UK Privacy Policy

Fair Processing Notice for LOL Surprise

At MGA Entertainment (UK) Ltd, we respect your personal data. This Fair Processing Notice explains how we will use your personal data when your child uses the LOL Surprise website.

Our head office address is:

Regent Business Park
50 Presley Way
Crownhill
Milton Keynes
Buckinghamshire
MK8 0ES

The person with responsibility for Data Protection is Kristy Gouldsmith and she can be contacted by emailing gdpruk@mgae.com.

Collecting and using children’s information

Our website is intended to be used mainly by children. Whenever we collect personal information from a child, we only keep the information for the time we need it to provide a service or for the time it’s legally required to be kept on record.

We collect information on IP addresses using cookies. We may collect this information ourselves or ask a third party to process the data on our behalf. We use this data to analyse the performance of our website and to create anonymous reports.

What we do:

• use the IP address to determine city and country of the website user but not the precise location;

• to track which website pages a user visits or which website they came from; and

• retain user data for up to a maximum of 14 months.

What we don’t do:

• report on demographics (including age/gender) and/or user interest categories (affinity/in-market segments);

• target users with interest-based advertising or re-marketing campaigns; and

• benchmark against other companies including:

o benchmarking against channel groupings (display, social, paid search, etc.), location, device types

o benchmarking metrics such as session data, bounce rates, etc.

We will ask for consent for our use of cookies through a pop-up.

Do we use any automated decision making?

We do not use any automated decision making.

Who do we share your personal data with?

We share your data with our software/website providers.

Do we transfer your personal data outside of the EU or EEA?

Our head office is in the United States and customer data is transferred there for administrative purposes. This is a legitimate interest for us as an international business.

We use Standard Contractual Clauses as the data transfer safeguard. Standard Contractual Clauses were drafted by the EU Commission are lawful data transfer safeguard.

How long do we keep your personal data for?

We retain user data for up to a maximum of 14 months

Your rights as a data subject

You have rights in respect of our processing of your personal data which are:

• To access to your personal data and information about our processing of it. You also have the right to request a copy of your personal data (but we may need to remove information about other people).

• To rectify incorrect personal data that we are processing.

• To request that we erase your personal data if:

o we no longer need it;

o if we are processing your personal data by consent and you withdraw that consent;

o if we no longer have a legitimate ground to process your personal data; or

o we are processing your personal data unlawfully

• To object to our processing if it is by legitimate interest.

• To restrict our processing if it was by legitimate interest.

• To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out automated means.

If you want to exercise any of these rights, please contact us.

UK Privacy Policy

You are entering a movie themed play areaYou are entering a movie themed play area