Privacy Policy

1. Data Controller

Responsible for the processing of personal data on this website (Art. 4 (7) GDPR):

MegaMall24 Gerichtsgasse 7-9 1210 Wien, Austria Email: megamall24@hotmail.com

2. Data We Process

We process personal data that you provide when placing an order, registering or communicating with us:

• Name and contact details (email address, phone number for messages about your order, e.g. via WhatsApp or Viber)
• Delivery address in North Macedonia
• Product links and details of the desired product
• Messages regarding your order and support requests
• Payment data (processed via our payment service provider Stripe)
• Photos you upload in the order chat
• Reviews you publish (name, star rating, comment)
• Newsletter emails to your email address (unsubscribable at any time via the unsubscribe link)

3. Purposes and Legal Bases

Your data is processed for the performance of the contract (Art. 6 (1) (b) GDPR) – in particular for calculating shipping costs, processing the order, invoicing and email notifications about the status of your order. Where you have given consent (Art. 6 (1) (a) GDPR), you may revoke it at any time. In addition, we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), such as ensuring the security of the platform and preventing abuse. By registering, you consent to us sending you messages about your order via your phone number (e.g. via WhatsApp or Viber); you may revoke this consent at any time. With your consent, we also send you our product newsletter to your email address; you can unsubscribe at any time via the unsubscribe link in every newsletter email. When you submit a review, we publish your name and comment publicly on the website. As long as a request is still open, we remind you by email, beginning three days after its last update and at intervals thereafter, to accept or decline the offer.

4. Payment Processing

Payments are processed via our payment service provider Stripe Payments Europe Ltd., Dublin (data processor). The data required for payment processing is transmitted to Stripe. Stripe's privacy policy applies:

5. Recipients and Data Transfers

Data is only disclosed to third parties where this is necessary for the performance of the contract. This includes in particular transport and shipping service providers for delivery to North Macedonia as well as IT service providers ensuring the technical operation of the platform. In the case of transfers to third countries (e.g. North Macedonia), we ensure an adequate level of protection pursuant to Art. 44 ff. GDPR.

6. Retention Period

We store your data for as long as necessary for the performance of the order. Beyond that, the statutory retention and documentation obligations under Austrian tax law apply, in particular the 7-year retention period pursuant to Section 132 of the Austrian Federal Fiscal Code (BAO). Thereafter, your data will be deleted or only processed in a restricted manner for as long as legal obligations exist.

7. Your Rights as a Data Subject

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 19 GDPR) and the right to object to processing (Art. 21 GDPR). Consents given may be revoked at any time with effect for the future (Art. 7 (3) GDPR).

To exercise your rights, contact us at megamall24@hotmail.com.

8. Right to Complain

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde Wickenburggasse 8-10, 1080 Wien www.dsb.gv.at