Privacy policy

MAGICBEAN Data Protection Notice

This MAGICBEAN Website Data Protection Notice describes how MagicBean GmbH, Lurgiallee 6-8, 60439 Frankfurt am Main, Germany, Tel: +49 (0) 69 3486717-0, E-Mail: info@magic-bean-service.com (“MagicBean” or “we” or “us” or “our”) as controller processes the personal data and other information of the users (“you” or “your”) in particular within the meaning of the General Data Protection Regulation (“GDPR”) when using the website www.magic-bean-service.com (“Website”) and other system services provided by MAGICBEAN.

1.Categories of personal data, processing purposes, legal basis and source

• a.Personal Data actively provided by you:
  If you use the contact form on our Website, you will be asked to provide the following personal data about you: First name, last name, email address, mobile phone number, user name, selected password. MAGICBEAN processes such personal data for the purpose of providing our services to you. Providing such personal data is voluntary. However, without providing such personal data, you will not be able to account contact us through the contact form. The legal basis for the processing of such personal data is the contract on the use of the Website concluded with you (Art. 6 (1) lit. b GDPR).
• b. Other passively collected information:
  In addition to the personal data that you actively provide, the Website may automatically collect, process and store certain information on a pseudonymous basis from you:
  Device and usage information – that may include (i) information specific to the used device to access the Website (including, but not limited to, model, operating system, IP address, language, carrier and similar information) and (ii) information about the use of features, functions, or notifications on the device, to recognize you and to analyze trends;
  Website analytics – such as date and time of the access to the Website, how often a user uses the Website, aggregated usage, performance data. We use Website analytics to allow us to better understand the functionality and use of our Website.
  The legal basis for this purpose are our legitimate interests (Art. 6 (1) lit. f GDPR).

2.Recipients

• a. Transfer to service providers
  MAGICBEAN may engage external service providers, who act as a data processor of MAGICBEAN, to provide certain services to MAGICBEAN such as Website and IT service providers, marketing service providers or administrative support service providers. When providing such services, the external service providers may have access to and/or may process your personal data.
  Those external service providers will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data and to process the personal data only as instructed.
• b. Other recipients
  Some of our colleagues administering the Website and providing IT services may be employees of our group companies. When administering the Website our colleagues may have access toand/or may process your personal data. The respective transfer of your personal data is based on our legitimate interests. Our legitimate interests are the transmission of personal data within the group of companies for internal administrative and support purposes. The access is limited to colleagues with a need to know.
  MAGICBEAN may also transfer your personal data to customs authorities, law enforcement agencies, governmental authorities, legal counsel and external consultants in compliance with applicable data protection law. The legal basis for such processing is Art. 6 (1) b) GDPR (compliance with a legal obligation to which MAGICBEAN is subject to), such as obligation to provide information to the authorities, or Art. 6 (1) f) GDPR (legitimate interests), such as exercise or defense of legal claims. More information on the balancing test is available upon request.
• c. International transfers of Personal Data
  The personal data that we collect or receive about you may be transferred to and processed by recipients which are located inside or outside the European Union (“EU”) and the European Economic Area (“EEA”) and which do not provide for an adequate level of data protection. The countries that are recognized to provide for an adequate level of data protection from an EU law perspective are Andorra, Argentina, Canada, Switzerland, Faeroe Islands, Guernsey, the State of Israel, Isle of Man, Jersey, New Zealand and the Eastern Republic of Uruguay. Recipients in the US may partially be certified under the EU-U.S. Privacy Shield and thereby deemed to provide for an adequate level of data protection from an EU law perspective. Some of the recipients of your personal data will be located or may have relevant operations outside of the EU, such as in the People’s Republic of China, where a Commission adequacy decision is absent. With regard to data transfers to such recipients outside of the EU we provide appropriate safeguards, in particular, by way of entering into data transfer agreements adopted by the European Commission (e.g. Standard Contractual Clauses (2010/87/EU and/or 2004/915/EC)) with the recipients or taking other measures to provide an adequate level of data protection.

3. What rights do you have and how can you assert your rights?

If you have declared your consent for any personal data processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.

Pursuant to applicable data protection law you may have the right to: request access to your personal data, request rectification of your personal data; request erasure of your personal data, request restriction of processing of your personal data; request data portability, and object to the processing of your personal data. Please note that these aforementioned rights might be limited under the applicable national data protection law.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

4. How long do we keep your Personal Data?

Your personal data will be retained as long as necessary to provide you with the services requested. When MAGICBEAN no longer needs to use your personal data to comply with contractual or statutory obligations, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it, unless we need to keep your information, including personal data, to comply with legal or regulatory obligations to which MAGICBEAN is subject, e.g. statutory retention periods which can result from German Commercial Code (Handelsgesetzbuch, HGB) and/or German Fiscal Code (Abgabenordnung, AO) and usually contain retention periods from 6 to 10 years, or if we need it to preserve evidence within the statutes of limitation, which is usually three years but can be up to thirty years.

5. Contact us

If you have concerns or questions regarding this Website Data Processing Notice, please contact us as follows:
MagicBean GmbH, Lurgiallee 6-8, 60439 Frankfurt am Main, Germany, Tel: +49 (0) 69 3486717-0, E-Mail: info@magic-bean-service.com.