Privacy Policy – Magda Plant-Based
Effective from: 1 October 2026
1. Data controller
The controller of your personal data is Magda Plant-Based Sp. z o.o., ul. Zakopiańska 35A, 34-424 Szaflary, Poland, entered in the National Court Register (KRS) under number 0000665193, NIP (tax ID) 7352870212, REGON 366717496 (“we”, “us” or the “Controller”).
You can contact us about your personal data:
- by e-mail: info@magdaplantbased.com
- by post: at the registered address above.
This policy covers data collected through our social media profiles (Facebook, Instagram), Meta ads and lead forms, and our website www.magdaplantbased.com.
2. What data we collect
| Source | Data |
|---|---|
| Lead forms in Facebook or Instagram ads (Lead Ads) | name, e-mail address, phone number, company name, job title, answers to the form questions |
| Messages (Messenger, Instagram Direct, e-mail) | the data you give us and the content of the conversation |
| Interactions with our profile (likes, comments, shares) | profile name, profile picture, comment content |
| Page and ad statistics from Meta | aggregated, anonymous data, e.g. reach, clicks, approximate age and location of the audience |
| Our website (cookies, Meta Pixel) | IP address, device and browser identifiers, pages visited, actions taken |
Providing data is voluntary. Without contact details, however, we cannot reply to your enquiry or send you an offer.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to an enquiry from a form or message, sending an offer, samples or a price list | Art. 6(1)(b) (steps taken at your request before entering into a contract) and Art. 6(1)(f) (our legitimate interest in contacting people interested in our products) |
| Running our social media profiles and replying to comments | Art. 6(1)(f) (brand promotion and communication with our audience) |
| Page statistics and ad performance | Art. 6(1)(f) (analysing and improving our marketing) |
| Direct marketing, including newsletters and offers sent by e-mail or phone | Art. 6(1)(a) (your consent), which you may withdraw at any time |
| Cookies and the Meta Pixel on our website (personalised ads, remarketing) | Art. 6(1)(a) (your consent given in the cookie banner) |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) |
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Who receives your data
We do not sell your data. It may be received only by:
- Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland), the operator of Facebook and Instagram. For our page statistics we are joint controllers with Meta (Art. 26 GDPR), and Meta bears primary responsibility for that data. Meta’s rules are set out in the Meta Privacy Policy.
- our service providers: website hosting, e-mail, CRM and marketing agencies, acting only on our instructions under a data processing agreement,
- companies in our group and sales agents working with us, where needed to handle your enquiry,
- public authorities, where required by law.
Meta may transfer data to the United States. Such transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses.
5. Cookies and the Meta Pixel
Our website uses cookies that are necessary for it to work. With your consent we also use the Meta Pixel. It lets us measure ad performance and show you our ads on Facebook and Instagram after you visit our website.
You give or change your consent in the cookie banner on our website. You can also delete or block cookies at any time in your browser settings. You can change your ad settings in the Meta Accounts Center.
6. How long we keep your data
- data from forms and messages: until the conversation ends, then for 12 months in case of further contact, unless you object earlier;
- if we enter into a contract: for its duration and until the limitation periods for claims and the retention periods required by tax law expire;
- data processed on the basis of consent: until you withdraw it;
- comments and messages on Facebook and Instagram: as long as they remain on the platform or until you or we delete them;
- cookies: for the period stated in the cookie banner, no longer than 13 months.
7. Your rights
You have the right to:
- access your data and receive a copy,
- rectify your data,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest, including direct marketing,
- withdraw your consent at any time.
To exercise these rights, write to the address given in section 1. We will reply within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects. Ad targeting on Meta platforms follows Meta’s own rules.
8. Changes to this policy
We may update this policy, for example when we start using new marketing tools. The current version is always available at www.privacy-policy.magdaplantbased.eu/.
Effective from: 1 October 2026.