Our Commitment to GDPR
Magicallly is committed to protecting the privacy and security of your personal data. We comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the United Kingdom, and Switzerland.
This page explains your rights under GDPR and how we ensure compliance.
Your Rights Under GDPR
As a data subject, you have the following rights:
📋 Right to Access
You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data.
✏️ Right to Rectification
You can request that we correct any inaccurate personal data or complete any incomplete data.
🗑️ Right to Erasure
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances.
⏸️ Right to Restriction
You can request that we restrict processing of your personal data in certain circumstances.
📦 Right to Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
🚫 Right to Object
You can object to processing of your personal data for direct marketing or based on legitimate interests.
Legal Basis for Processing
We process personal data under the following legal bases:
- Contract: Processing necessary to perform our contract with you (providing the Magicallly service).
- Consent: Where you have given explicit consent for specific processing activities.
- Legitimate Interests: Processing necessary for our legitimate business interests, provided they don't override your rights.
- Legal Obligation: Processing necessary to comply with legal requirements.
Data We Collect
For detailed information about the personal data we collect and how we use it, please see our Privacy Policy. In summary:
- Account information (email, name)
- Content you create and input
- Usage data and analytics
- Payment information (processed by third-party providers)
- Technical data (IP address, device information)
International Data Transfers
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries with adequacy decisions
- Other legally recognized transfer mechanisms
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods depend on:
- The nature of the data and its sensitivity
- Legal requirements and obligations
- Legitimate business needs
- Your requests for deletion
Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
- Incident response procedures
Data Protection Officer
While we may not be legally required to appoint a Data Protection Officer, we take data protection seriously. For any privacy-related inquiries, please contact us directly.
Exercising Your Rights: To exercise any of your GDPR rights, please contact us at @Berry_cooool on X. We will respond to your request within 30 days.
Supervisory Authority
If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
Updates to This Information
We may update this GDPR information from time to time. Material changes will be communicated appropriately.
Questions?
If you have any questions about our GDPR compliance or how we handle your personal data, please don't hesitate to reach out at @Berry_cooool on X.