Privacy for gift voucher purchases
Effective from 29 October 2026
Controller
MAGIC STORY d.o.o., Žirovnica 43A, 4274 Žirovnica, Slovenia (business unit Log 12b, 4280 Kranjska Gora). Data protection contact: rezervacija@magicstory.si.
What we process
The buyer's name and email address, optionally the recipient's name and a message printed on the voucher, and voucher data (amount, code, balance, redemptions). We do not receive card details; Stripe processes them.
Purpose and legal basis
We use the data to issue and send the voucher, redeem it, resend a lost voucher, process refunds and keep accounting records. The legal basis is the performance of a contract (the purchase) and legal obligations (accounting). We do not use the data for marketing.
Processors
Stripe (payments), Vercel and Neon (hosting of the application and database in the EU/US under standard contractual clauses), Resend (email delivery) and Bistri Sistemi, DOERS d.o.o. (system maintenance).
Retention
Voucher data is kept while the voucher is valid and afterwards for as long as accounting and tax rules require (generally 10 years).
Your rights
You have the right to access, rectification, erasure (where the law allows), restriction and objection. Write to rezervacija@magicstory.si. You may lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si).
Cookies
The buyer pages use no tracking or advertising cookies. The till and admin pages use one strictly necessary cookie for staff login.