Privacy and Cookies Policy
Last updated: 11 May 2026.
1. Introduction
Magager Máquinas Agrícolas e Industriais Unipessoal Lda., owner of the online store https://magmag.pt, respects the privacy of its customers, users and visitors.
This Privacy and Cookies Policy explains who we are, what personal data we collect, the purposes for which we use it, the applicable legal basis, with whom we may share it, how long we keep it, what cookies and similar technologies we use, and how you can exercise your rights.
When using the website https://magmag.pt, creating an account, placing an order, contacting us or interacting with our services, personal data may be processed under the terms described in this policy.
2. Data Controller
The controller responsible for the processing of personal data is:
Magager Máquinas Agrícolas e Industriais Unipessoal Lda.
Tax/VAT number: 501686428
Registered office: Almofala de Baixo, 3260-023 Aguda, Figueiró dos Vinhos, Portugal
Website: https://magmag.pt
Contact for privacy and personal data matters:
- Email: suporte@magmag.pt
- Telephone: +351 236 621 161 call to Portuguese national landline network
- Address: Almofala de Baixo, 3260-023 Aguda, Figueiró dos Vinhos, Portugal
3. Personal Data We May Collect
Depending on how you use our online store, we may collect and process different categories of personal data.
3.1. Identification and contact data
- First name and surname.
- Email address.
- Telephone number.
- Tax identification number, when provided for invoicing purposes.
- Company details, where applicable.
3.2. Delivery and billing data
- Delivery address.
- Billing address.
- Country, postcode, locality and other data required for dispatch.
- Information required for the issuance of commercial and tax documents.
3.3. Order-related data
- Products purchased or added to the cart.
- Order history.
- Order status.
- Data required for processing, dispatch, delivery, return, exchange, repair or after-sales assistance.
- Communications related to orders, customer support or complaints.
3.4. Payment data
- Chosen payment method.
- Payment status.
- Payment or transaction references.
- Payment confirmations received through payment service providers.
Magager, Lda. does not store full bank card details when payment is processed through external payment service providers. Such data is processed by the respective providers in accordance with their own policies and legal obligations.
3.5. Technical and usage data
- IP address.
- Browser type and device used.
- Operating system.
- Pages visited.
- Date and time of access.
- Traffic source.
- Interactions with the website.
- Cookie identifiers or similar technologies, where applicable.
3.6. Data collected through forms and communications
- Data entered in contact forms.
- Content of messages sent by email, form, telephone, WhatsApp or other available contact channels.
- Information provided in the context of quotation requests, technical support, after-sales assistance, complaints or information requests.
4. External Services, Login and Reviews
4.1. Login through external services
Where available, the user may choose to log in or create an account through external services, such as Google. By using this functionality, the user authorises the respective external service to share with MagMag the data required for the creation and management of the customer account, namely name and email address.
The use of these services is also subject to the respective providers’ own privacy policies and terms.
4.2. Google Customer Reviews
MagMag may make available the Google Customer Reviews feature, which allows the Customer to review their purchase experience.
Data sharing with Google for this purpose only occurs when the Customer gives consent through the option made available on the order confirmation page or an equivalent mechanism.
The shared data may include, as necessary for the operation of the service, the email address, delivery country, order identifier and estimated delivery date.
4.3. Embedded third-party content
The website may include third-party content, such as embedded YouTube videos or other external services. These services may collect technical data or use cookies, depending on the user’s consent preferences and the settings of the respective service.
5. Purposes and Legal Bases for Processing
Personal data is processed for specific, explicit and legitimate purposes, based on the applicable legal grounds in each case.
| Purpose | Legal basis |
|---|---|
| Creation and management of customer account. | Performance of a contract or pre-contractual steps. |
| Processing, management and delivery of orders. | Performance of a contract. |
| Invoicing, accounting and compliance with tax obligations. | Compliance with a legal obligation. |
| Communications related to orders, payments, deliveries, returns, exchanges, repairs or after-sales assistance. | Performance of a contract, compliance with a legal obligation or legitimate interest. |
| Response to contact requests, information requests, quotations or complaints. | Pre-contractual steps, performance of a contract or legitimate interest. |
| Fraud prevention, website security, detection of abusive use and protection against improper access. | Legitimate interest and compliance with legal obligations. |
| Management of disputes, defence of rights and response to competent authorities. | Legitimate interest, compliance with a legal obligation or exercise/defence of rights. |
| Sending newsletters, promotional communications or direct marketing. | User consent or legitimate interest, where legally admissible. |
| Personalised advertising, remarketing, campaign measurement and non-essential cookies. | User consent, where legally required. |
| Statistical analysis, website improvement and optimisation of user experience. | Consent, where cookies or technologies that are not strictly necessary are involved; legitimate interest where applicable to aggregated or strictly necessary data. |
6. Sharing Data with Third Parties
Magager, Lda. does not sell its customers’ personal data to third parties.
Personal data may, however, be shared with third parties where necessary to provide the requested services, comply with legal obligations or protect rights and legitimate interests.
We may share data with the following categories of recipients:
- Carriers and logistics operators: for dispatch, delivery, tracking, returns and management of transport incidents.
- Payment service providers: for payment processing, transaction confirmation, fraud prevention and refund management.
- Hosting, technical maintenance and IT security providers: for the operation, maintenance and protection of the website.
- Communication and customer support platforms: for responding to requests, providing support and managing contacts.
- Analytics, measurement and advertising services: such as Google Analytics, Google Ads, Google Customer Reviews or other equivalent services, where applicable and in accordance with the user’s consent preferences.
- Social media or external authentication services: where the user chooses to use features related to those platforms.
- Accountants, consultants, auditors and tax entities: for compliance with accounting, tax and legal obligations.
- Public, judicial, administrative or police authorities: where required by law or necessary for the defence of rights.
Where we use processors, we seek to ensure that they process personal data in accordance with documented instructions, appropriate security measures and obligations compatible with the GDPR.
7. International Data Transfers
Some of our service providers, namely technological, analytics, advertising or communication services, may process data outside the European Economic Area.
Where international transfers of personal data occur, Magager, Lda. will seek to ensure that appropriate safeguards are used under the GDPR, such as European Commission adequacy decisions, standard contractual clauses, certification under recognised mechanisms such as the EU-U.S. Data Privacy Framework where applicable, or other legally valid mechanisms.
Despite such safeguards, the use of international services may involve data processing in jurisdictions with legal regimes different from those applicable in the European Union.
8. Data Retention
Personal data will be retained only for the period necessary to fulfil the purposes for which it was collected, without prejudice to longer retention periods required by law or necessary for the defence of rights.
| Data category | Retention period |
|---|---|
| Invoicing, accounting and tax-relevant documents. | Applicable legal period, generally 10 years. |
| Order data and purchase history. | For the period necessary for contract performance, after-sales assistance, legal guarantees, complaints and compliance with legal obligations. |
| Data related to guarantees, repairs, complaints or disputes. | For the period necessary to manage the request and, where applicable, for the limitation period or defence of rights. |
| Customer account. | While the account is active or until deletion is requested, except for data that must be retained due to legal obligations or defence of rights. |
| Inactive user accounts. | May be reviewed and deleted after 3 years without relevant interaction, unless retention is required for legal or contractual reasons. |
| Marketing and newsletter data. | Until withdrawal of consent, objection to processing or subscription cancellation, without prejudice to the minimum retention necessary to prove consent or objection. |
| Cookies and similar identifiers. | According to the duration indicated in the consent panel or applicable cookie table. |
| Technical and security logs. | For the period necessary for security, fraud prevention, technical diagnosis and defence of rights. |
9. Cookies and Similar Technologies
Cookies are small text files stored on the user’s device when visiting a website. They may be used to enable the technical operation of the online store, remember preferences, analyse traffic, measure campaigns or display personalised content and advertising.
MagMag uses first-party and third-party cookies. Some cookies are strictly necessary for the operation of the website and do not depend on consent. Other cookies, such as analytics, advertising, personalisation or social media cookies, will only be used where there is valid user consent or another applicable legal basis.
9.1. Categories of cookies used
- Strictly necessary cookies: enable essential features such as navigation, session, shopping cart, authentication, security, checkout and cookie preference management.
- Performance and analytics cookies: help us understand how users interact with the website, allowing us to improve experience, performance and content.
- Functionality cookies: allow preferences to be remembered, such as language, region or other browsing options.
- Advertising and targeting cookies: may be used to measure campaigns, display personalised ads or limit ad repetition.
- Third-party and social media cookies: may be set by external services embedded on the website, such as videos, maps, login tools or advertising platforms.
9.2. Examples of cookies and technologies used
The following table presents examples of cookies that may be used on the website. The actual list may vary depending on active features, consent preferences, language, country, ongoing campaigns and external services used.
| Name | Provider | Category | Approximate duration | Description |
|---|---|---|---|---|
| PHPSESSID | magmag.pt | Strictly necessary | Session | Allows the user session to be identified and ensures features such as login, cart and checkout. |
| PrestaShop-* | magmag.pt | Strictly necessary / functional | Variable | Technical cookie used by the store platform for essential features, session, cart, authentication or preferences. |
| CookieScriptConsent | CookieScript | Strictly necessary | Variable | Stores the user’s cookie consent preferences. |
| _ga | Google Analytics | Analytics | Variable | Helps distinguish users and measure website usage statistics, where authorised. |
| _ga_* | Google Analytics | Analytics | Variable | Used by Google Analytics 4 for statistical measurement and usage analysis, where authorised. |
| _gcl_au | Google Ads / Google Tag Manager | Advertising / measurement | Variable | May be used for conversion measurement and advertising campaign performance, where authorised. |
| YSC | YouTube | Third-party / video | Session | Used by embedded YouTube videos and may collect information on views and interactions. |
| VISITOR_INFO1_LIVE | YouTube | Third-party / video | Variable | Used by YouTube for preferences and operation of embedded videos. |
| paypal-related cookies | PayPal | Payment / third-party | Variable | May be used when the user chooses PayPal or interacts with associated payment services. |
The user may manage or change cookie preferences through the consent panel made available on the website, where applicable. The user may also configure their browser to block, delete or limit cookies, although this may affect the operation of certain online store features.
9.3. Cookie consent
When visiting the website, a consent management panel may be displayed, allowing the user to accept, reject or configure non-essential cookies.
The user may withdraw or change consent at any time, without affecting the lawfulness of processing carried out up to that date based on the consent previously given.
10. Marketing, Newsletters and Advertising
MagMag may send commercial communications, newsletters, promotional campaigns or product recommendations where there is user consent or another applicable legal basis.
The user may unsubscribe from marketing communications at any time through the unsubscribe link included in the communications, where available, or by contacting us at suporte@magmag.pt.
Personalised advertising, remarketing and campaign measurement through cookies or similar technologies will only be carried out where there is valid consent or another applicable legal basis.
11. Data Security
Magager, Lda. adopts appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
Among other measures, we use encrypted communications through SSL/TLS certificates, access control, security systems, permission management and technical protection mechanisms appropriate to the nature of the data processed.
Despite security efforts, no electronic transmission or storage is completely immune to risk. If you detect any vulnerability, suspected improper access or security incident related to your account or personal data, please contact us immediately.
12. Rights of Data Subjects
Under the GDPR and applicable legislation, the data subject may exercise the following rights:
- Right of access: obtain confirmation as to whether personal data concerning you is being processed and access such data.
- Right to rectification: correct inaccurate or incomplete personal data.
- Right to erasure: request deletion of personal data, where legally applicable.
- Right to restriction of processing: request restriction of processing in certain situations.
- Right to object: object to the processing of your data in certain situations, including direct marketing.
- Right to data portability: receive the data you provided in a structured, commonly used and machine-readable format, where applicable.
- Right to withdraw consent: withdraw consent at any time, where processing is based on such consent.
- Right to lodge a complaint: lodge a complaint with the competent supervisory authority.
To exercise any of these rights, please contact us through:
- Email: suporte@magmag.pt
- Telephone: +351 236 621 161 call to Portuguese national landline network
- Address: Almofala de Baixo, 3260-023 Aguda, Figueiró dos Vinhos, Portugal
Magager, Lda. will respond to requests to exercise rights within the legal period of one month, except in cases of particular complexity or a high number of requests, under the terms provided for in the GDPR.
For security reasons, we may request additional information to confirm the identity of the requester before carrying out certain requests.
13. Complaint to the Supervisory Authority
Without prejudice to contacting Magager, Lda. directly, the data subject has the right to lodge a complaint with the competent data protection supervisory authority.
In Portugal, the competent authority is:
CNPD – Comissão Nacional de Proteção de Dados
Website: https://www.cnpd.pt
14. Minors
The MagMag website is not specifically intended for minors. We do not knowingly collect personal data from minors without the consent of their legal representatives, where such consent is required by law.
If you believe that personal data of a minor has been provided without appropriate authorisation, please contact us so that we can review the situation and take the necessary measures.
15. Links to Third-Party Websites
The website may contain links to third-party websites, platforms or services. Magager, Lda. is not responsible for the privacy policies, cookies, security or content of such external websites.
We recommend that you consult the privacy and cookie policies of the respective third parties before interacting with those services.
16. Changes to this Privacy and Cookies Policy
Magager, Lda. may update this Privacy and Cookies Policy whenever necessary, namely to reflect legal, technical, operational or commercial changes.
The updated version will be published on this page, indicating the date of the last update. We recommend that you consult this policy periodically.
17. Contacts
For any question related to this Privacy and Cookies Policy or the processing of your personal data, you may contact us through:
- Email: suporte@magmag.pt
- Telephone: +351 236 621 161 call to Portuguese national landline network
- Address: Almofala de Baixo, 3260-023 Aguda, Figueiró dos Vinhos, Portugal
Last updated: 11 May 2026.