This English translation is provided for convenience only. The German version is legally binding: German version.
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website or enter into a contract with us. Personal data is any data by which you can be personally identified.
2. Controller
The controller responsible for data processing on this website is:
Magic Swell
Martin Janosik
Speditionstraße 8
40221 Düsseldorf
Germany
E-mail: support@magic-swell.com
3. Hosting
The website is operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, on a server in the EU. Personal data collected on the website is stored on its servers. This consists mainly of meta/communication data, contract data, contact data, names, IP addresses and all content that you communicate to us.
Fonts
The fonts used on this website are stored locally on our server. When the page is accessed, no connection is established to servers of Google or other third-party providers.
4. Server log files
Our host automatically collects information in so-called server log files, which your browser transmits. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and optimization of the website). This data is not combined with other data sources.
5. Cookies, browser storage & consent
We do not use tracking cookies. To operate the website, we store only two entries in the local storage of your browser: the contents of your shopping cart (“ms-cart-v1”) and your choice in the privacy notice (“ms-consent-v1”). This storage is strictly necessary for the functions you have requested and does not require consent under Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The entries remain in your browser, are not transmitted to us and can be deleted at any time via your browser settings.
On your first visit, we ask you via a notice whether you agree to audience measurement. Without your agreement, it does not take place. You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.
Audience measurement with Plausible Analytics
Only if you agree do we use Plausible Analytics to statistically evaluate the use of our website. The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible does not set cookies and does not store IP addresses or other identifiers that could be used to recognize individual visitors. Aggregated information is collected, such as pages visited, referring website, country, and browser and device type. The data is processed in the EU. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future. Further information: Plausible data policy.
6. Contact form & e-mail contact
If you send us enquiries via the contact form or by e-mail, your details (name, e-mail, message) are stored by us exclusively for the purpose of processing the enquiry and for possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry is aimed at the performance of a contract, otherwise Art. 6(1)(f) GDPR. Your data will be deleted as soon as the purpose no longer applies, at the latest after expiry of statutory retention periods.
7. Order processing & performance of the contract
When you place an order, we process the data necessary for this (name, address, e-mail, telephone number if applicable, payment data) to perform the purchase contract pursuant to Art. 6(1)(b) GDPR and to comply with tax and commercial-law retention obligations (Art. 6(1)(c) GDPR in conjunction with Section 147 AO (German Fiscal Code) and Section 257 HGB (German Commercial Code) — retention period generally up to 10 years).
8. Payment service providers
We offer the following payment methods. Sensitive payment data is collected and processed directly by the respective service providers; we only receive the information as to whether a payment has been made.
PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L‑2449 Luxembourg. Legal basis Art. 6(1)(b) GDPR. Further information: PayPal Privacy Policy.
Klarna
Provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Legal basis Art. 6(1)(b) GDPR. Further information: Klarna Privacy Policy.
Apple Pay
Provider: Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Legal basis Art. 6(1)(b) GDPR.
Credit card & SEPA (via Stripe)
We process payment via Stripe Checkout. After clicking “Checkout”, you will be redirected to a Stripe payment page, where you enter your delivery and billing address, e-mail address, telephone number and payment method. Stripe then transmits this information and the payment status to us; we do not receive card data. Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Legal basis Art. 6(1)(b) GDPR. Further information: Stripe Privacy Policy.
9. Shipping service providers
To deliver your order, we pass your shipping address on to the commissioned shipping service provider (e.g. DHL, DPD or a specialized carrier for lithium battery shipments). The legal basis is Art. 6(1)(b) GDPR. On request, we also share your e-mail address for shipment tracking; you can withdraw this at any time.
10. SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, our site uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” in the address bar and by the padlock symbol.
11. Your rights
At any time, you have the right to
- access your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (“right to be forgotten”, Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent given (Art. 7(3) GDPR)
- lodge a complaint with a supervisory authority (Art. 77 GDPR)
The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.
12. Storage period
We store your data only for as long as is necessary for the purposes stated above or as required by statutory retention obligations. After the periods have expired, the data is routinely deleted.
13. Currency and amendment of this policy
This Privacy Policy is currently valid and is dated April 2026. Due to the further development of our website or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version can be accessed at any time on this page.