Effective from 15 October 2026.
1. Who is responsible for the Website
The controller of data relating to the use of the magdaplantbased.com website, including the online shop (the “Website”), is MAGDA PLANT-BASED sp. z o.o., ul. Zakopiańska 35A, 34-424 Szaflary, Poland, KRS 0000665193, NIP 7352870212, REGON 366717496 (“MAGDA”).
Privacy contact: biuro@magdaplantbased.com, tel. +48 18 275 47 69.
Detailed information on the processing of personal data, recipients, retention periods, user rights and transfers outside the European Economic Area is provided in the Privacy Policy.
2. What cookies and similar technologies are
Cookies are small pieces of information stored on or read from the user’s device when using the Website. Similar technologies include, among others, the browser’s local and session storage, pixels, tags, scripts and online identifiers. In this Policy, we refer to all of them as “technologies”.
3. Technologies we use
Necessary (in the panel: functional / technical)
Necessary technologies enable data transmission or the operation of a function expressly requested by the user. In particular, they are used to maintain the session and basket, log in, secure the account and forms, complete the ordering process, handle payment and shipping, redirect to the payment operator and remember privacy settings. They operate without separate consent only to the extent strictly necessary.
Accessibility tool
The Website features a tool that makes it easier to use, including changing text size and contrast, provided by Elfsight. The tool loads together with the page so that it is available to every user from the outset. When it loads, the provider receives the technical data needed to deliver the tool, in particular the IP address and browser information. Selected accessibility settings may be stored on the user’s device.
Analytics
Google Analytics 4 is used to compile statistics on the use of the Website and to assess how its pages perform. Tags are managed with Google Tag Manager.
The Website uses Google Consent Mode. Until the user gives analytics consent, or if they refuse it, Google Analytics does not store analytics cookies on the device. However, the Google script may still load and send Google limited technical information without cookie identifiers, such as a page view, browser and device type, and the IP address. Once consent is given, Google Analytics operates in full.
Marketing (in the panel: advertising)
Meta Pixel is used to measure conversions, in particular to determine whether an advertising campaign led to a purchase. It is activated only after marketing consent.
External content
This category covers content loaded from external providers:
- YouTube videos;
- Google reviews displayed via an Elfsight widget;
- Instagram updates displayed via an Elfsight widget.
This content is not needed to place an order. YouTube videos load after consent to external content. The Google reviews and Instagram widgets load together with the page. When they load, Elfsight receives technical data, in particular the IP address and browser information.
Fonts
Some fonts are loaded from Google servers (Google Fonts). When they load, Google receives the IP address and browser information.
Plain links to MAGDA’s profiles on Facebook, Instagram, LinkedIn, TikTok, Pinterest and YouTube do not load any widget on the Website. After clicking, the user is taken to the external service, which operates under its provider’s own terms.
4. Detailed list of technologies
An up-to-date list of technologies is available in the privacy settings panel. For each item, the panel shows at least:
- the name of the cookie or other identifier;
- the provider;
- the purpose;
- the duration or retention period.
5. Consent and changing it
On the first visit, the user can:
- accept all optional categories;
- reject all optional categories;
- choose individual categories.
The “Accept all” and “Reject all” buttons are available on the same layer of the panel. Optional categories are off by default. Closing the panel, scrolling, continuing to use the Website or taking no action does not constitute consent.
Consent can be changed or withdrawn at any time using the cookie settings icon shown in the bottom left corner of every page. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
After consent is withdrawn, the Website stops running the technologies covered by that choice. Cookies and stored data saved earlier on the device can be deleted in the browser settings. This does not automatically delete data that a provider lawfully received earlier. Deleting all site data may log the user out, empty the basket or remove saved settings.
6. Providers and data transfers
Depending on the user’s choice — and, for the accessibility tool, the Google reviews and Instagram widgets, Google Analytics to the extent described in section 3, and fonts, regardless of that choice — data may be transferred to the providers of Google, Meta and Elfsight tools. Some providers may process data outside the European Economic Area. Information on the providers’ roles, legal bases, transfer safeguards and user rights is set out in the Privacy Policy.
7. Legal basis and updates
Information is stored on or read from the device in accordance with the Polish Electronic Communications Law of 12 July 2024 and the GDPR. Optional technologies are used after consent. Strictly necessary technologies may operate without consent within the exemption for transmitting a communication or providing a service expressly requested by the user.
If a new optional category, purpose or provider beyond the user’s earlier choice is added, the Website will ask for new consent before activating that technology.
This is a translation. In the event of any discrepancy, the Polish version prevails.