privacy statement

1. Scope of application

This Privacy Policy explains to you the nature, scope and purposes of the collection and use of personal data on this website of Hidden Games and the associated sub-pages Hidden in Hamburg, Hidden in Braunschweig, Hidden in Hannover, Hidden in Zürich (hereinafter referred to collectively as “Hidden Games”).

2. Contact

Hidden Games, Hidden Industries GmbH, Sophienstraße 40, 38118 Braunschweig, or [email protected]

3. Contact details of the data protection officer

You can reach our data protection officer at: Data Protection Officer Hidden Games, Hidden Industries GmbH, Sophienstraße 40, 38118 Braunschweig, Germany, or [email protected].

4. Personal data

Personal data is information with the help of which a person can be identified, i.e. information that can be traced back to a person. This includes information and data such as your name, address or other postal address, telephone number or e-mail address. However, purely technical data that can be assigned to a person can also be regarded as personal data.

We store the following data:

  • Your name
  • address
  • Email Address
  • telephone number
  • booking date
  • time stamps
  • payment type

5. Automatic collection of access data/server log files

Each time you access the website, a series of technical data, which are personal data, are automatically collected.

These can be:

  • The IP address of the user
  • Name of the requested web page or file
  • Date and time of access
  • Transferred amount of data
  • Notification of successful retrieval
  • Browser type and version
  • Operating system of the user
  • User’s terminal device used, including MAC address
  • referrer URL (the previously visited website)
  • cookies

This information will not be merged with any other personally identifiable information that you actively provide to the Site.

The server log files with the above data are automatically deleted after 7 days.

6. Legal basis

The legal basis for the above data processing is:

With regard to the services you use for the execution of a contract with you, Art. 6 Para. 1 lit. b) DSGVO
For the fulfilment of legal obligations, Art. 6 para. 1 lit. c) DSGVO
In particular for statistical data and online identifiers Art. 6 para. 1 lit. f) of the EU Data Protection Basic Regulation (DSGVO). This statutory provision of permission permits the processing of personal data within the scope of the “legitimate interest” of the person responsible, unless your fundamental rights, freedoms or interests prevail. The data processing described serves to ensure the functionality of our website, to optimise our website and to ensure the security of our information technology systems. This is our legitimate interest.

7. Legitimate interests

When processing your data, we pursue the following legitimate interests:

  • Improvement of our offer
  • Analysis of the behaviour of users on the website (user data is not personalized, IP addresses are anonymized) to improve the user experience on the website and the acquisition of new customers.
  • Protection against misuse

8. Data sources

We receive the information described above from you when you enter it to complete a booking. In addition, we receive technical data such as cookies and a time stamp from your browser.

9. Storage period

We store your data,

– if you have consented to the processing at most until you revoke your consent,

– if we need the data for the execution of a contract, at the most as long as the contractual relationship with you exists or legal retention periods run,

– if we use the data on the basis of a justified interest, at the most as long as your interest in deletion or anonymisation does not prevail.

10. Purposes of use

We only collect personal data if and to the extent and for the purpose for which you voluntarily provide us with it, e.g. as part of a booking, and for related downstream business processes.

11. Data protection

We have taken extensive technical and organizational measures to protect your data against possible dangers such as unauthorized access, unauthorized disclosure, alteration or distribution, loss, destruction or misuse.

In order to protect your personal data from unauthorized access by third parties during transmission, we secure the data transmissions using SSL encryption if necessary. This is a standardised encryption procedure for online services, especially for the web.

12. Establishing contact

When contacting one of the Hidden Games locations (e.g. via contact form or e-mail), the user’s details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.

This data is processed solely for the purpose of processing the contact. By contacting Hidden Games, the user agrees that Hidden Games processes his data for this purpose. According to Art. 6 para. 1 lit. a DSGVO his consent is the legal basis for the processing. The user may revoke this consent at any time for the future. However, it will then no longer be possible to process the contact request.

If the purpose of establishing contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

The storage of your data beyond the processing of your enquiry in the event that follow-up questions arise is in our legitimate interest, which is also the legal basis for this storage (Art. 6 para. 1 lit. f DSGVO).

13. What is an IP address?

The IP address is the globally valid IP address at the time of allocation that is assigned to a device (such as your computer, smartphone, or tablet) either directly by an Internet provider or via a wireless router. The IP address, in its currently most common form (IPv4), consists of four digit blocks separated by dots. In most cases, as a private user you will not use a constant IP address, as this is only temporarily assigned to you by your provider (so-called “dynamic IP address”). In the case of a permanently assigned IP address (so-called “static IP address”), it is in principle possible to clearly assign the user data using this feature. Except for the purpose of tracking unauthorised access to our website, Hidden Games does not use this data to identify you personally, but only evaluates on an anonymous basis which of our websites are favoured, how many hits are made each day and the like.

14. Cookies

Cookies are small files that your browser stores on your device in a directory provided for this purpose. These cookies can be used, for example, to determine whether you have visited a website before. Most browsers automatically accept cookies. However, you can set your browser so that no cookies are saved or explicit consent is required before saving a cookie. You can also delete cookies that have already been set at any time. Please note that deactivating cookies may lead to restrictions in the use of our website.

We use cookies that ensure that the information from the previous step is stored in each step of the ordering process. In addition, as we test different versions of our ordering process, we store information about which version you have seen, for example to determine which ordering process is preferred by the end customer.

15. Web analysis

Like almost every website operator, we use analysis tools in the form of tracking software in order to determine the frequency of use and the number of users of our website. This website uses Google Analytics, a web analytics service provided by Google, Inc. (hereinafter referred to as “Google”). The information generated by Google Analytics about your use of this website will generally be transmitted to and stored by Google on servers in the United States. However, this website has activated the IP anonymisation function of Google Analytics, so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of Hidden Games, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to Hidden Games relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You can prevent the collection of data generated by Google Analytics and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
You can prevent Google Analytics from collecting data by clicking on the following link:

Click here if you don´t want to track this page

An opt-out cookie is set to prevent your data from being collected in the future when you visit this website. You can find more information on the terms of use and data protection at http://www.google.com/analytics/terms/de.html .

The legal basis for this processing of your data is Art. 6 Para. 1 lit. f) DSGVO (legitimate interest). Our legitimate interest lies in the analysis of the use of our website.

16. Recipient of personal data

The personal data collected by us will not be passed on to third parties or transmitted in any other way.

Excepted from this are the transmission of personal data to state institutions and authorities as well as private right holders on the basis of legal regulations or judicial or official decisions as well as the transmission to state institutions and authorities in the case of attacks on our legal assets for purposes of legal or criminal prosecution.

Also excluded are the service partners of Hidden Games, who require the transmission of data for order processing.

MANGOPAY SA

The MANGOPAY service is provided by MANGOPAY SA. For all payment methods (excluding PayPal) you will be redirected to the MANGOPAY website via a link. In order to use this service, MANGOPAY collects, stores and processes your personal data such as your name, address, telephone number and e-mail address as well as your credit card or bank account details. MANGOPAY alone is responsible for the protection and handling of the data collected by MANGOPAY. In this respect, the MANGOPAY Terms of Use, which you can access at www.mangopay.com, apply. You will find further information on the handling of your data in MANGOPAY’s data protection declaration, which can be accessed via the following link: www.mangopay.com

MANGOPAY SA, 10 boulevard Royal, L-2449 Luxembourg

Ameno GmbH

The company Ameno GmbH operates the booking system Hidden Booking Tool, which is used for the booking process of Escape Rooms. The data you enter during the booking process is exchanged to process the booking.

At the Martinikirche 4, 38100 Braunschweig, Germany

Ameno’s privacy policy can be found at: https://www.ameno.de/haftungsbeschraenkungalt

ThInG room gUG (limited liability)

The company DenkRaum operates an Escape Room from Hidden Games. For the handling of the booking process necessary data is exchanged.

Wilhelmstraße 1, 38100 Braunschweig, Germany

The privacy policy of DenkRaum gGmbH can be found at:
https://denkraum-braunschweig.de/datenschutz.html

17 Rights of the data subject

Right to information, correction, revocation, complaint, deletion and blocking.

  • You have the right to request information about whether and which personal data of yours are processed by us. You also have the right to demand that your personal data be corrected or completed.
  • Under certain circumstances you have the right to demand that your personal data be deleted.
  • Under certain circumstances you have the right to request that the processing of your personal data be restricted.
  • You can revoke your consent to the processing and use of your data in whole or in part at any time with effect for the future.
  • You have the right to receive your personal data in a common, structured and machine-readable format.
  • You can also contact our data protection officer in writing if you have any questions, comments, complaints or requests for information in connection with our declaration on data protection and the processing of your personal data.
  • You also have the right to complain to the competent supervisory authority if you are of the opinion that the processing of your personal data violates the statutory provisions.