Privacy Policy

Details about how we process your personal data and your rights.

Privacy Policy

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and only to the extent necessary for providing our services.

Purposes of processing

We process your data to administer purchases, provide the Geo-Game, handle support requests and document consent. This includes contact details (email address and, if provided, name), ticket configurations, usage data of the game, payment reference numbers and communications with us. If you grant location access inside the game, we use your current position solely to calculate distances and log the ticket code plus the consent timestamp as proof. For sharing invitations we rely on a double opt-in: we store the sender’s checkbox confirmation together with delivery, confirmation and withdrawal logs (timestamp and IP address) so that we can demonstrate the recipient’s consent. Technical log data are collected when accessing the website. Analytical tools such as Google Tag Manager/Google Analytics are only activated after you have consented.

Legal bases

Processing for the purchase and execution of the game is based on Article 6(1)(b) GDPR. Where we store data for tax or commercial law reasons Article 6(1)(c) GDPR applies. The operation of the website and our legitimate interest in ensuring IT security are based on Article 6(1)(f) GDPR. If we ask for your consent (for example for analytics cookies), Article 6(1)(a) GDPR is the legal basis.

Recipients and third-country transfers

We use carefully selected service providers to host this website and to process payments. Payment processing is handled by Stripe Payments Europe, Ltd., which may transfer data to Stripe, Inc. in the USA on the basis of the EU standard contractual clauses. In addition, IT service providers who maintain our systems may gain access to data within the scope of commissioned processing. We do not sell your data to third parties.

Storage periods and erasure

Game-related data (ticket code, configuration, progress logs) and the documentation of granted location consent (ticket code and timestamp) are deleted no later than seven days after you have fully used the ticket. Cookie & consent logs (hashed session ID, consent categories, timestamps) are stored for up to six months and removed sooner when withdrawn or erased. Delivery and opt-in logs for sharing invitations are removed no later than seven days after the ticket was used or after the invitation expired. Communication data from support requests are kept for up to six months so we can process follow-up questions. Statutory retention periods (for example according to tax law) remain unaffected; corresponding documents are stored for up to ten years.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing on grounds relating to your particular situation. You may also lodge a complaint with the competent supervisory authority.

Withdrawal of consent and contact

You can withdraw any consent you have given at any time with effect for the future—for example via the cookie banner or by contacting us at info@dalum.de. Location sharing can also be disabled directly inside the game via the “Withdraw location consent” button. Further details about cookies and consent options can be found in our Cookie & Consent Policy. If you have questions about data protection, please use the contact details in the imprint.

Contact form Back