Privacy and Cookie Policy
Effective Date: 01 July 2025
1. Introduction
We respect your privacy and are committed to protecting your personal data. This Privacy and Cookie Policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).
Our website uses only essential cookies required for core functionality, such as user login, shopping cart, and wishlist features. We do not use advertising, tracking, or third-party cookies. Website usage is monitored anonymously using Matomo, configured without cookies.
2. Data Controller
Digital Media projects
Email: info@digitalmediaprojects.eu
3. What Personal Data We Collect
We collect and process different types of personal data depending on how you use the site:
a. E-Commerce Transactions (via PayPal)
When you make a purchase, you are redirected to PayPal, our payment processor. We do not store or process payment details such as credit card numbers.
PayPal shares with us only the data required to fulfil your order, including:
- Full name
- Email address
- Billing and shipping address
PayPal acts as a separate data controller. For more information, see PayPal’s Privacy Policy.
b. User Accounts and Wishlists
If you register for an account or create a wishlist, we collect:
- Name
- Email address
- Account password (securely stored and encrypted)
- Wishlist preferences or saved items
This data is used to manage your account, retain your preferences, and help you interact with our shop more conveniently.
c. Contact Form
If you contact us via the website, we collect:
- Your name
- Your email address
- Your message
This is used solely to respond to your enquiry and is not shared or used for marketing without consent.
d. Newsletter Subscription
If you subscribe to our newsletter, we collect:
- Your email address
e. Website Usage (Matomo – No Cookies)
We use Matomo (a privacy-focused analytics tool) without cookies. All data is anonymized and cannot identify you personally.
Collected data may include:
- Pages visited
- Browser/device type
- Country (based on anonymized IP address)
This data helps us understand how the website is used and improve it.
4. Legal Basis for Processing
We rely on the following lawful bases for processing your personal data:
- Contractual necessity: to process orders and provide account features
- Consent: for newsletter subscriptions and contact form submissions
- Legal obligation: to retain records for tax, accounting, or legal purposes
- Legitimate interests: to operate and improve the site securely, and collect anonymous usage data
5. Cookies
We use strictly necessary cookies that are essential for the website to function. These include cookies for:
- Shopping cart functionality
- User login sessions
- Saving wishlist items
- Form security
- Cookie consent preference
These cookies do not track or profile users and are not shared with third parties.
| Cookie Name | Purpose | Duration |
| sessionid | Maintains login, cart, and wishlist functionality | Session only |
| user\_auth\_token | Keeps users securely logged in | Session only |
| csrftoken | Protects against CSRF attacks in forms | Session only |
| cookieConsent | Saves your cookie preferences | 6 months |
We do not use:
- Analytics cookies
- Marketing or advertising cookies
- Third-party or tracking cookies
You can manage or block cookies via your browser, but disabling essential cookies may affect website functionality.
6. Data Sharing
We do not sell or share your personal data for marketing purposes.
We may share your data only with trusted third-party providers necessary to operate our services, such as:
- PayPal (for secure payment processing)
- Email providers (for newsletters, if subscribed)
- Hosting or support services
All providers are GDPR-compliant and process your data only under our instructions.
7. International Data Transfers
If any of your personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or providers certified under the EU–U.S. Data Privacy Framework.
8. Data Retention
We retain your data only as long as necessary:
- Order and account data: up to 7–10 years for legal compliance
- Wishlist and account info: as long as your account is active
- Contact form messages: up to 12 months
- Newsletter data: until you unsubscribe
Matomo analytics data: anonymized and retained in aggregate form only
9. Your Rights Under GDPR
You have the right to:
- Access the personal data we hold about you
- Correct or delete your data
- Restrict or object to processing
- Withdraw consent (e.g., unsubscribe from newsletters)
- Request account deletion
- Lodge a complaint with a data protection authority
To exercise your rights, contact us at info@digitalmediaprojects.eu
10. Updates to This Policy
We may update this policy periodically. Any changes will be published here with a new effective date.
11. Contact
If you have any questions or requests related to your personal data or this policy, please contact:
Digital Media Projects
Email: info@digitalmediaprojects.eu