Privacy policy

Updated on 02/24/2025

This personal data protection policy (the “Policy”) aims to describe how Magic Ways (also referred to as “we,” “our”) processes the personal data of Magic Ways’ customers and prospects (whether users of the Site or not) and users of the Site (collectively referred to as the “Data Subject(s),” “you,” “your”).

Respecting your privacy and personal data is a priority for Magic Ways, which is committed to processing your data in compliance with the French Data Protection Act No. 78-17 of January 6, 1978, as amended, the General Data Protection Regulation (EU) 2016/679 of April 27, 2016 (“GDPR”), and the relevant standards and recommendations of the CNIL (collectively, the “Applicable Regulations”).

1. Identity and Contact Information of the Data Controller

Magic Ways acts as the data controller for all data collected in the course of its business activities.

2. Collected Personal Data

As part of its activities, Magic Ways may collect and process personal data of the Data Subject, particularly when they:

  • Browse the Site and use its features;
  • Create a user account;
  • Subscribe to the Magic Ways newsletter;
  • Express interest in the services offered by Magic Ways;
  • Contact Magic Ways for information about its services;
  • Make a reservation with Magic Ways;
  • Participate in activities organized by Magic Ways;
  • Exercise their rights under the Applicable Regulations.

The collected data includes:

  • Identification data (last name, first name(s), mailing address, email address, phone number(s), date of birth, gender, number of children), as well as data you provide about individuals for whom you book a service. You commit to obtaining their prior consent before providing such data.
  • Connection and browsing data (via cookies) as described in our cookies policy.
  • Payment data necessary for processing service orders.
  • Data required for contests and games.
  • Booking and contact history with us (customer number, document requests, history of ordered and paid products and services).

Magic Ways cannot be held liable for any breach of this Policy by a Data Subject or a third party not acting as a Magic Ways subcontractor.

3. Purposes and Legal Bases of Processing
3.1 Necessity of Data Collection

In the course of Magic Ways’ business activities and the sale of services on the Site, the Data Subject may be required to provide certain personal data (which directly or indirectly identifies them). If the Data Subject refuses to provide the requested information, they may not be able to access the offered services and/or certain features of the Site. The mandatory or optional nature of the requested personal data is specified at the time of collection.

3.2 Purpose of Data Processing and Corresponding Legal Bases

Personal data is collected for specific, explicit, and legitimate purposes. Depending on the case, the data may be used for the following purposes:

✔ Responding to information requests and interacting with customer service.
✔ Providing users access to the Site, such as allowing authentication to access a personal area reserved for registered users.
✔ Organizing contests and games.
✔ Ensuring the optimal operation and continuous improvement of the Site and its features.
✔ Detecting potential fraudulent or abusive activities.
✔ Ensuring Magic Ways’ compliance with its legal obligations.
✔ Booking and executing your selected Magic Ways activity(ies).
✔ Communicating with you regarding your service execution details.
✔ Conducting statistical studies, surveys, and satisfaction research.
✔ Conducting commercial prospecting operations.
✔ Managing and responding to Data Subjects’ requests to exercise their rights.
✔ Handling legal disputes.

4. Retention Period of Personal Data

Magic Ways retains personal data only for the duration necessary to fulfill the specified processing purposes, subject to legal retention obligations, the possibility of archiving certain data (particularly in case of legal disputes), and/or the anonymization of personal data. The retention period may vary depending on the purpose of processing, with Magic Ways applying the following retention periods (without prejudice to legal archiving and retention obligations):

  • Identification and contact data related to information requests or service orders: Retained as long as the Data Subject remains active, with a maximum period of three (3) years from the last contact request, then archived for an additional five (5) years.
  • Bank data: Retained only for the time necessary to ensure full payment of the order.
  • Requests for exercising rights: Retained for the time necessary to process the request and then archived for five (5) years after the expiration of the maximum legal response period.
  • Cookies and tracking data: Stored for a maximum of thirteen (13) months. After this period, the data is either deleted or anonymized.
  • Identity verification data for exercising rights: Retained for a maximum of 12 months.
5. Recipients of the Data

Your data may only be disclosed to the following recipients, within the scope of their responsibilities and only when necessary to fulfill the purposes outlined in Section 3 of this Policy:

  • Authorized personnel of Magic Ways.
  • Service providers, subcontractors, and suppliers processing your data on our behalf (e.g., transportation companies, insurance providers, banks, technical and communication subcontractors).
  • Other entities within the Magic Ways Group.

We may also share data to comply with legal or regulatory requests, court orders, subpoenas, or legal proceedings. If Magic Ways transfers assets to a third party, data may also be disclosed.

Magic Ways does not sell or rent your personal data to third parties for their own activities.

6. Confidentiality and Security Measures

Protecting your privacy and personal data is one of our priorities. Magic Ways ensures the confidentiality of personal information and has implemented appropriate security measures (technical and organizational) to prevent unauthorized access, loss, alteration, or unlawful use.

Access to personal data is strictly limited to Magic Ways employees and subcontractors who require it for their responsibilities. These individuals are bound by confidentiality obligations and are subject to disciplinary actions for non-compliance.

Data exchanges with third parties are governed by contracts to ensure data protection and compliance with privacy rights.

7. Data Subject Rights
7.1 Your Rights Regarding Your Data

Under applicable law, any user who has provided personal data has the right to:

  • Access their data and obtain confirmation of its processing (Article 15 GDPR).
  • Rectify inaccurate or incomplete data (Article 16 GDPR).
  • Request erasure of their data (Article 17 GDPR).
  • Withdraw consent (where processing is based on consent) (Article 7 GDPR).
  • Restrict processing of their data (Article 18 GDPR).
  • Request data portability (only applicable where processing is based on consent) (Article 20 GDPR).
  • Object to data processing (if based on legitimate interest and justified by their situation) (Article 21 GDPR).
  • Object to direct marketing processing, including profiling (Article 21 GDPR).
  • Define directives on the fate of their data after death (French Data Protection Act, Article 85).
7.2 Exercising Your Rights

To exercise these rights, you may contact Magic Ways’ Data Protection Officer at:

  • Email: contact@magicways.fr
  • Mail: Magic Ways – 18 rue Royale – 75008 Paris, Attention: Data Protection Officer
8. Cookies Policy

For more details on how Magic Ways uses cookies, please refer to our cookies policy.

9. Social Media

You can follow Magic Ways on Instagram, Facebook, and YouTube. We collect only anonymous data for statistical purposes. However, we are not responsible for how these platforms process your data. Please review their respective privacy policies.

10. International Data Transfers

In case of transfers outside the EU, Magic Ways ensures appropriate safeguards under GDPR provisions.

11. Policy Updates

Magic Ways reserves the right to update this Policy. Please check regularly for changes.

12. Governing Law and Dispute Resolution

This Policy is governed by French law. In case of disputes, the competent court will be determined by applicable legal procedures.