Terms and Conditions Legal Notice Privacy Policy

Privacy Policy

Last updated: May 2026

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR) is:

Andreas Braun
Sole proprietor trading as "The Magic Love"
Theobaldgasse 7/15
1060 Vienna
Austria
E-mail: [email protected]
Website: https://the-magic.love


2. General Information

The protection of your personal data is important to us.

We process your data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG).


3. Collection and Processing of Personal Data

We process personal data that you voluntarily provide to us, in particular:

  • first name and last name
  • e-mail address
  • telephone number (if provided)
  • billing and payment data
  • date of birth (if provided)
  • information about personal, emotional or spiritual matters that you share with us
  • order and contract data
  • communication data from e-mails or contact forms

The processing is carried out to perform contracts, provide customer support, provide and personalize our services, and communicate with you.

Please note that the matters you share with us may contain sensitive information. Please provide us only with information whose processing you expressly want us to carry out.


4. Legal Bases

The processing is carried out on the basis of:

  • Art. 6(1)(a) GDPR (consent)
  • Art. 6(1)(b) GDPR (performance of a contract)
  • Art. 6(1)(c) GDPR (legal obligations)
  • Art. 6(1)(f) GDPR (legitimate interest, in particular in the secure, functional and economically viable provision and analysis of our offering)

5. Orders and Payment Processing

To process orders and payments, we use external payment service providers. Depending on the payment method selected, the following data in particular may be transmitted to the relevant provider: name, billing address, e-mail address, payment amount and payment information.

Payment service providers used:

  • Stripe – Stripe Payments Europe, Ltd., Ireland (and Stripe, Inc., USA)
  • PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

The processing is carried out to perform the contract (Art. 6(1)(b) GDPR). The privacy provisions of the respective payment provider also apply. The actual payment data (e.g. credit card numbers) are processed directly by the payment service provider and are not fully visible to us.


6. E-Mail Communications and Newsletter

For sending e-mails (e.g. order confirmations, instructions relating to your order, newsletters and offers) and for managing contact data, we use the service Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France).

For this purpose, your first name, last name, e-mail address and information about the status of your order or matter in particular are transmitted to Brevo and stored there.

If you consent to receiving marketing e-mails, we use your e-mail address to provide information about products, services and offers (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. Each of these e-mails contains an unsubscribe link.


7. Use of AI-Assisted Systems

To process your requests and to create and personalize content, we use technical systems supported by artificial intelligence (AI).

In doing so, the information you provide – in particular your name as well as the content of your messages and the matters you describe – may be transmitted to external service providers and processed there using AI-assisted methods in order to prepare and personalize content.

Service used: kie.ai (AI-assisted text processing, including on the basis of models such as Google Gemini). This may involve a transfer to third countries (see section 14).

A solely automated decision with legal effect within the meaning of Art. 22 GDPR does not take place; all content is subject to human editorial responsibility. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient and high-quality processing).


8. Contacting Us

If you contact us by e-mail or contact form, your information is stored to handle your request.

The data is not disclosed to third parties without your consent, unless this is necessary for contract performance or there is a legal obligation.


9. Hosting and Technical Data

When you visit our website, technical data is collected automatically:

  • IP address
  • browser type
  • operating system
  • referrer URL
  • date and time of access

This data is used for system security, error analysis and the technical provision of the website (Art. 6(1)(f) GDPR).


10. Cookies

Our website uses cookies and similar technologies (e.g. local storage and tracking IDs).

Cookies are used to

  • provide the website technically,
  • store settings and session information,
  • measure use and reach statistically, and
  • measure and optimize marketing and conversion activities.

Strictly necessary cookies are required to operate the website (Art. 6(1)(f) GDPR). Cookies and technologies for analytics, reach measurement and marketing purposes are used on the basis of our legitimate interest (Art. 6(1)(f) GDPR). You can object to the storage of cookies at any time through your browser settings, delete cookies that have already been set, and disable the automatic setting of cookies.


11. Web Analytics and Tracking

To analyze and improve our offering, we use the following services:

  • Microsoft Clarity (Microsoft Corporation, USA) – analysis of website use, including the recording of sessions, clicks, scrolling and mouse movements ("heatmaps"), in order to improve usability.
  • Proprietary tracking via our tracking script (loaded through start.magischeliebe.com) to measure access, visitor sources and conversions.

If additionally activated in the future, further services such as Google Analytics, Google Ads conversion tracking or the Meta Pixel may be used.

The legal basis for this processing is our legitimate interest in the analysis, optimization and economic promotion of our offering (Art. 6(1)(f) GDPR). You can object to this through your browser settings as well as through the opt-out options of the respective providers.


12. Fonts (Google Fonts)

To display fonts consistently, this website uses so-called web fonts provided by Google (Google Ireland Limited and/or Google LLC, USA). When a page is loaded, your browser retrieves the required fonts from Google servers. In doing so, your IP address is transmitted to Google.

The legal basis is our legitimate interest in a consistent and appealing presentation of our offering (Art. 6(1)(f) GDPR).


13. Service Providers / Processors

To provide our services, we use carefully selected service providers with whom – where required – data processing agreements are in place:

  • Brevo / Sendinblue SAS (France) – e-mail dispatch and management of contact data
  • Stripe Payments Europe, Ltd. (Ireland / USA) – payment processing
  • PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) – payment processing
  • kie.ai – AI-assisted text generation
  • n8n (workflow automation, operated via influencer-flow.com) – automation of internal processing operations
  • Microsoft Corporation (USA) – Microsoft Clarity (web analytics)
  • Google Ireland Limited / Google LLC (USA) – provision of fonts (Google Fonts)

14. International Transfers of Personal Data

In connection with the services listed above, personal data may be transferred to countries outside the EU or the EEA (in particular to the USA).

Such a transfer is only made insofar as an appropriate level of data protection is ensured, for example on the basis of an adequacy decision of the European Commission (e.g. the EU-US Data Privacy Framework) or appropriate safeguards such as the Standard Contractual Clauses of the European Commission (Art. 44 et seq. GDPR).


15. Retention Periods

Personal data is stored only for as long as is necessary for the respective purposes or as long as statutory retention obligations exist.

Tax- and invoice-relevant data is retained in accordance with the statutory retention periods (in Austria generally seven years pursuant to § 132 BAO).


16. Your Rights

You have the right at any time to:

  • access
  • rectification
  • erasure
  • restriction of processing
  • data portability
  • object to processing
  • withdraw consent given

Requests can be sent to [email protected].


17. Right to Lodge a Complaint

If you believe that the processing of your data violates data protection law, you may lodge a complaint with the competent data protection authority.

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
https://www.dsb.gv.at


18. Data Security

We use technical and organizational security measures to protect personal data against loss, misuse or unauthorized access. Data transmission on our website is encrypted (SSL/TLS).


19. Changes

We reserve the right to amend this Privacy Policy if this becomes necessary due to changes in the law or technical developments.

The current version is available on our website.

Last updated: May 2026