Premium Magic Store Privacy Statement
Last updated: June 1, 2025

1. Introduction

Welcome to Premium Magic Store (“we”, “us”, “our”). We value the protection of your personal data and therefore act in accordance with the General Data Protection Regulation (AVG). In this statement, we explain what personal data we collect, for what purpose and on what legal basis, how long we keep it, with whom we share it and what rights you have. This privacy statement applies to all services, products and communication channels of Premium Magic Store, both online (webshop) and in our physical store.

Company data

  • Name: The Premium Magic Store

  • Trade names: Forest & bosch and Green Lemon Magic

  • Country of residence: the Netherlands

  • Chamber of Commerce number: 95480560

  • VAT number: NL005156050B35

  • Contact address (physical pickup point): Retselseweg 2a, 5473 HC Heeswijk-Dinther, Netherlands

  • Email customer service/privacy: help@premiummagic.nl

2. Who is the processing controller?

Premium Magic Store, as a provider of products and services, is simultaneously the data controller for the personal data of customers and visitors to our website. We determine which personal data are collected, how they are stored and for what purpose they are processed.

3. What personal data do we process?

Depending on your interaction with Premium Magic Store, we collect (either automatically or directly provided by you) the following categories of personal data:

  1. Id.

    • First and last name

    • Date of birth (if relevant for verification or age assessments)

    • Gender (optional)

    • Citizen service number (only if required by law, such as for certain registration procedures)

  2. Contact details

    • Email address

    • Phone number (landline or mobile)

    • Street name, house number, zip code, city and country

    • Delivery address (if different from billing address)

  3. Account and login information

    • Username

    • Password (securely encrypted)

    • Date and time of last login attempt, login IP address (log data)

  4. Financial data

    • Payment information (e.g., IBAN, payment provider information)

    • Transaction data (order numbers, invoice numbers, payment status)

    • BKR check information (only when billing or buying on account)

  5. Order and purchase information

    • Products delivered (type, quantity, price, order date, order history)

    • (Second-hand) auction or Monkey Deals data

    • Digital downloads and tickets (licensing or access information)

  6. Communications data

    • Emails, letters, chats or other messages you send to us (including date, time, content)

    • Comments and feedback (reviews, complaints, contact forms)

  7. Website usage data

    • IP address (anonymized/pseudo-anonymous where possible)

    • Browser type, device and operating system

    • Which pages you visit, which links you click, times and duration of visit

    • Cookies, tracking and analysis tools (see section 7)

  8. Marketing data

    • Your preferences for newsletters and promotions

    • Interests (based on click behavior, purchase history, survey results)

4. For what purposes and on what legal basis do we process your data?

We use the above personal data only for the following purposes, clearly described in advance:

  1. Handling orders and deliveries

    • Purpose: To process orders, ship products, invoice and handle returns.

    • Legal basis: performance of the contract (Article 6(1)(b) AVG).

  2. Payments and financial administration

    • Purpose: To perform financial transactions through Mollie (iDeal, Bancontact, credit card, wire transfer), billing and accounts payable/debtor management.

    • Legal basis: Legal obligation (tax, accounting) (Article 6(1)(c) AVG) and performance of the contract (Article 6(1)(b) AVG).

  3. Customer service and communication

    • Purpose: To answer questions, handle complaints, register returns and warranties.

    • Legal basis: legitimate interest (improving services) (Article 6(1)(f) AVG) and performance of the contract (Article 6(1)(b) AVG).

  4. Marketing and promotions

    • Purpose: To send newsletters, promotional emails, discount codes, invitations to (online) events, and targeted advertisements based on your interests.

    • Legal basis: Express consent (Article 6(1)(a) AVG) for electronic marketing (e-mail, SMS, push notifications); legitimate interest (Article 6(1)(f) AVG) in personalized ads on social media or Google Ads (provided you have not opted out of tracking).

  5. Website analysis and user experience improvement

    • Purpose: To analyze how visitors use our website (e.g., which pages they visit) in order to optimize and technically maintain the site.

    • Legal basis: legitimate interest (Article 6(1)(f) AVG) and, for non-essential cookies, your consent (Article 6(1)(a) AVG).

  6. Security and fraud prevention

    • Purpose: Protect against unauthorized access, fraud, spam, malware and other security threats.

    • Legal basis: legitimate interest (Article 6(1)(f) AVG) and laws/regulations (Article 6(1)(c) AVG) (e.g. Wwft, PSD2).

  7. Compliance with legal obligations

    • Purpose: To comply with tax retention obligations, consumer law, telecommunications laws (e.g., e-privacy rules).

    • Legal basis: Legal obligation (Article 6(1)(c) AVG).

5. With whom do we share your data?

Your personal data will only be shared with third parties to the extent necessary to perform our services or to comply with legal obligations. In all cases, we use processor agreements and verify that they comply with the AVG. Possible categories of recipients:

  1. Payment providers

    • Mollie B.V. (iDeal, Bancontact, credit card, wire transfer).

    • Purpose: Payment processing and handling of chargebacks or paidisputes.

  2. Logistics partners

    • Delivery parties (e.g., PostNL, DHL, DPD, UPS, international carriers).

    • Purpose: Shipping and tracking of your order. In doing so, we share only your name, shipping address and contact number.

  3. Marketing and advertising parties

    • Email marketing software (e.g. MailChimp, Sendinblue) for sending newsletters.

    • Advertising networks (e.g. Facebook, Google Ads) for showing targeted ads (provided you gave permission).

    • Purpose: Sending personalized offers, linking to your interests.

  4. IT and hosting providers

    • Hosting party of our website (server logs, backups).

    • E-mail provider (telemetry, incident reports).

    • Purpose: Management and maintenance of our web shop, databases and e-mail services.

  5. Accountants and auditors

    • Purpose: To prepare financial statements, tax returns and audit by the Internal Revenue Service.

  6. Government and investigative agencies

    • Only if required by law (e.g., law enforcement, fraud investigation, tax audit).

    • Purpose: To meet legal reporting obligations (police, tax authorities).

6. How long do we keep your data?

We use the following retention periods, in accordance with legal requirements and our internal processes:

  1. Financial records (invoices, receipts, contracts):

    • Retention period: 7 years (Accounting Act).

    • Afterwards: Data will be anonymized or permanently deleted.

  2. Order and delivery details:

    • Retention period: 2 years after completion of the agreement (legal warranty and consumer rights periods).

    • After: Order history is anonymized; for B2B customers, we keep invoices for 7 years.

  3. Customer accounts and login information:

    • Retention period: Until you delete your account or if your account has been inactive for 2 years.

    • Post: Data may be permanently deleted unless you reactivate your account.

  4. Marketing and newsletter profiles:

    • Retention period: Until you unsubscribe or withdraw your consent.

    • Afterwards: Email address and preferences are removed from our marketing lists and segments.

  5. Cookies and website analytics:

    • Functional cookies (necessary for webshop operation): up to 1 year.

    • Analytical cookies (Google Analytics etc.): up to 2 years (anonymized or pseudonymized).

    • Marketing/advertising cookies: up to 2 years, or as long as you do not request refusal or deletion.

  6. Complaints and warranty claims:

    • Retention period: Up to 2 years after the complaint or claim is settled (so that we can retrieve what was agreed upon in the event of a dispute).

  7. Screening or fraud files:

    • Retention period: Maximum 5 years, unless another policy or legal requirement requires otherwise.

7. Cookies, tracking and analytics

Our website uses cookies and similar technologies to provide you with an optimal user experience. Below is an overview:

  1. Functional cookies (essential).

    • Necessary for the proper functioning of the webshop (e.g. shopping cart function, session management).

    • Are placed without your permission because they are essential to the delivery of our services.

  2. Analytical cookies

    • Are used to measure how visitors use the website (e.g. which pages, for how long and through which keywords).

    • Deployed via Google Analytics (or similar platform). Data collected are anonymized or pseudonymized.

    • Retention period: 2 years.

  3. Marketing/advertising cookies

    • Are used to show targeted ads (e.g. Google Ads re-marketing, Facebook Pixel).

    • Profiles are built based on browsing and ordering behavior to show you relevant offers.

    • Retention period: Up to 2 years, unless you withdraw your consent earlier.

  4. Social media plugins (optional)

    • When using social links (e.g. “Like” buttons), data may be collected by the relevant social networks.

    • This data is subject to the privacy policies of those networks (Facebook, Instagram, Twitter, etc.).

Managing cookie preferences

On your first visit to our website, you will see a cookie notice (banner) in which we ask for permission for analytical and marketing cookies. You can always refuse, delete or manage cookies through your browser settings (or through our cookie banner). Please note that refusing (some) cookies may affect the functionality of the webshop (e.g. no shopping cart, no login option).

8. Your rights regarding your personal data

According to the AVG, you have the following rights regarding your personal data:

  1. Inspection (art. 15 AVG).

    • You have the right to ask what personal data we process about you, what the processing purposes are and with whom we share your data.

  2. Correction (art. 16 AVG)

    • You can have incorrect or incomplete personal data corrected or completed.

  3. Deletion (Art. 17 AVG; “right to oblivion”)

    • You may request us to delete your personal data, provided that there is no legal obligation to retain it or other necessity (e.g. to fulfill a contract).

  4. Restriction of processing (Art. 18 AVG)

    • If you dispute that we are processing data completely correctly, you may request that we temporarily suspend processing until accuracy is established.

  5. Transferability (Art. 20 AVG)

    • You have the right to receive the personal data you have provided to us in a structured, common and machine-readable form or, to the extent practicable, to transfer it directly to another controller.

  6. Objection to processing (Art. 21 AVG)

    • You can object to processing based on legitimate interest (e.g. profiling activities for marketing purposes).

    • Stop direct marketing (you can unsubscribe from our newsletter or promotional emails at any time using the link at the bottom of each email).

  7. Withdrawal of consent (Art. 7(3) AVG)

    • If you have given your consent to processing (e.g. cookie consent or newsletter consent), you can withdraw it at any time. Once withdrawn, we will stop processing (for that purpose).

  8. Filing a complaint

    • If you believe that we are not handling your personal data properly, you have the right to file a complaint with the Personal Data Authority(www.autoriteitpersoonsgegevens.nl).

How do you exercise your rights?

You may address your request to:

Premium Magic Store  
t.a.v. Functionaris Gegevensbescherming  
Retselseweg 2a, 5473 HC Heeswijk-Dinther  
E-mail: help@premiummagic.nl

We will respond to your request within one month. In special cases, such as very complex requests or multiple requests, this period may be extended by two months. We will inform you in a timely manner of any extension and the reason for it.

9. Automated decision-making and profiling.

We do not make decisions that (a) are based solely on automated processing, including profiling, and (b) have legal or similar consequences for you. Should such automated decision-making be necessary in the future (e.g. credit assessment for sales on account), we will inform you explicitly and clearly in advance and seek your consent if required by law.

10. Security measures

Premium Magic Store takes appropriate technical and organizational measures to protect your personal information from loss, unauthorized access, alteration, disclosure and destruction. Some examples of security measures:

  • SSL encryption (HTTPS) on the entire website

  • Encrypted storage of passwords (hashing)

  • Firewalls, up-to-date antivirus and anti-malware software

  • Regular (backup) procedures and maintenance of systems

  • Limiting access to personal data (authorized employees only).

  • Processor agreements with all third parties processing your personal data

Although we continuously implement the most current security techniques, we cannot guarantee that digital communication or data storage is 100% secure. In the unlikely event of a data breach with a potential risk to your rights, in accordance with legal obligations we will report this to the Personal Data Authority and – if required – to you within 72 hours of discovery.

11. Sharing with third parties (processors).

We only use service providers (processors) who have been carefully selected and who have entered into a processor agreement with us. This ensures that your personal data is only processed according to our instructions, in a secure manner and in accordance with the AVG. Important processors:

  • Mollie B.V. (payment processing)

  • PostNL B.V., DHL, DPD, UPS (logistics processing)

  • MailChimp (The Rocket Science Group LLC), Sendinblue (email marketing)

  • Google Analytics (Google LLC) (website statistics)

  • Hosting party (data hosting and backup).

  • Accounting firm [accountant name] (financial accounting, auditing)

Whenever our processor list changes, if relevant, we will review privacy responsibilities and processor agreements and notify you.

12. Transfer outside the European Economic Area (EEA).

In principle, your personal data is processed and stored within the EEA. If occasionally a service provider is located outside the EEA (e.g. hosting in the US, marketing tool or advertising platform), we ensure that appropriate safeguards are in place, such as:

  • European Commission approved model contracts (Standard Contractual Clauses).

  • Privacy Shield Regulation (as applicable).

  • Binding corporate rules.

This keeps your protection. You can ask which parties and locations are affected and what safeguards apply.

13. Changes to this privacy statement.

Premium Magic Store reserves the right to modify this privacy statement. We therefore recommend that you review this statement from time to time. Changes are published on our website and take effect at the time of publication. In case of substantial changes (e.g. new purpose of processing, new legal basis), we will inform you in advance via e-mail and/or a banner on the website. If you cannot agree to the change, you can delete your account and have your data deleted as described in section 8.

14. Contact & Questions

Do you have any questions, comments or requests regarding this privacy statement or the processing of your personal data? If so, please feel free to contact our Data Protection Officer (FG) at: 

Premium Magic Store  
t.a.v. Functionaris Gegevensbescherming  
Retselseweg 2a, 5473 HC Heeswijk-Dinther  
E-mail: help@premiummagic.nl  
Telefoon: +31 (0)20 123 4567 (algemeen)

You can file a complaint with the Personal Data Authority free of charge at any time:

Version and entry into force
This privacy statement will enter into force on June 1, 2025. All previous versions are hereby superseded.

Premium Magic Store
Chamber of Commerce: 95480560 – VAT: NL005156050B35
Website: www.premiummagic.nl – E-mail: help@premiummagic.nl