1. Privacy Policy

When you, as a private individual (“you” or “Data Subject”), contact The Magic UAB (“The Magic,” “Data Controller”) to purchase services, contact The Magic for the sale of your services or goods, take active steps on The Magic’s social media accounts, agree to receive The Magic’s newsletters, participate in The Magic’s searches (for private individuals, animals, movable and immovable objects, and other things), participate in searches published by The Magic, participate in recruitments, or otherwise contact The Magic (all of the above activities are collectively referred to as “Actions”), you provide The Magic with certain personal information, which makes The Magic the data controller of your personal data.

This description of the principles and rules applicable to the processing of your personal data and the protection of your privacy in The Magic’s activities will be referred to as the “Privacy Policy.” It is intended to inform you about the protection of your privacy provided by The Magic and to help you understand how and what personal data is processed by The Magic and the rights and responsibilities you have in relation to this.

Please note that when you take the above Actions, you will be deemed to have read and agreed to be bound by the Privacy Policy. If you do not agree to any provision of the Privacy Policy, you will not be entitled to perform any of the above Actions.

2. About The Magic

The Magic, UAB, legal entity code 302693428, has its registered office at Smolensko g. 10D-37, LT-03234 Vilnius. Data about the company are collected and stored in the Vilnius branch of the Register of Legal Entities of the Republic of Lithuania. For personal data issues, please contact us at +370 5 244 4449.

3. What is Personal Data?

Personal data is any information received by The Magic from you or third parties that can be used to identify you and is stored electronically or otherwise.

Personal data includes any information, including but not limited to your name, surname, address, email address, telephone number, bank account number, etc., that The Magic collects about you in connection with the Actions set out in this Privacy Policy or for the purposes outlined in your separate consent or agreement with The Magic.

This data also includes your personal information in the public domain that The Magic accesses when you contact The Magic’s social media outlets or when you are active on The Magic’s social media accounts.

4. How Does The Magic Collect and Use Your Personal Data?

The Magic needs your personal data, which may be collected or obtained in the ways described below. This Privacy Policy sets out what you can expect when The Magic collects or receives personal data about:

• Individuals who contact The Magic to purchase services;
• Natural persons who contact The Magic to sell their services or goods;
• Natural persons who are users of social media and who contact The Magic in any way through The Magic’s social media accounts or actively participate in them;
• Natural persons who agree to receive The Magic’s newsletters;
• Natural persons who participate in searches published by The Magic;
• Natural persons who participate in recruitment campaigns published by The Magic;
• All other natural persons who contact The Magic and provide certain personal data.

5. Personal Data Processed When You Purchase Services from The Magic

Purpose of Processing: The conclusion of the contract, the sale, and the provision of services.

Personal Data Processed: Your name, surname, date of birth, place of residence (address), email address, telephone number, and information related to the purchase (date of purchase, description of the service, price).

Duration of Processing: Documents confirming the conclusion of the contract will be kept for 10 years from the end of the contract.

Basis for Processing: Performance of the contract.

6. Personal Data Processed by The Magic When Purchasing Goods and/or Services from You

Purpose of Processing: The conclusion of a contract, the purchase of goods and/or services, and payment.

Personal Data Processed: Your name, surname, date of birth, place of residence (address), email address, telephone number, bank account number, and information related to the purchase (date of purchase, description of the goods and/or services, price).

Duration of Processing: Documents confirming the conclusion of the contract will be kept for 10 years from the end of the contract.

Basis for Processing: Performance of the contract.

7. Social Media

Any information you provide to us via social media (including messages, the use of the “Like” and “Follow” buttons, and other communications) is controlled by the social network manager.

The Magic’s website, located at www.magic.film, contains links to our social media accounts. We currently have the following accounts:

• Facebook, whose privacy notice can be found at: Facebook Privacy Explanation
• Instagram, whose privacy notice can be found at: Instagram Privacy Notice
• LinkedIn, whose privacy notice is available at: LinkedIn Privacy Policy

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

8. Searches Published by The Magic

The Magic may, from time to time, publish on social media and/or other information dissemination channels and tools various searches for individuals, animals, movable and immovable objects, and other things that may be relevant to The Magic in the development and sale of its services and/or products.

By submitting your application to participate in a search published by The Magic, you confirm that you give your express consent to The Magic processing your personal data contained in your application and/or its attachments for the purposes of carrying out the search process and concluding the contract.

If you do not provide the information requested in the specific search advertisement, The Magic will not be able to assess the suitability of your submission.

In the event that you do not express your explicit consent to the processing of your personal data at the end of the search process by submitting an application in accordance with the criteria of the search published by The Magic on the application form, your personal data will be deleted and/or destroyed by The Magic within five (5) working days after the contract for the subject of the search has been signed with the successful search participant.

If you give your explicit consent to The Magic processing your personal data after the end of the advertised search, The Magic will have the opportunity to contact you in the future about the same subject matter and offer you a contract when you submit your application. In this case, the information you have provided will be stored for a period of one (1) year from the date of receipt of such information, after which it will be deleted and/or destroyed.

9. Processing of Personal Data of Job Applicants

The Magic collects and processes your CV and/or cover letter and/or any other information you provide for the purpose of participating in the recruitment process. This is done on the basis of your consent, which you provide to The Magic or to the recruitment service provider by sending your CV.

If you do not submit your CV and/or cover letter, The Magic will not be able to assess your suitability for the position offered.

If you do not provide explicit consent to the processing of your personal data at the end of the recruitment process, your personal data will be deleted and/or destroyed by The Magic within five (5) working days after the successful candidate has signed the employment contract.

If you give your explicit consent for The Magic to process your personal data after the end of the job selection, The Magic may offer you future job opportunities. In this case, the information you have provided will be kept for a period of one (1) year from the date of receipt, after which it will be deleted and/or destroyed.

10. Communication with The Magic

If you contact The Magic by email, we will process the following data: your name, surname, email address, and the content of your correspondence.

This data will be processed to prepare the performance of the contract or to answer your questions. If you do not provide your contact details, we will not be able to contact you.

Please note that The Magic’s servers may use email monitoring or blocking software, and it is your responsibility to ensure that the emails you send do not contain illegal content.

Correspondence will be retained for a period of three (3) years from the date of receipt, unless otherwise specified by retention periods set out in the Privacy Policy or required by law.

Any personal data you provide when communicating with The Magic will be used only for the purposes described above and to review messages, administer, and manage communication flows.

The Magic undertakes not to use your personal data in any publications in a manner that identifies you without your explicit consent.

Please note that The Magic may need to contact you by post, email, or telephone, so please notify us of any changes to your personal data.

11. Disclosure of Personal Data

The Magic may disclose your personal data to The Magic’s employees, partners, subcontractors, service providers (such as IT service providers, accounting service providers, debt collection companies, lawyers, auditors, marketing service providers, etc.), and other individuals as reasonably necessary for the purposes set out in this Privacy Policy.

In certain circumstances, The Magic may be required to transfer personal data when:

• Disclosure is required by law, including when personal data must be disclosed to tax authorities and law enforcement agencies for crime prevention and detection purposes.
• Disclosure is necessary in connection with legal proceedings, for the purpose of obtaining legal advice, or to establish, exercise, or defend The Magic’s rights.
• Disclosure is necessary to protect the interests of The Magic or others (e.g., to prevent fraud).
• Disclosure is necessary to protect your vital interests (e.g., if you feel unwell on The Magic’s premises and need medical attention).
• Information must be disclosed to a third party providing administration or data processing services on behalf of The Magic. In such cases, The Magic will ensure that these third parties protect personal data in the same way as The Magic and will notify you of any changes to this privacy notice.
• Disclosure is necessary to a prospective purchaser of The Magic’s assets or organization.

The list of recipients or categories of recipients set out in this Privacy Policy may change. If you wish to be informed of changes to the recipients of your personal data, please notify us by email at marius@magic.film, including the subject line “I wish to be informed of changes to the recipients of my personal data,” along with your name and surname.

12. Transfer of Personal Data to Third Countries

Your personal data may be transferred to third countries, i.e., countries outside the European Economic Area, in accordance with the requirements of applicable legislation.

Such transfers may only occur in the following cases:

• Where the European Commission has decided that the third country, territory, or one or more specified sectors in that third country provide an adequate level of protection;
• In the absence of an adequacy decision from the European Commission, The Magic or its processor may transfer your personal data to a third country only if adequate safeguards are in place, provided that enforceable data subject rights and effective remedies are available;
• In the absence of an adequacy decision by the European Commission or the establishment of adequate safeguards, the transfer of your personal data to a third country will only take place under at least one of the following conditions:
  • (a) You have expressly consented to the proposed transfer after being informed of the possible risks due to the absence of an adequacy decision and adequate safeguards;
  • (b) The transfer is necessary for the performance of a contract between you and The Magic or for implementing pre-contractual measures taken at your request;
  • (c) The transfer is necessary for entering into or performing a contract between The Magic and another natural or legal person for your benefit;
  • (d) The transfer is necessary for important reasons of public interest;
  • (e) The transfer is necessary for the establishment, exercise, or defense of legal claims against The Magic;
  • (f) The transfer is necessary to protect your vital interests or the vital interests of others where you are unable to give consent for physical or legal reasons;
  • (g) The transfer is made from a register intended under European Union or Republic of Lithuania law to provide information to the public, which is accessible to the general public or to any person who can demonstrate a legitimate interest, provided that the conditions for accessing the information contained in such a register, as laid down under European Union or Republic of Lithuania law, are complied with in the specific case.

13. Data Security and Notification of Personal Data Breaches

The Magic processes your personal data in accordance with the requirements of the European Union Data Protection Regulation 2016/679, the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, and other relevant legal acts, as well as with the instructions of the controlling authorities.

In processing your personal data, The Magic implements organizational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing. These security measures are determined based on the risks involved in processing personal data.

In the event of a personal data breach, The Magic will notify the State Data Protection Inspectorate without undue delay and, where possible, within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

If the personal data breach poses a serious risk to your rights and freedoms, The Magic will notify you of the breach without undue delay.

14. Your Rights

You have certain rights in relation to your personal data. The following information sets out these rights concerning The Magic’s processing of your personal data and when you can exercise these rights. If you would like more information about your rights or to exercise them, please contact us at marius@magic.film

The Magic undertakes to provide you with information on the action taken following your request to exercise your rights without undue delay, but at the latest within one (1) month of receipt of your request. Depending on the complexity of the request and the number of requests received, the aforementioned time limit may be extended for a further two (2) months. In this case, The Magic will inform you within one (1) month of receipt of the request of such extension and the reasons for it.

The information you are interested in is provided free of charge. However, if your requests are deemed by The Magic to be manifestly unfounded or disproportionate, in particular due to their repetitive nature, The Magic may:

• Charge a reasonable fee, taking into account the administrative costs of providing the information or the notices or actions requested; or
• Refuse to act on your request.

If The Magic has reasonable doubt as to your identity following a request for the exercise of rights, you may be required to provide additional information necessary to confirm your identity.

14.1 Right to Withdraw Consent

If you have provided The Magic with explicit consent to process your data, you may withdraw it at any time. If you wish to withdraw your consent, please submit a written request to The Magic at the following email address: marius@magic.film.

14.2 Right of Access to Your Personal Data

You have the right to contact The Magic at any time to obtain confirmation as to whether The Magic processes your personal data. If The Magic does process your personal data, you have the right to access your personal data and other relevant information. To do this:

• Make a written request to us at the following email address: marius@magic.film;
• Confirm your identity;
• Observe the principles of fairness and reasonableness when making such a request.

The Magic will respond within one month of receipt of your request.

14.3 Right to Request Rectification

You have the right to have inaccurate personal data relating to you rectified by The Magic without undue delay. Taking into account the purposes for which the data was processed, you have the right to request that incomplete personal data be completed, including by means of a supplementary statement. In this case, The Magic may ask you to confirm the rectified information.

14.4 Right to Request Erasure (“Right to be Forgotten”)

You have the right to ask The Magic to erase your personal data. Please note that The Magic will only be able to comply with such a request if:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the processing of your personal data is based, and there is no other legal basis for processing your personal data;
• The personal data are processed unlawfully;
• The personal data must be erased in accordance with a legal obligation imposed by the law of the European Union or the Republic of Lithuania applicable to The Magic.

The Magic may not comply with your request to erase your personal data if:

• It is necessary to comply with a legal obligation imposed by European Union or Lithuanian law to which The Magic is subject, which requires the processing of the data, or for the performance of a task carried out in the public interest;
• It is necessary to assert, exercise, or defend legal claims against The Magic.

14.5 Right to Restrict Processing of Personal Data

You have the right to require The Magic to restrict the processing of your personal data where any of the following applies:

• For the period necessary to verify the accuracy of your personal data if you contest its accuracy;
• Where the collection, storage, or use of your personal data by The Magic is unlawful, but you choose not to request erasure;
• Where your personal data is no longer required by The Magic, but you need it to establish, exercise, or defend a legal claim;
• For the period necessary to determine whether The Magic has an overriding legal basis for continuing to process your personal data if you have exercised your right to object to the processing.

14.6 Right to Data Portability

You have the right to receive personal data concerning you that you have provided to The Magic in a structured, commonly used, and machine-readable format and to have that data transferred to another controller, or to require The Magic to directly transfer that personal data to another controller where technically feasible.

14.7 Right to Object

You have the right to object to the processing of your personal data by The Magic where the processing is carried out or intended to be carried out for the purposes of direct marketing or for the legitimate interest pursued by The Magic or by a third party to whom the personal data is provided. This is unless The Magic demonstrates compelling legitimate grounds which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

15. Complaints

If you believe that your rights as a data subject have been and/or may be violated, please contact The Magic immediately with a complaint at marius@magic.film.

Upon receipt of your complaint, The Magic will contact you within a reasonable period to inform you of the progress of the investigation and subsequently of the outcome.

If you are not satisfied with the outcome of the investigation, you may lodge a complaint with the supervisory authority, the State Data Protection Inspectorate.

16. Updating and Validity of the Privacy Policy

The Magic may update or modify this Privacy Policy at any time to ensure the highest standard of personal data protection.

Such updated or amended Privacy Policy will be effective from the time of its posting on The Magic’s website www.magic.film. You should check it from time to time to ensure that you are happy with the current version of the Privacy Policy.

When we update this Privacy Policy, we will post a notice on the aforementioned website.

If the terms of your consents or agreements to which you are a party provide otherwise, the provisions of those documents will apply, even if they conflict with this Privacy Policy.

This Privacy Policy was last updated on 28.06.2018.