enigmania Duisburg logo

Privacy Policy

Duisburg

1. Introduction and general information

We take the protection of your personal data very seriously. Data is “processed” by us in accordance with the applicable statutory data protection provisions, in particular the European General Data Protection Regulation (GDPR) as well as the country-specific data protection provisions.

“Personal data” means any information relating to an identified or identifiable natural person. Below we inform you about the processing of your data, in particular about the nature, scope and purposes of the collection and use of your personal data as well as about your rights regarding data processing.

2. Party responsible for data processing

As the provider of our internet services, we are the party responsible for data processing. You can reach us at the contact details given below:

Anbieter: Enigmania 2.0 GmbH, Königstr. 39 im CityPalais, 47051 Duisburg

Telefon: 0203 – 369 93 925, E-Mail: duisburg@enigmania.de

3. Processing of your data

a) Visiting our web pages (server log files)

When you visit our website, the server stores data in so-called server log files that your internet browser automatically transmits to the server, in particular:

  • Date and time of accessing one of our web pages
  • Your browser type and the respective version of the browser
  • The operating system used
  • The page you last visited (referrer URL)
  • The amount of data transferred and the access status
  • Your IP address and the requesting provider

This data is processed in order to enable the use of the web pages you have accessed in the first place, for statistical purposes, to improve our internet offering and for security against unlawful cyber attacks. The legal basis is Art. 6 para. 1 lit. b) and f) GDPR.

b) Processing when using our services and/or offerings

Personal data is only processed by us if this is permitted by law or if you consent to the data processing. The mandatory data required can be seen from the contact or booking forms. We process your data on the legal basis of Art. 6 para. 1 lit. b) GDPR in order to fulfil a contract with you or to carry out pre-contractual measures.

For the fulfilment of the contract, your data may be passed on to service providers supporting us (technical service providers, shipping, payment processing, accounting) whom we have carefully selected. It is only passed on to other third parties if we are legally obliged to do so.

4. Use of cookies

We use so-called “cookies” on our website. Cookies are small text files that are sent from our web server to your browser during your visit and stored on your device for a limited time. You can determine yourself whether cookies can be set and retrieved through the settings in your browser.

5. Storage and deletion periods for personal data

If the purpose of processing your respectively required personal data ceases to apply, it is routinely deleted or blocked, unless you have consented to permanent storage. Statutory retention periods remain unaffected.

6. Your rights as a data subject

You have the following rights described below at any time:

  • Right to confirmation and information pursuant to Article 15 GDPR
  • Right to rectification pursuant to Article 16 GDPR
  • Right to erasure (“right to be forgotten”) pursuant to Article 17 GDPR
  • Right to restriction of processing pursuant to Article 18 GDPR
  • Right to data portability pursuant to Article 20 GDPR
  • Right pursuant to Article 22 GDPR not to be subject to a decision based solely on automated processing

Please send your request using the contact details given under point 2 of this privacy policy.

7. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6 para. 1 lit. e or f GDPR. If personal data is processed for direct marketing purposes, you have the right to object at any time.

8. Right to withdraw consent

You can withdraw consent under data protection law expressly given to us at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the withdrawal is not affected by the withdrawal.

9. Complaint to the supervisory authorities

If you are of the opinion that your data protection rights are being violated, you can contact the supervisory authority of your federal state or of the federal state in which our company is based.

10. Obligation to notify in the event of rectification, erasure or restriction

We notify all recipients to whom personal data has been disclosed of any rectification or erasure of the data or a restriction of processing pursuant to Article 16, 17 para. 1 and 18 GDPR, unless this proves impossible or involves disproportionate effort.

11. Provision of your personal data

We collect and process your personal data in particular for the fulfilment of a contract with you or for carrying out pre-contractual measures. If you do not provide us with any personal data, this has the consequence that we cannot conclude a contract with you and/or cannot answer your enquiries.

12. Automated decisions in individual cases including profiling

We do not use any automated decision-making – including profiling pursuant to Article 22 paras. 1 and 4 GDPR.

13. Data security

We use technical and organisational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons.

14. Questions / comments

You are welcome to address questions or comments about this privacy policy or about data protection in general to our contact details (point 2).

15. Use of tools and content from third-party providers

Google Analytics

For analysis purposes we use the web analysis service Google Analytics from Google Inc. on our website, with IP anonymisation activated. The legal basis is Art. 6 para. 1 lit. f) GDPR. Further information: https://www.google.de/intl/de/policies/terms/regional.html

YouTube videos

We embed videos from the “YouTube” service (YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA) on our website in the extended data protection mode. The legal basis is Art. 6 para. 1 lit. f) GDPR.

Facebook “Custom Audiences”

This website uses the remarketing function “Custom Audiences” from Facebook Inc. The data collected is anonymous for us. The legal basis is Art. 6 para. 1 lit. f) GDPR.

Instagram functions

This website uses functions and content of the Instagram service from the company Instagram Inc. The legal basis is Art. 6 para. 1 lit. f) GDPR.

Facebook plug-ins

We use plug-ins from Facebook Inc. on our web pages. A connection between your browser and Facebook is only established if you activate the function. The legal basis is Art. 6 para. 1 lit. f) GDPR.

Tripadvisor plugins

This website uses the plugin from the company TripAdvisor LLC to display customer reviews neutrally. The legal basis is Art. 6 para. 1 lit. f) GDPR.

16. Newsletter

To send our newsletter we use the MailChimp service from the company The Rocket Science Group, LLC. If you subscribe to our newsletter, your data is transmitted to Rocket servers in the USA. Upon initial registration, a confirmation email is sent using the double opt-in procedure. You can cancel the newsletter at any time. The legal basis is your consent (Art. 6 para. 1 lit. a) GDPR).

Version of the privacy policy: 23 May 2018

Note: Only the German version of this text is legally binding. This translation is provided for ease of understanding only.

Escape RoomsEscape Rooms
VouchersVouchersBookBook now