Privacy Policy for Magipa.dk

Last updated: 10/15-2025

At Magipa.dk, we take your privacy seriously.
This Privacy Policy explains how we collect, use, and protect the personal information you share with us when using our website and when ordering personalized children’s books.

1. Data Controller

Shoptech Consulting OU
VAT: EE102591491
Address: Sepapaja 6, Tallinn 15551, Estonia
Email: info@magipa.dk

Shoptech Consulting OU is the data controller responsible for processing your personal data in connection with purchases, customer support, and the operation of the webshop.

Our Danish production partner, Silkefoto ApS, acts as a data processor when handling printing, packaging, and shipping of your orders.

For illustration generation, we use Leonardo Interactive Pty Ltd (Leonardo.ai), based in Australia, as a sub-processor (data processor) under the EU Standard Contractual Clauses (SCC).

2. What information we collect

We only collect the information necessary to deliver our products and services, including:

• Name, address, email, and phone number

• Payment and delivery details

• Uploaded images (e.g. the child’s photo used in the book)

• Text input you provide (e.g. child’s name, dedication, etc.)

• Usage and traffic data collected through cookies and analytics tools (see section 6)

3. Purpose and legal basis

3.1 Creation of personalized books

When you upload a photo to Magipa.dk, it is used solely to create illustrations for the personalized children’s book you design.

• If no purchase is completed, the image is automatically deleted within 7 days.

• If a purchase is completed, the image is deleted no later than 30 days after the book has been produced.

• The final e-book remains available in your user account as long as your account is active, so you can download it anytime.

The processing is based on your consent (GDPR Art. 6 (1)(a)) and on the performance of a contract (Art. 6 (1)(b)) when you make a purchase.

3.2 Order processing and customer support

Your contact and order details are used to process your order, send confirmations, and provide delivery updates.
When contacting our support, your information is used only to handle your inquiry.

3.3 Website operation and security

Technical data (IP address, browser type, timestamp, etc.) are processed to maintain site functionality and prevent misuse.

3.4 Statistics and analytics

We use Google Analytics 4 with IP anonymization to measure how visitors use our webshop.
Data are processed in pseudonymized form and used only for statistical and usability-improvement purposes.

4. Data processors and international transfers

4.1 Data processors within the EU

• Silkefoto ApS (Denmark) – printing, packaging, and shipping

• Hosting provider (Amsterdam, EU) – website hosting and technical operation

4.2 Data processors outside the EU

• Leonardo.ai (Leonardo Interactive Pty Ltd, Australia) – AI illustration generation.
  Transfers are protected under the EU Standard Contractual Clauses (SCC), ensuring a level of protection equivalent to GDPR.
  Leonardo.ai stores data in encrypted form and may only process it according to our documented instructions.

Leonardo.ai may use sub-processors (e.g. Amazon Web Services and Cloudflare in the U.S.), also covered by SCCs.

5. Storage and deletion

• Uploaded photos are deleted automatically within 7 days if no purchase is made.

• For completed orders, photos are deleted no later than 30 days after production.

• E-books and account data are stored as long as your user account remains active.

• Other customer data are retained for up to 5 years in accordance with accounting laws.

• You can request deletion of your account or photos at any time by contacting info@magipa.dk.

6. Analytics and cookies

We use Google Analytics 4 to analyze website usage and improve design and functionality.
All data are anonymized, and IP addresses are truncated so they cannot be linked to individual users.

Cookie usage is governed separately in our Cookie Policy, where you can learn how to manage or withdraw consent.

7. Your rights

You have the right to:

• access the personal data we hold about you,

• request correction or deletion,

• withdraw your consent,

• object to processing, and

• receive your data in a portable format.

Requests should be sent to info@magipa.dk.
If you believe we process your data unlawfully, you may file a complaint with your local data protection authority.
For Danish customers, this is Datatilsynet – www.datatilsynet.dk.

8. Changes

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments.
The latest version will always be available on this page.