Your data when you contact us.

The information in your message.

The form asks for your company name and email address. These fields are required to submit the form. The message is optional. You can use it to explain your enquiry; please avoid including sensitive information or information about other people that is not needed for your request.

Newsletter subscription is optional and separate from your contact enquiry. It uses a dedicated checkbox that is unchecked by default. Your choice and the information needed to record it are stored with your email address. You can unsubscribe at any time using the link in the emails.

How your request is handled.

Data controller

Bulb Ventures, a French SASU operating the Magic website, 25 rue Brochant, 75017 Paris, France. For questions about your personal data: contact@magicdata.fr.

Purpose

To understand and answer your enquiry and follow up on our exchanges; to protect the website and form against abuse; and to send the newsletter only if you choose to subscribe.

Legal basis

Handling enquiries and protecting the website are based on our legitimate interests in responding to people who contact us and preventing abuse. Where a person requests steps needed to enter into a contract in their own name, those steps are based on pre-contractual measures taken at their request. Sending the newsletter is based on your consent, which you can withdraw at any time without affecting the lawfulness of earlier processing.

Recipients and transfers

Authorised people at Bulb Ventures can access the information needed to handle your enquiry. Brevo manages the form and email communications; Google email services receive enquiries and enable us to reply. Google Firebase Hosting delivers the website, and Cloudflare Turnstile provides the form’s bot protection. These last two services process technical connection data for their respective functions; Turnstile does not receive the contents of the form fields.Some processing by these providers may take place outside the European Economic Area. The applicable transfer mechanisms, including an adequacy decision or European Commission standard contractual clauses, are described in their data protection terms. You can request information about the applicable safeguards at contact@magicdata.fr.

Retention

Enquiries that do not lead to a customer relationship and their related correspondence are retained for no more than twelve months after the last exchange. If a customer relationship begins, the data needed to manage it is subject to the periods applicable to the contract and the associated legal obligations.Data used for the newsletter is retained until you unsubscribe or, at the latest, after twelve months without a further expression of interest from you. The minimum information needed to honour an objection to emails is kept separately for three years, solely for that purpose.

Browsing the website.

The website is delivered through Google Firebase Hosting. Visiting the website and loading the Brevo form transmits technical data, including the IP address and browser information, to the providers delivering these services. The website’s code does not include advertising or audience-measurement tools.

The form uses Cloudflare Turnstile to distinguish visitors from bots and limit abusive submissions. Cloudflare analyses technical browser signals without accessing the contents of the form fields. Cloudflare also states that it uses these signals to improve bot detection under its own responsibility. Its dedicated notice explains this processing: https://www.cloudflare.com/turnstile-privacy-policy/.

The twelve-month period for contact enquiries does not apply to providers’ technical logs. Google states that Firebase Hosting retains IP addresses for a few months to detect abuse and analyse hosting usage. The corresponding information is available at https://firebase.google.com/support/privacy.

Your requests about your data.

Subject to the conditions in applicable law, you can request access to, correction or deletion of your data and restriction of its processing. You can object to processing based on legitimate interests for reasons relating to your particular situation, and you can object to direct marketing at any time. Data portability applies to automated processing based on your consent or a contract where its conditions are met.

To exercise your rights, write to contact@magicdata.fr. We normally reply within one month; an extension may be needed in the circumstances allowed by law, and we will let you know. You can withdraw newsletter consent using the unsubscribe link in each email. You can also lodge a complaint with the French data protection authority, the CNIL, at www.cnil.fr.