Legal
Privacy Policy
1. Privacy at a glance
General information
The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data means any information that can be used to identify you personally. For detailed information about data protection, please read the privacy policy below.
Data collection on our website
Who is responsible for collecting data on this website?
The website operator is responsible for processing data on this website. You can find the operator's contact details in this website's legal notice.
How do we collect your data?
Some data is collected when you provide it to us, for example by entering information in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data, such as your browser, operating system, or the time you accessed a page. This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some data is collected to ensure that the website functions correctly. Other data may be used to analyze how you use the website.
What rights do you have regarding your data?
You have the right to receive information, free of charge and at any time, about the source, recipients, and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked, or deleted. You can contact us at the address in the legal notice at any time about these rights or other data protection questions. You also have the right to lodge a complaint with the competent supervisory authority.
Analytics tools and third-party tools
When you visit our website, your browsing behavior may be analyzed statistically, primarily using cookies and analytics software. This analysis is generally anonymous; your browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Further details are provided in the privacy policy below.
You may object to this analysis. This privacy policy explains how to do so.
2. General and mandatory information
Privacy Policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.
Various types of personal data are collected when you use this website. Personal data means information that can identify you personally. This privacy policy explains what data we collect, what we use it for, and how and why we process it.
Please note that transmitting data over the internet, for example by email, may involve security vulnerabilities. It is not possible to protect data completely against access by third parties.
Information about the controller
The controller responsible for processing data on this website is:
Escape Room Rosenheim UG Münchener Str. 14 83022 Rosenheim
Phone: 08031 - 7969360 Email: info@escaperoom-rosenheim.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names and email addresses.
Withdrawing your consent to data processing
Many data processing activities require your express consent. You may withdraw consent you have already given at any time by sending us an informal email. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.
Right to lodge a complaint with the competent supervisory authority
If data protection law is violated, the person affected has the right to lodge a complaint with the competent supervisory authority. For data protection matters, this is the state data protection commissioner of the German federal state in which our company is based. A list of data protection commissioners and their contact details is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_linksnode. html.
Right to data portability
You have the right to receive data that we process by automated means on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request direct transfer to another controller, we will do so only where technically feasible.
Access, blocking, and deletion
Within the scope of applicable law, you have the right at any time to receive information free of charge about your stored personal data, its source and recipients, and the purpose of processing. Where applicable, you also have the right to have this data corrected, blocked, or deleted. You can contact us at the address in the legal notice at any time about these rights or other questions regarding personal data.
Objection to promotional emails
We hereby object to the use of contact details published to fulfill legal notice requirements for sending advertising and information materials that have not been expressly requested. The website operators expressly reserve the right to take legal action against unsolicited advertising, including spam emails.
3. Data collection on our website
Cookies
Some pages use cookies. Cookies do not harm your computer and do not contain viruses. They help make our services more user-friendly, effective, and secure. Cookies are small text files stored on your computer by your browser.
Most of the cookies we use are session cookies, which are deleted automatically when your visit ends. Other cookies remain on your device until you delete them. These cookies allow us to recognize your browser when you return.
You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, reject cookies in certain cases or altogether, and delete cookies automatically when you close your browser. Disabling cookies may limit this website's functionality.
Cookies required for electronic communications or to provide specific functions you request, such as a shopping cart, are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies to provide services that are technically reliable and optimized. Other cookies, such as those used to analyze browsing behavior, are addressed separately in this privacy policy.
Server log files
The hosting provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:
- Browser type and version
- Operating system
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with data from other sources.
The legal basis for processing is Article 6(1)(f) of the GDPR, which permits processing data for the performance of a contract or steps taken before entering into a contract.
Contact form
If you send an inquiry through our contact form, we store the information you enter, including your contact details, to handle the inquiry and any follow-up questions. We do not share this data without your consent.
Data entered in the contact form is therefore processed exclusively on the basis of your consent under Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by sending us an informal email. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
We retain the data you enter in the contact form until you request its deletion, withdraw your consent to its storage, or the purpose of storage no longer applies, for example after your inquiry has been fully handled. Mandatory legal provisions, particularly retention periods, remain unaffected.
Processing customer and contract data
We collect, process, and use personal data only to the extent necessary to establish, define, or modify the legal relationship with you (customer account data). The legal basis is Article 6(1)(b) of the GDPR, which permits processing for the performance of a contract or steps taken before entering into a contract. We collect, process, and use personal data about the use of our website (usage data) only where necessary to enable use of the service or to bill for it.
Customer data is deleted after the order is completed or the business relationship ends. Statutory retention periods remain unaffected.
Data transfers when entering into contracts for services and digital content
We transfer personal data to third parties only where necessary to perform the contract, for example to the financial institution responsible for processing payments.
No further transfer takes place unless you have expressly consented to it. We do not share your data with third parties, for example for advertising purposes, without your express consent.
The legal basis for processing is Article 6(1)(b) of the GDPR, which permits processing data for the performance of a contract or steps taken before entering into a contract.
4. Analytics tools and advertising
Google Analytics
This website uses features of the Google Analytics web analytics service, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies—text files stored on your computer that enable analysis of how you use the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the United States.
Google Analytics cookies are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
IP anonymization
We have enabled IP anonymization on this website. Google therefore truncates your IP address within European Union member states or other states party to the Agreement on the European Economic Area before transmitting it to the United States. Only in exceptional cases is the full IP address sent to a Google server in the United States and truncated there. On behalf of this website's operator, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use. The IP address transmitted by your browser through Google Analytics is not combined with other Google data.
Browser add-on
You can prevent cookies from being stored by adjusting your browser settings. Please note that you may then be unable to use all of this website's features to their full extent. You can also prevent Google from collecting data generated by the cookie relating to your website use, including your IP address, and from processing that data by downloading and installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout?hl=de.
Objecting to data collection
You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics.
For more information about how Google Analytics handles user data, see Google's privacy information at: https://support.google.com/analytics/answer/6004245?hl=de.
Data processing agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics demographics
This website uses Google Analytics' demographics feature. It allows reports to be generated containing information about visitors' age, gender, and interests. This data comes from Google's interest-based advertising and visitor data supplied by third parties. It cannot be attributed to a specific individual. You can disable this feature at any time in your Google account's ad settings, or prevent Google Analytics from collecting your data altogether as described under "Objecting to data collection."
Google AdWords and Google conversion tracking
This website uses Google AdWords, an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
We use conversion tracking as part of Google AdWords. When you click an ad placed by Google, a conversion-tracking cookie is set. Cookies are small text files stored on the user's computer by the browser. These cookies expire after 30 days and are not used to identify users personally. If you visit certain pages of this website before the cookie expires, Google and we can recognize that you clicked the ad and were redirected to that page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across AdWords customers' websites. Information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have chosen conversion tracking. Customers learn the total number of users who clicked their ad and were redirected to a page containing a conversion-tracking tag. They do not receive information that personally identifies users. If you do not want to take part in tracking, you can object by disabling the Google conversion-tracking cookie in your browser's user settings. You will then not be included in conversion-tracking statistics.
Conversion cookies are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
For more information about Google AdWords and Google conversion tracking, see Google's privacy policy at: https://www.google.de/policies/privacy/.
You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, reject cookies in certain cases or altogether, and delete cookies automatically when you close your browser. Disabling cookies may limit this website's functionality.
Facebook Pixel
Our website uses the Facebook visitor action pixel for conversion measurement, provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
This allows visitor behavior to be tracked after a person clicks a Facebook ad and is redirected to the advertiser's website. It enables the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and helps optimize future advertising.
The data collected is anonymous to us as the website operator; we cannot identify individual users from it. However, Facebook stores and processes the data, allowing it to be linked to the relevant user profile and used for Facebook's own advertising purposes in accordance with its data policy. This enables Facebook to display ads on Facebook and elsewhere. We, as the website operator, have no influence over this use of the data.
For further information about protecting your privacy, see Facebook's privacy information: https://www.facebook.com/about/privacy/.
You can also disable the "Custom Audiences" remarketing feature in your ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do so.
If you do not have a Facebook account, you can disable Facebook's interest-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
5. Newsletter
Newsletter data
To receive the newsletter offered on this website, you must provide an email address and information allowing us to verify that you own the address and consent to receiving the newsletter. No other data is collected unless you provide it voluntarily. We use this data solely to send the requested information and do not share it with third parties.
Data entered in the newsletter signup form is processed exclusively on the basis of your consent under Article 6(1)(a) of the GDPR. You may withdraw your consent to storing your data and email address and using them to send the newsletter at any time, for example by using the newsletter's unsubscribe link. Withdrawal does not affect the lawfulness of processing already carried out.
We retain the data you provide for your newsletter subscription until you unsubscribe, then delete it. Data stored for other purposes, such as email addresses for a members' area, remains unaffected.
MailChimp
This website uses MailChimp to send newsletters. The provider is The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service used, among other things, to organize and analyze newsletter distribution. Data you enter to subscribe to the newsletter, such as your email address, is stored on MailChimp's servers in the United States.
MailChimp is certified under the EU–US Privacy Shield. The Privacy Shield is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards in the United States.
MailChimp allows us to analyze our newsletter campaigns. When you open an email sent through MailChimp, a file embedded in the email, known as a web beacon, connects to MailChimp's servers in the United States. This lets us determine whether a newsletter was opened and which links were clicked. Technical information, such as the time of access, IP address, browser type, and operating system, is also collected. This information cannot be attributed to the individual newsletter recipient. It is used solely for statistical analysis of newsletter campaigns. The results may be used to tailor future newsletters more closely to recipients' interests.
If you do not want MailChimp to analyze your activity, you must unsubscribe from the newsletter. Each newsletter contains a link for this purpose. You may also unsubscribe directly on the website.
Processing is based on your consent under Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by unsubscribing from the newsletter. Withdrawal does not affect the lawfulness of processing already carried out.
We retain the data you provide for your newsletter subscription until you unsubscribe. It is then deleted from both our servers and MailChimp's servers. Data stored for other purposes, such as email addresses for a members' area, remains unaffected.
For further details, see MailChimp's terms and privacy information at: https://mailchimp.com/legal/terms/.
6. Plugins and tools
YouTube
Our website uses plugins from YouTube, a website operated by Google. The provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit a page containing a YouTube plugin, a connection is established with YouTube's servers. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube to present our online services in an appealing way. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
For more information about how YouTube handles user data, see its privacy policy at: https://www.google.de/intl/de/policies/privacy.
Google Web Fonts
This website uses web fonts provided by Google to display typefaces consistently. When you open a page, your browser loads the required web fonts into its cache so text and fonts are displayed correctly.
To do this, your browser must connect to Google's servers. Google thereby learns that our website has been accessed from your IP address. We use Google Web Fonts to present our online services consistently and attractively. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
If your browser does not support web fonts, a standard font from your computer is used.
For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google's privacy policy at https://www.google.com/policies/privacy/.
Google Maps
This website uses the Google Maps mapping service through an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Using Google Maps requires your IP address to be stored. This information is generally transmitted to and stored on a Google server in the United States. The operator of this website has no control over this data transfer.
We use Google Maps to present our online services attractively and make the locations listed on our website easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
For more information about how Google handles user data, see its privacy policy at: https://www.google.de/intl/de/policies/privacy/.
7. Payment providers
PayPal
Our website offers payment through PayPal, among other methods. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg ("PayPal").
If you choose to pay through PayPal, the payment data you enter is transmitted to PayPal.
Your data is transferred to PayPal on the basis of Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing for the performance of a contract). You may withdraw your consent to data processing at any time. Withdrawal does not affect the validity of processing carried out in the past.
Sofortüberweisung (instant bank transfer)
Our website offers payment by Sofortüberweisung, among other methods. This payment service is provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany ("Sofort GmbH").
Sofortüberweisung provides us with a payment confirmation from Sofort GmbH in real time, allowing us to begin fulfilling our obligations immediately.
If you choose Sofortüberweisung, you transmit your PIN and a valid transaction authentication number (TAN) to Sofort GmbH, allowing it to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and transfers the payment to us using the TAN you provided. It then immediately sends us a transaction confirmation. After login, your transactions, overdraft credit limit, and the existence and balances of other accounts are also checked automatically.
In addition to your PIN and TAN, the payment information you enter and personal information about you are transmitted to Sofort GmbH. This includes your first and last name, address, telephone number(s), email address, IP address, and any other information needed to process the payment. This data transfer is necessary to establish your identity conclusively and prevent attempted fraud.
Your data is transferred to Sofort GmbH on the basis of Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing for the performance of a contract). You may withdraw your consent to data processing at any time. Withdrawal does not affect the validity of processing carried out in the past.
For details about paying with Sofortüberweisung, see https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.