top of page

Privacy Policy

Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), users of this website are informed of the following details:

  • Data Controller: IMMERSUM S.L.

  • Tax ID (CIF/NIF): B21730973

  • Registered Address: Calle Real, 11, 29018 Málaga, Spain

Purpose of Data Processing

The personal data provided by users may be processed for the following purposes:

  • To manage bookings and provide the escape room services requested.

  • To respond to enquiries, information requests, and incidents.

  • To process payments, issue invoices, and comply with administrative and tax obligations.

  • To send communications related to bookings or services purchased.

  • To send promotional offers, updates, and marketing communications only where the user has given their explicit consent.

  • To improve the browsing experience and analyse website usage through cookies and analytics tools.

Legal Basis for Processing

The legal grounds for processing personal data are:

  • The performance of a contract or pre-contractual measures in order to manage bookings and provide the requested services.

  • The user's explicit consent for contact forms and for receiving marketing communications.

  • Compliance with legal obligations applicable to IMMERSUM S.L.

  • IMMERSUM S.L.'s legitimate interest in ensuring the security, proper operation, and continuous improvement of the services offered.

Data Retention

Personal data will be retained:

  • For as long as necessary to provide the contracted service.

  • While a commercial or contractual relationship remains in place.

  • For the periods required by applicable tax, administrative, and legal regulations.

  • Until the user requests deletion of their data where processing is based on consent.

Data Recipients

Personal data will not be disclosed to third parties unless required by law or where necessary for the proper provision of the service.

​

The following categories of service providers may have access to personal data:

  • Technology and web hosting providers.

  • Booking management platforms.

  • Financial institutions and payment service providers.

  • Tax, accounting, and administrative advisors.

 

All service providers with access to personal data are bound by agreements that ensure compliance with applicable data protection laws.

Photographs and Audiovisual Content

During the experience or at the end of the activity, IMMERSUM S.L. may offer participants the option to take commemorative photographs or videos on a voluntary basis.

​

This material will only be used for promotional or advertising purposes if the participants have given their prior consent.

 

Users may request the removal of any images in which they appear at any time by contacting us at the email address provided in this Privacy Policy.

Data Security

IMMERSUM S.L. implements the technical and organisational measures necessary to ensure the confidentiality, integrity, and security of personal data, preventing unauthorised access, alteration, loss, or improper processing.

Minors

Children under the age of 14 may not provide personal data without the authorisation of their parents or legal guardians.

 

The participation of minors in our activities must comply with the specific conditions stated for each experience.

Changes to this Privacy Policy

IMMERSUM S.L. reserves the right to update this Privacy Policy to reflect changes in legislation, case law, technical developments, or new activities and services offered.

​

The most up-to-date version of this Privacy Policy will always be available on this website.

bottom of page