Privacy Policy
Last updated: 8 October 2026
1. Controller
The controller responsible for processing personal data on this website is:
magic production.location.service GmbH
Opferbach 3
37077 Göttingen
Germany
Represented by Magnus Augustin, Managing Director
Email: aloha@magic-pls.de
Phone: +49 172 83 63 199
2. Website Hosting and Server Logs
Our website is hosted using services provided by STRATO GmbH, Germany.
When you access our website, technical information is processed to deliver the requested pages and files and to ensure the security and stability of the website.
Depending on the request, this information may include your IP address, the date and time of access, the requested URL, technical information about your browser and device, and error or security information.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
According to STRATO's general documentation, accessible server access logs may be retained for up to six weeks, while certain internal security logs containing full IP addresses are retained for up to seven days. Different retention periods may apply to error logs, statistics and backups.
The specific configuration and retention periods applicable to our hosting package remain subject to verification.
3. Contact by Email or Telephone
If you contact us by email or telephone, we process the information you provide, such as your name, contact details and the contents of your enquiry.
We use this information to respond to your enquiry, discuss potential projects and manage ongoing business relationships.
The legal basis is Article 6(1)(b) GDPR where processing is necessary for contractual or pre-contractual purposes, or Article 6(1)(f) GDPR where we have a legitimate interest in responding to business enquiries.
Correspondence is retained for as long as necessary for the relevant business purpose, subject to applicable statutory retention obligations.
4. Embedded Videos – Vimeo
Selected films on this website are presented using Vimeo, a video hosting service provided by Vimeo.com, Inc., USA.
To protect your privacy, Vimeo videos are not intended to load automatically when you visit our website.
When you select a film, an information notice is displayed before the Vimeo player is activated.
Only after you select “Activate Vimeo and play film” will the Vimeo player be loaded.
Activating Vimeo may involve the transfer of personal data to Vimeo and associated service providers, including:
- Your IP address
- Browser and device information
- Information about the requested video
- Playback and interaction data
- Cookie identifiers or similar browser-related information
The Vimeo player may also load resources from content delivery networks and technical service providers, including services located outside the European Economic Area.
The legal basis for activating the player and the associated consent-based processing is Article 6(1)(a) GDPR. Where consent is required for access to or storage of information on your device, Section 25(1) TDDDG also applies.
We use Vimeo's Do Not Track parameter (dnt=1) to reduce tracking where supported. This does not guarantee that Vimeo will refrain from setting all cookies or processing personal data.
Your activation applies to Vimeo films during your current visit to the loaded page. We do not store this choice in a persistent consent cookie or in browser storage. Reloading the page requires a new activation.
You can withdraw your activation using “Disable Vimeo” in the Contact section. This removes the active Vimeo player and requires a new activation before another Vimeo video can be played. Withdrawal does not reverse data transfers or processing that have already occurred.
You can use the rest of our website without activating Vimeo.
Vimeo may process data in the United States. Transfers may be covered by an applicable adequacy decision under the EU–US Data Privacy Framework where the recipient is appropriately certified, or by other applicable transfer safeguards.
Further information is available in Vimeo's Privacy Policy.
5. Locally Hosted Videos, Images and Fonts
Our website also contains videos, photographs and fonts served directly from our own website hosting.
These include our showreel and the Hanken Grotesk typeface.
Displaying these resources does not require a connection to Vimeo or Google Fonts. The technical data necessary to deliver these files is processed as described in the hosting section above.
6. Cookies and Similar Technologies
Our website is designed to avoid unnecessary tracking and consent-based technologies.
The Vimeo activation described above is handled without storing a persistent consent cookie or using local or session storage for that choice.
After activation, Vimeo and its technical service providers may use cookies or similar technologies, including for security, playback functionality and other purposes described in Vimeo's own documentation.
The use and duration of individual third-party cookies may depend on the visitor's browser, existing cookies and the provider's current technical implementation.
Other technically necessary browser storage mechanisms may be used by the website or its underlying software.
Where consent is legally required, the relevant technology must not be activated before valid consent has been obtained.
7. External Links and Social Media
Our website contains links to external services, including LinkedIn and Instagram.
These are conventional links rather than embedded social media feeds or tracking widgets.
When you follow an external link, you leave our website. The respective provider is responsible for the processing of personal data on its own website.
8. International Data Transfers
When you activate Vimeo, personal data may be transferred to recipients in the United States or other countries outside the European Economic Area.
Where required, such transfers must be based on an applicable adequacy decision or other safeguards provided for under Chapter V GDPR.
Further details about Vimeo's processing and international transfers are available in its Privacy Policy.
9. Your Data Protection Rights
Subject to the applicable legal requirements, you have the right to:
- Request access to your personal data (Article 15 GDPR)
- Request rectification of inaccurate data (Article 16 GDPR)
- Request erasure (Article 17 GDPR)
- Request restriction of processing (Article 18 GDPR)
- Receive your data in a portable format where applicable (Article 20 GDPR)
- Object to certain processing based on legitimate interests (Article 21 GDPR)
- Withdraw consent at any time with effect for the future (Article 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority for our company is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
https://www.lfd.niedersachsen.de/
For privacy-related enquiries, please contact aloha@magic-pls.de.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our website, technical services or applicable legal requirements.
The current version will be available on this page.