|

Privacy policy

With this privacy policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to as "data"). Personal data are all data that have a personal reference to you, e.g. name, address, email address or your user behavior. The data protection declaration applies to all data processing operations carried out by us both within the scope of our core activities and for the online media provided by us.

Who is responsible for data processing at our company

Responsible for data processing is:

Klooz, Dominik Michael; Klooz, Marc-Philip GbR
Dominik Klooz
Gartenstr. 60
76135 Karlsruhe
Germany
+49 (0) 711 96896574
info@escapeverse.de
https://www.escapeverse.de/impressum

Processing of your data within the scope of the core activity of our company

If you are our customer or business partner or are interested in our services, the type, scope and purpose of the processing of your data depends on the contractual or pre-contractual relationship existing between us. In this sense, the data processed by us includes all those data that are or were provided by you for the purpose of using the contractual or pre-contractual services and that are required to process your inquiry or the contract concluded between us. Unless otherwise stated in the further notes to this data protection declaration, the processing of your data and its transfer to third parties is limited to those data that are necessary and expedient to answer your inquiries and/or to fulfill the contract concluded between you and us, to protect our rights and to fulfill legal obligations. We will inform you which data is required for this before or in the course of data collection. Insofar as we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Data concerned:

  • Inventory data (e.g. names, addresses)
  • Payment data (e.g. bank details, invoices)
  • Contact data (e.g. email address, telephone number, postal address)
  • Contract data (e.g. subject matter of the contract, duration of the contract)

Affected persons: Interested parties, business and contractual partners

Processing Purpose: Handling contractual services, communication as well as responding to contact requests, office and organizational procedures.

Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR. Please note that, in addition to the regulations of the GDPR, the national data protection regulations may apply in your country or in our country of residence.

Your rights according to the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can exercise at any time by contacting the responsible person named in section 1. of this privacy policy:

  • Right to information: You have the right to request information from us about whether and what data we process from you.
  • Right of rectification: You have the right to request the correction of inaccurate or completion of incomplete data.
  • Right to deletion: You have the right to request the deletion of your data.
  • Right to Restriction: In certain cases, you have the right to request that we process your data only in a restricted manner.
  • Right to data portability: You have the right to request that we transfer your data to you or to another responsible person in a structured, common and machine-readable format.
  • Right of appeal: You have the right to complain to a supervisory authority. The supervisory authority of your usual place of residence, your workplace or our company headquarters is responsible.

Right of withdrawal

You have the right to revoke your consent to data processing at any time.

Right of objection

You have the right to object at any time to the processing of your data, which we base on our legitimate interest according to Art. 6 (1) lit. f GDPR. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons worthy of protection for the data processing outweigh your interests and rights.

Notwithstanding the foregoing, you have the right to object at any time to the processing of your personal data for the purposes of advertising and data analysis.

Please address your objection to the contact address of the responsible person indicated above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that - unless otherwise stated in the individual data protection notices of this data protection declaration - we delete your data,

  • if the purpose of the data processing has ceased to exist and thus the respective legal basis stated in the individual data protection notices no longer exists, for example:
    • after termination of the contractual or member relationship existing between us (Art. 6 para. 1 lit. a GDPR) or
    • after our legitimate interest in the further processing or storage of your data has ceased to exist (Art. 6 para. 1 lit. f GDPR),
  • if you exercise your right of revocation and no other legal basis for processing within the meaning of Art. 6 (1) lit. b-f GDPR applies,
  • if you exercise your right to object and there are no compelling reasons worthy of protection against the deletion.

If, however, we still need to retain (certain parts of) your data for other purposes, for example because tax retention periods (generally 6 years for business correspondence or 10 years for accounting records) or the assertion, exercise or defense of legal claims arising from contractual relationships (up to four years) make this necessary, or if the data is needed to protect the rights of another natural person or legal entity, we will delete (that part of) your data only after these periods have expired. However, until the expiration of these periods, we limit the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are placed and stored on the terminal device you are using. Cookies are primarily used to exchange information between the terminal device you are using and our website. This includes, among other things, the language settings on a website, the login status or where a video was watched.

Two types of cookies are used when you visit our websites:

  • Temporary cookies (session cookies): These store a so-called session ID, which can be used to assign various requests from your browser to the joint session. The session cookies are deleted when you log out or close your browser.
  • Permanent cookies: Permanent cookies remain stored even after you close your browser. This allows our website to recognize your computer again when you return to our website. For example, information on language settings or log-in information is stored in these cookies.

In addition to the above classification, cookies can also be distinguished in terms of their purpose. We only use necessary cookies on our website:

  • Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, to store logins or shopping carts for the duration of your session, or cookies that are set for security reasons.

Data concerned:

  • Usage data (e.g. access times, language settings)

Affected persons: Users of our online offers

Processing Purpose: Displaying our Internet pages, ensuring the operation of our Internet pages

Legal basis:

Legitimate interest, Art. 6 para. 1 lit. f GDPR

If we do not obtain your consent to the setting of cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular the content and functions. You can object to the use of cookies set by us in the context of our legitimate interest via the security settings of your browser. There you have the option of specifying whether you do not accept cookies from the outset or only on request, or whether you specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Consent, Art. 6 para. 1 lit. a GDPR

If we ask you before your visit to our website to set certain cookies on your terminal device and you consent to this, the consent you give is the legal basis. As part of the consent, we will inform you about which cookies we set in detail. If you do not give this consent, we will only set the so-called technically necessary cookies that are required for the proper operation of our website and its display in your browser. If you have consented to the setting of cookies, you have the option to revoke your consent at any time.

Webhosting

To maintain our Internet pages, we use a provider on whose server our Internet pages are stored and made available for retrieval on the Internet (hosting). In this context, the provider may process all data transmitted via the browser used by you, which is generated during the use of our Internet pages. This includes, in particular, your IP address, which the provider needs to deliver our online offer to the browser you use, as well as all entries you make on our website. In addition, the provider used by us can collect

  • the date and time of access to our website
  • time zone difference from Greenwich Mean Time (GMT)
  • access status (HTTP status)
  • the amount of data transferred
  • the Internet service provider of the accessing system
  • the type of browser you are using and its version
  • the operating system you are using
  • the website from which you may have accessed our website
  • the pages or sub-pages that you visit on our website.

The aforementioned data is stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our website.

Data concerned:

  • Content data (e.g. posts, photos, videos)
  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address)

Affected persons: Users of our website

Processing Purpose: Displaying our Internet pages, ensuring the operation of our Internet pages

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web host(s) contracted by us:

Serverprofis GmbH

Service provider: Serverprofis GmbH
Mondstr. 2-4
85622 Feldkirchen
Germany
Website: https://www.serverprofis.de
Privacy Policy: https://www.serverprofis.de/datenschutz/

Contact

If you contact us via email, social media, telephone, mail, our contact form or otherwise and in doing so provide us with personal data such as your name, telephone number or email address, or provide further information about yourself or your request, we will process this data in order to respond to your inquiry within the scope of the pre-contractual or contractual relationship existing between us.

Data concerned:

  • Inventory data (e.g. names, addresses)
  • Contact data (e.g. email address, telephone number, postal address)
  • Content data (texts, photos, videos)
  • Contract data (e.g. subject matter of the contract, duration of the contract)

Affected persons: Interested parties, customers, business and contractual partners

Processing Purpose: Communication as well as responding to contact requests, office and organizational procedures.

Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your comments or reviews

You have the option of commenting on our contributions, expressing your opinion or posting content in the designated areas of our website. Since we may be held liable for infringing content of your comment (insult, defamatory criticism, incitement of the people, prohibited depiction of violence, etc.), we check your comments before they are published and reserve the right to delete inappropriate comments.

Legal basis: Art. 6 para. 1 lit. f GDPR

Data concerned:

  • Inventory data (e.g. names, addresses)
  • Content data (e.g. posts, photos, videos)
  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address)

Processing Purpose: Performance of contractual obligations, communication and handling of inquiries, obtaining feedback, security measures.

Processing of your data when placing an order in our online shop

If you place orders via our online shop, we use the information you provide during the ordering process to handle your order. This includes in particular your name, your address and electronic contact details, information on the handling of the payment process and the details of your specific order. We will inform you in detail which data we require during the ordering process.

If it is necessary for the fulfillment of the contract concluded between us, for the protection of your vital interests or due to legal provisions, we will transfer your data to third parties, such as payment service providers for the purpose of payment processing or our tax advisor, in compliance with your rights. Insofar as we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Data concerned:

  • Inventory data (e.g. names, addresses)
  • Payment data (e.g. bank details, invoices)
  • Contact data (e.g. email address, telephone number, postal address)
  • Contract data (e.g. subject matter of the contract, duration of the contract)
  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address)

Affected persons: Customers, interested parties, business and contractual partners

Processing Purpose: Processing of orders, communication and marketing, if applicable, as well as responding to inquiries, data security, office and organizational procedures.

Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Payment service provider

In accordance with our legal obligations or because of our legitimate interests in efficient, secure and customer-oriented payment processing, persons who have concluded a contract or other legal relationship with us may use banks and credit institutions as well as other payment service providers for payment. The payment service providers offered by us process inventory data in this context, including name, address or bank data such as account/credit card number, passwords, TANs, verification numbers as well as information on the concluded contract and information on the recipient of the payment.

The data collected in this context is necessary to enable the payment service provider to process the payment. Only the payment service provider commissioned by us collects and processes this personal information. At no time do we receive information about your account or credit card details. We are informed by our payment service provider whether our customer's payment has been received or not. It is possible that our payment service providers forward the data of our customers to credit bureaus in order to be able to check the identity as well as the creditworthiness of the payer. In this respect, we refer to the privacy policy and general terms and conditions (GTC) of our payment service providers.

The terms and conditions and privacy policy of the respective payment service provider apply. You will find this information on the website of the service provider concerned or in the transaction application. For further information and for the assertion of your rights regarding revocation and information, we refer to the provisions of the respective service provider.

Data concerned:

  • Inventory data (e.g. name, address),
  • Usage data (e.g. websites visited, interest in certain topics, times of access),
  • Payment data (e.g. bank details, invoices, payment history),
  • Transaction data (e.g. term, customer category, subject of contract),
  • Communication and metadata (e.g. IP address, information about the device or computer system)

Processing Purpose: Effective, secure as well as customer-oriented payment offers (service) as well as processing of payments according to contractual agreement

Legal basis: Contract fulfillment and fulfillment of pre-contractual requests, Art. 6 para. 1 lit. b GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR

Revocation options: You may revoke your consent to the use of personal data at any time vis-à-vis the respective payment service provider. Despite revocation, the payment service provider may still be entitled to process, use and transmit the personal data that is absolutely necessary for processing the payment in accordance with the contract. With regard to the storage and timely deletion of personal data, we refer to the respective data protection provisions of the payment service provider.

We use the following payment service providers:

PayPal

Service provider: PayPal (Europe) S.à.r.l. et Cie., S.C.A., 22-24 Boulevard Royal, 2449 Luxemburg
Website: https://www.paypal.com/de/webapps/mpp/home
Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

Newsletter

We send out a newsletter at irregular intervals to inform our customers, business partners and interested parties about our offers and related news. You have the option of registering for our newsletter on our website and agreeing to receive the newsletter as part of the registration process. If you register for our newsletter, it is obligatory to provide your email address. We store the email address in order to be able to send you the newsletter. As soon as a registration for our newsletter is made, you will receive a confirmation email to the email address provided during registration in the so-called double opt-in procedure. This email contains a link. When you click on this link, you confirm that you would like to receive the newsletter. In this way, we ensure that your email address has not been misused by a third party during registration. For the same reason, we store the date and time of registration. We do not pass on the aforementioned data to third parties.

Data concerned:

  • Content data (e.g. posts, photos, videos)
  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address)

Affected persons: Users of our website

Processing Purpose: Playing out our Internet pages, ensuring the operation of our Internet pages

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Deletion: The deletion of the email address takes place either if you have not clicked on the confirmation link 1 month after sending the confirmation email in the double opt-in process or immediately after you have unsubscribed from our newsletter.

Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options through which you can declare the revocation:

  • Click on the link provided in the newsletter for this purpose
  • by email to: info@escapeverse.de

Web analytics and statistics

In order to record and statistically evaluate the flow of visitors to our Internet presence, we use web analysis services. Such services collect, among other things, data about the website from which you have accessed our website (so-called referrers), which pages of our website you have accessed, how long you have visited our pages and which interactions you have carried out there. In addition, data on the browser you use, computer system and type of device are collected. In addition, demographic information such as age or gender can be collected as pseudonymous values via such a service. If you have consented to the collection of your location data, this may also be processed, depending on the provider.

In order to collect and store this data, the web analysis service we use does not set a cookie on the terminal device you use. The IP address assigned to you is collected, but this is shortened via a so-called IP masking procedure, so that the IP address can no longer be assigned to your visit to our website. In addition, no clear data such as names or email addresses are stored. Neither we nor the service we use know the identity of visitors to our website.

We would like to point out that, depending on the country of domicile of the service provider mentioned below, the data collected via the service may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR may not be complied with and that the enforcement of your rights may not be possible or may be difficult.

Data concerned:

  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address).

Affected persons: Users of our online offers

Processing Purpose: Reach measurement, campaign success monitoring, remarketing, and interest- and behavior-based marketing

Legal basis: If we have asked you for your consent before using the respective service, this is the legal basis, Art. 6 para. 1 lit. a GDPR. In addition, we use the respective service on the basis of our legitimate interest to analyze the flow of visitors to our website in order to continuously improve the functions, offers and user experience, Art. 6 para. 1 lit. f GDPR.

We use the following web analytics services:

Matomo

Matomo
(On-Premise, self-hosted on our web server located in Munich, Germany)
https://matomo.org

The third-party plugins we use

We have embedded plugins in the form of "social media buttons" of the providers we use on our website. You can recognize which plugin belongs to which provider by the respective logo with which the plugin is marked. We have deactivated the social media plugins on our website by default, so that data is not automatically transmitted to the provider of the plugin when our pages are loaded. For this purpose, we use the so-called Shariff solution. Only when you click on the "social media button" of the respective provider, the collection of information and its transmission to the provider is triggered. If you click on one of these buttons, data can be sent to the operator of the social network even if you do not have an account there or have an account there but are not logged in there at the moment you visit our website.

We would like to point out that, depending on the country of domicile of the service provider named below, the data named in more detail below may be transferred to and processed on servers outside the area of the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR will not be complied with and that the enforcement of your rights will not be possible or will be difficult.

Data concerned:

  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address)

Affected persons: Users of our website

Processing Purpose: Displaying our Internet pages, offering content, ensuring the operation of our Internet pages

Legal basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR

We use the following plugins:

Facebook

Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Based in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com
Privacy Policy: https://www.facebook.com/about/privacy/
Privacy policy for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data

Twitter

Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Website: https://twitter.com/?lang=en
Privacy Policy: https://twitter.com/en/privacy

Content services

We use certain services to be able to display certain content or graphics (videos, images, music, fonts, maps) via our Internet presence. In doing so, the services we use process the IP address assigned to you at the time of your visit to our Internet pages, as this is the only way that the respective content can be displayed in the browser you are using. In addition, the providers of these services may place further cookies on your device, which are used to collect information about your usage behavior, your interests, the device and browser you are using, as well as the time and duration of your session. The providers regularly use this data for analysis, statistical and marketing purposes. In addition, this information may also be combined with information from other sources. This applies in particular if you yourself maintain an account with the service provider and are logged in there at the time of the session.

We would like to point out that, depending on the country of domicile of the service provider named below, the data named in more detail below may be transferred to and processed on servers outside the area of the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR will not be complied with and that the enforcement of your rights will not be possible or will be difficult.

Data concerned:

  • Usage data (e.g. access times, clicked links)
  • Communication data (e.g. information about the device used, IP address)

Affected persons: Users of our website

Processing Purpose: Displaying our Internet pages, offering content, ensuring the operation of our Internet pages

Legal basis: Consent via cookie consent banner, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR

We use the following content services:

Google Maps

We use Google Maps on our website. Google collects and processes the IP address of the visitor. If you visit a website on which Google Maps is integrated, your IP address and your location data (the latter usually not without your consent) will be transmitted to Google, regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address is assigned to your Google account if you are logged in there when you visit our website.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Based in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.com/maps
Privacy Policy: https://policies.google.com/privacy
Opt-out possibility: https://tools.google.com/dlpage/gaoptout?hl=en

Security measures

We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized third-party access.

Actuality and change of this privacy policy

This privacy policy is currently valid as of August 2022. Due to changes in legal or regulatory requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of the data protection generator of SOS Recht. SOS Recht is a service of Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.