work properly. These include in particular the cart, checkout, payment processing, language settings, security, fraud prevention, server logs and basic shop functions.
Non-essential features such as marketing tracking, personalised advertising, analytics, session recording, replay features, certain conversion tracking features or comparable technologies are used only where this is legally permitted and, where required, where the corresponding consent has been given.
3. Which personal data we process
Depending on how you interact with our shop, our website or our services, we may process in particular the following categories of personal data:
Contact data
Name, first name, surname, address, delivery address, billing address, email address, telephone number, WhatsApp number and other contact details.
Order data
Order number, products purchased, cart, checkout data, time of order, payment status, shipping status, return status, complaint details, customer notes, order history and other information relating to your order.
Payment data
Payment method, payment status, transaction data, payment confirmation, refund data, payment disputes, chargeback information and other data connected with payment service providers, banks or payment processors.
Complete payment details such as full credit card numbers are generally not stored by us directly but processed by the relevant payment service provider.
Communication data
Messages by email, contact form, chat, WhatsApp, AI-assisted chat, voice features, voice messages, support enquiries, return and complaint requests, withdrawal declarations and other content you send us voluntarily.
Technical data
IP address, device information, browser type, operating system, screen resolution, language settings, referrer URL, date and time of access, pages visited, clicks, scrolling behaviour, loading times, error logs, session IDs and similar technical information.
Marketing and usage data
Newsletter sign-ups, SMS marketing consents, email opens, link clicks, abandoned carts, purchase interests, product views, interactions with advertising, ad clicks, conversion events, checkout events and comparable usage information.
Returns, complaints and evidence data
Photos of the product, photos of the packaging, photos of the shipping label, description of the defect, tracking information, return status, reason for return, communication history and other details needed to assess returns, complaints or shipping problems.
4. Sources of personal data
We receive personal data in particular from the following sources:
Directly from you
For example when you place an order, create a customer account, contact us, fill in a form, use our chatbot, use a voice feature, sign up for the newsletter or submit a return, a complaint or a withdrawal.
Automatically through our website and systems
For example through cookies, pixels, tags, tracking technologies, server logs, analytics tools, session recording tools or technical security features.
From service providers and partners
For example from shop platforms, payment service providers, shipping service providers, tracking providers, returns portals, marketing tools, email service providers, support tools, AI/chatbot providers, review services or other technical providers.
5. Purposes of processing
We process personal data in particular for the following purposes:
Providing the online shop
Displaying the website, cart function, checkout, product selection, customer account, technical security, language settings, load time optimisation and troubleshooting.
Order and contract handling
Processing orders, payment handling, shipping, shipment tracking, invoicing, returns, complaints, withdrawal, customer service and other contract-related processes.
Communication with customers
Answering enquiries, sending order confirmations, shipping information, invoices, payment information, support messages, return information, responses to complaints and important notices.
Security and fraud prevention
Detecting misuse, attempted fraud, payment problems, manipulation, technical attacks, unusual activity, false evidence, abusive refund requests and breaches of our terms.
Marketing and advertising
Newsletters, discount campaigns, SMS marketing, cart reminders, personalised offers, onsite messaging, advertisements, conversion tracking, audience building and optimisation of advertising campaigns.
Analysis and optimisation
Improving our website, detecting technical errors, optimising the checkout process, improving the user experience, evaluating shop performance, identifying drop-off points and improving support processes.
Legal obligations and enforcement of rights
Meeting tax, commercial and statutory retention obligations, handling disputes, payment disputes, chargebacks, payment provider cases, evidence, complaints, claims and legal actions.
6. Legal bases for processing
Depending on the purpose, personal data is processed on the following legal bases:
Art. 6(1)(b) GDPR
Processing to perform a contract or to take steps prior to entering into a contract, for example ordering, payment, shipping, invoicing, support, returns and reversal of a transaction.
Art. 6(1)(c) GDPR
Processing to comply with legal obligations, for example tax and commercial retention obligations.
Art. 6(1)(f) GDPR
Processing on the basis of legitimate interests, for example fraud prevention, IT security, internal organisation, enforcement of legal claims, technical improvement, detection of misuse and documentation of support or dispute cases.
Art. 6(1)(a) GDPR
Processing on the basis of your consent, for example for non-essential cookies, marketing tracking, newsletters, SMS marketing, certain analytics features, session recording, voice/AI features, personalised advertising or comparable technologies, where consent is required.
7. Shop platform and technical operation
Our online shop runs on an external e-commerce platform. It provides us with the technical shop infrastructure through which we sell products, process orders, connect payments, organise shipping processes, integrate apps and extensions and manage our shop.
Personal data may be transferred to and processed by the shop platform and connected technical service providers, in particular:
– name
– address
– email address
– telephone number
– order data
– payment status
– shipping information
– device and usage data
– IP address
– technical shop and checkout data
The processing serves to provide the shop, perform the contract, ensure technical security, fix errors and manage the shop functions.
8. Services, apps and technical providers used
We use various technical service providers, shop extensions, platforms and external providers in order to run our online shop, handle orders, process payments, organise shipping and returns, offer customer service, run marketing activities, improve usability and protect our systems.
Depending on the function, the following categories of service provider may be involved:
– shop and hosting platforms
– payment service providers and payment processors
– shipping, fulfilment, tracking and returns service providers
– invoicing, document and accounting service providers
– email, newsletter and SMS marketing service providers
– customer service, chatbot, AI and voice service providers
– analytics, tracking, session recording and optimisation service providers
– marketing, advertising and conversion tracking service providers
– review, loyalty and customer retention service providers
– form, withdrawal and complaint service providers
– translation, localisation and language service providers
– design, theme, landing page and presentation service providers
– upsell, cross-sell, discount and checkout optimisation service providers
– security, fraud prevention and IT service providers
These providers process personal data only to the extent necessary for the respective purpose, permitted by law or covered by the corresponding consent.
Depending on the function, this may involve contact data, order data, payment status, shipping data, tracking data, return data, communication data, technical data, usage data, marketing data or support data.
Where providers act as processors, the processing takes place on the basis of the corresponding contractual arrangements. Where providers process personal data on their own responsibility, their own privacy notices apply in addition.
On request we will tell you which specific service providers were involved in processing your personal data in an individual case, insofar as we are legally obliged to do so and no interests worthy of protection stand in the way.
9. Payment service providers
We use external payment service providers to process payments. Depending on the payment method you choose, personal data may be transferred to payment service providers.
The following may be processed in particular:
– name
– billing address
– delivery address
– email address
– telephone number
– order number
– payment amount
– payment status
– transaction data
– risk assessment data
– data relating to refunds, payment disputes or chargebacks
The processing serves to handle payments, prevent fraud, examine payment claims, process refunds and settle disputes.
Please note that payment service providers may also process personal data on their own responsibility. The privacy information of the relevant payment service provider applies in addition.
10. Payment information and onsite notices
Our shop may display payment methods, instalment information, invoice purchase notices, payment terms or other payment information directly in the shop, on product pages, in the cart or at checkout.
Where necessary and legally permitted, technical data, device information, cart data, order data or payment information may be processed in order to check the availability of certain payment methods, display payment options or process payments.
Where external payment providers process personal data on their own responsibility, their privacy notices apply in addition.
11. Shipping, fulfilment, tracking and returns
To process and deliver orders we work with shipping service providers, fulfilment service providers, tracking providers and returns solutions.
The following data may be processed or passed on for this purpose:
– name
– delivery address
– billing address
– email address
– telephone number
– order number
– tracking number
– shipping service provider
– shipping status
– delivery status
– return information
– complaint information
– address verification data
– customs and shipping documents where required
We use this data to dispatch orders, track shipments, identify delivery problems, handle returned items, process returns, inform customers about the shipping status and examine shipping or complaint cases.
12. Invoices, documents and accounting
To create, manage and send invoices, credit notes, proforma documents or other order documents, we may use invoicing, document and accounting services.
The following data may be processed in particular:
– name
– billing address
– delivery address
– email address
– order number
– order date
– products purchased
– prices
– tax information
– payment status
– invoice number
– country of delivery
– company details, where provided
The processing serves to create documents required by law or business practice, to issue invoices, for accounting, for tax documentation and for customer communication.
13. Customer service, contact and support
When you contact us, we process the data you provide in order to deal with your enquiry.
This concerns in particular enquiries via:
– email
– WhatsApp
– contact form
– chat
– AI-assisted chat
– voice feature
– social media
– returns form
– complaint form
– withdrawal form
The following may be processed in particular:
– name
– email address
– telephone number
– order number
– message content
– photos or evidence
– shipping and payment information
– technical data about the enquiry
The processing serves to handle your enquiry, to document it, to resolve problems, to prevent fraud, to assure quality and to safeguard our legitimate interests.
14. AI-assisted customer support, chatbot and voice features
We may use AI-assisted support features to answer customer enquiries faster, provide information and improve our customer service.
If you use our AI chatbot, voice bot, voice features or comparable AI-assisted support services, the following data may be processed in particular:
– text input
– chat histories
– voice input or voice messages
– technical device and browser information
– time of the communication
– order numbers, if you provide them voluntarily
– the content of your enquiry, for example about an order, shipping, payment, return, complaint or products
The processing serves to answer your enquiry, document support cases, prevent misuse, improve the quality of our customer service and optimise internal processes.
Please do not give unnecessary sensitive information in the chat or when using voice features, in particular no health data, payment details, passwords or particularly confidential information.
Where AI or voice features are provided by external providers, data may be transferred to those providers and processed there on our behalf. Where consent is required for this, the processing takes place only on the basis of your consent.
We do not use voice input for biometric identification unless this is expressly stated separately and legally permitted.
15. Analytics, session recording, replay features and technical optimisation
We may use analytics and optimisation tools in order to better understand how our website is used, detect technical errors, analyse checkout problems, prevent attempted fraud and improve usability.
The following data may be processed in particular:
– IP address
– browser and device information
– operating system
– screen resolution
– pages visited
– clicks
– scrolling behaviour
– mouse movements
– navigation behaviour
– cart and checkout interactions
– technical errors
– loading times
– time and duration of the visit
– pseudonymous user identifiers
We may also use session recording or replay tools that make it technically possible to follow or record individual user sessions. Such recordings serve in particular to identify technical errors, display problems, usability problems, checkout drop-offs, attempted fraud or other disruptions.
Where possible, sensitive input fields such as payment details, passwords or comparable confidential information are hidden or masked.
Session recording, analytics and tracking technologies are used only where this is legally permitted. Where consent is required, the processing takes place exclusively on the basis of your consent given via our cookie or consent banner.
16. Live visitor counters, social proof and real-time displays
We may use features that show visitors certain notices, for example live visitor numbers, recently purchased products, social proof elements, pop-ups, discount notices or comparable displays.
Technical data, usage data, product interactions, device information, cart data or pseudonymous identifiers may be processed for this purpose.
Where such features merely support technically necessary shop functions, the processing may be based on legitimate interests or on the performance of a contract. Where tracking, profiling, marketing or non-essential technologies are used, processing takes place only where legally permitted and, where required, on the basis of your consent.
17. Cookies, pixels, tags and similar technologies
Our website uses cookies, pixels, tags, local storage technologies and similar technologies.
These technologies may be necessary in order to provide the website technically, save the cart, enable checkout, store language settings, ensure security or detect errors.
In addition, if you have consented, we may use non-essential technologies, for example for:
– analytics
– marketing
– conversion tracking
– personalised advertising
– cart reminders
– session recording
– replay features
– A/B tests
– optimisation of the user experience
– social proof
– pop-ups
– upsells and cross-sells
You can withdraw or adjust your consent at any time via the cookie or privacy settings on our website.
18. Marketing, advertising and conversion tracking
We use marketing and advertising services to promote our products, evaluate advertising campaigns and optimise our ads.
Pixels, cookies, tags, server-side tracking or similar technologies may be used for this purpose.
The following may be processed in particular:
– page views
– product views
– clicks
– cart events
– checkout events
– purchases
– order values
– device and browser information
– IP address
– pseudonymous user identifiers
– interactions with advertisements
This data may be used to measure advertising campaigns, create audiences, optimise ads, build similar audiences and show you interest-based advertising on third-party platforms.
Processing takes place only where legally permitted. Where consent is required, processing takes place exclusively on the basis of your consent given via our cookie or consent banner.
19. Newsletter, email marketing and SMS marketing
If you sign up for our newsletter, discount campaigns, SMS notifications or comparable marketing messages, we process the contact details you provide.
This includes in particular:
– email address
– telephone number
– name, where provided
– consent status
– time of sign-up
– email opens
– link clicks
– unsubscribes
– cart and purchase interests
– order and product interactions
We use this data to send you relevant offers, product information, discount codes, reminders, cart reminders and other marketing information.
Sending may take place via external email, newsletter or SMS marketing service providers.
You can unsubscribe from marketing messages at any time using the unsubscribe link in the relevant message or by contacting us.
20. Upsells, cross-sells, discounts and checkout optimisation
We may use features to show you suitable product suggestions, bundles, discounts, additional offers, notices, payment options or upsell offers in the shop, in the cart or at checkout.
The following data may be processed in particular:
– cart contents
– product views
– products purchased
– order value
– use of discounts
– checkout status
– device data
– pseudonymous user identifiers
Where such features are necessary for the sale, the cart or the checkout, the processing may take place to perform the contract or on the basis of legitimate interests. Where tracking, marketing or profiling goes beyond that, processing takes place only where legally permitted and, where required, on the basis of your consent.
21. Reviews, feedback, loyalty and customer retention
We may use review, feedback, loyalty or customer retention features in order to collect reviews, manage customer points, offer discount campaigns or evaluate customer satisfaction.
The following data may be processed in particular:
– name or display name
– email address
– order number
– products purchased
– review text
– star rating
– photos or videos
– product reference
– points or reward status
– discount or referral data
Reviews, feedback or user-generated content may be used to improve our products, our service and our website. Where reviews are published, this happens only to the extent legally permitted.
22. Social media and embedded content
We operate profiles on social networks and platforms.
If you interact with our profiles, send messages, comment on posts or share content, personal data may be processed by us and by the platform concerned.
Our website may also embed social media content, feeds, story elements, videos or widgets.
Technical data such as IP address, device information, usage data or interactions with embedded content may be transferred to the respective providers. Where consent is required for this, the content is embedded only after you have given your consent.
Platform providers process some data on their own responsibility. Please also note the privacy notices of the relevant platform.
23. Translation, language and localisation features
We may use translation, language and localisation services in order to provide content in several languages, store language settings or adapt the shop for different countries.
Language settings, technical data, location information at country level, browser data or usage data may be processed for this purpose.
24. Design, theme, landing page and presentation features
We may use technical features to design our website visually, create landing pages, improve product pages and provide sliders, animations, preloaders, menus, buttons, buy box elements or other design elements.
Depending on the technical implementation, technical data, device information, usage data or cookies may be processed. Where this processing is necessary for the presentation and functionality of the shop, it may be based on legitimate interests or on the performance of a contract. Where tracking, analytics or marketing goes beyond that, it takes place only where legally permitted and, where required, on the basis of your consent.
25. Forms, withdrawal, returns and complaints
If you use forms on our website, for example contact forms, withdrawal forms, returns forms or complaint forms, we process the data you enter in order to deal with your request.
The following may be processed in particular:
– name
– email address
– telephone number
– order number
– address
– reason for return
– reason for complaint
– photos and evidence
– message content
– shipping or tracking information
The processing serves to handle your request, carry out returns or complaints, document the matter and enforce legal rights.
26. Complaints, evidence, photos and documentation
If you report a complaint, transport damage, an incorrect delivery, missing goods or a problem with the shipment, we may ask for evidence in order to examine the matter.
This may include in particular:
– photos of the product
– photos of the packaging
– photos of the shipping label
– description of the defect
– order number
– communication history
– tracking information
We process this data in order to examine the case, assess replacement deliveries, re-shipments or refunds, prevent misuse and assert claims against shipping service providers or third parties.
Evidence submitted must be genuine, unaltered and verifiable. Where there is a suspicion of manipulated, AI-generated, misleading or deliberately false evidence, we reserve the right to document the case, request further evidence and have it examined legally.
27. Recipients of personal data
We may pass personal data on to the following categories of recipient:
– shop and hosting platforms
– shop app and technical service providers
– payment service providers
– banks and payment processors
– shipping service providers
– fulfilment and warehousing service providers
– tracking and returns providers
– email and newsletter providers
– SMS and communication providers
– AI, chatbot and voice bot providers
– analytics and tracking providers
– marketing and advertising platforms
– review and loyalty providers
– design, theme and landing page providers
– form and support service providers
– IT, hosting and cloud service providers
– tax advisers, accounting and invoicing service providers
– authorities, courts, lawyers or other bodies, where this is legally required or necessary to enforce legal rights
Data is passed on only where this is necessary for the respective purposes, permitted by law or covered by your consent.
28. International data transfers
Some service providers may process personal data outside the European Union or the European Economic Area, in particular in the USA, Canada, the United Kingdom or other third countries.
Where personal data is transferred to third countries, this takes place only where an appropriate legal basis exists. This may include in particular adequacy decisions, standard contractual clauses or other appropriate safeguards.
29. Retention period
We store personal data only for as long as it is necessary for the respective purposes or as long as statutory retention obligations apply.
Order, invoice and payment data is generally stored for the duration of the statutory commercial and tax retention periods.
Support, complaint, return, payment dispute and chargeback data is stored for as long as this is necessary to process, document, enforce or defend a claim.
Data processed on the basis of consent is generally stored only until consent is withdrawn or the purpose ceases to apply, unless another legal basis exists for continued storage.
30. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
Please note, however, that no transmission of data over the internet is completely secure. We recommend that you do not send particularly sensitive data through insecure communication channels.
31. Children’s data
Our website and services are not aimed at children. We do not knowingly collect personal data from children who cannot validly give consent themselves under applicable law.
If you believe that a child has sent us personal data, please contact us so that we can examine the matter and, where appropriate, delete the data.
32. Obligation to provide data
Providing certain personal data is necessary in order to fulfil an order, process payments, ship goods, issue invoices or handle support enquiries.
If you do not provide the required data, we may be unable to process your order, enquiry, return, complaint or other service, or unable to process it in full.
33. Automated decision-making
We do not use personal data for decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless expressly stated.
Payment service providers, fraud prevention providers, payment providers or checkout services may, however, carry out their own automated checks, for example for payment authorisation, risk assessment, fraud prevention or the availability of certain payment methods. The privacy information of the relevant provider applies in addition.
34. Your rights
Subject to the statutory requirements, you have in particular the following rights:
Right of access
You can ask which personal data we process about you.
Right to rectification
You can ask us to correct inaccurate or incomplete data.
Right to erasure
You can ask us to delete your personal data, unless statutory retention obligations or other legitimate grounds prevent this.
Right to restriction of processing
Under certain conditions you can ask us to restrict processing.
Right to data portability
You can ask us to provide certain data in a structured, commonly used and machine-readable format.
Right to object
You can object to the processing of personal data where the processing is based on legitimate interests.
Right to withdraw consent
You can withdraw consent at any time with effect for the future.
Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
For North Rhine-Westphalia this is in particular:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestrasse 2–4
40213 Düsseldorf
Germany
To exercise your rights you can contact us at any time:
35. Cookie and consent settings
Where we use cookies, pixels, tracking, analytics, marketing, session recording, voice or AI features on the basis of your consent, you can withdraw or adjust your consent at any time with effect for the future.
You can change the settings via our cookie or consent banner or via the privacy/cookie settings provided on our website.
36. Objection to direct marketing
If we process personal data for direct marketing, you can object to that processing at any time.
If you object, your personal data will no longer be used for direct marketing.
For newsletters or marketing emails you can also use the unsubscribe link in the relevant message.
37. Changes to this privacy policy
We may update this privacy policy from time to time, for example if our processes, the services we use, legal requirements, shop functions or technical systems change.
The current version is always available on our website.
38. Contact
If you have questions about this privacy policy, about the processing of your personal data, about our apps, tools, cookies, tracking, AI or voice features, or if you would like to exercise your rights, you can contact us:
Magic Milk Germany – Mertorhan Avci
Weidenauer Strasse 174
57076 Siegen
Germany
Email: support@magicmilk.de
WhatsApp/phone: +49 15565 408252
This English version is a translation provided for your convenience. In the event of any discrepancy, the German version at magicmilk.de shall prevail.