The protection of your personal data is important to us

We process your data exclusively within the framework of the legal provisions, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Below, we inform you about the type, scope, purpose, duration, and legal basis of the processing of personal data in connection with our escape room offering. We also explain the rights you have as a data subject.

I. Responsible Provider

The controller for data processing within the meaning of the GDPR is:

NextExit Solutions GmbH

Zollergasse 6

94315 Straubing

Send email

II. Your Rights

As a data subject, you have the following rights under the General Data Protection Regulation:

Access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data is being processed, as well as access to such data and additional information.
Rectification (Art. 16 GDPR)
You have the right to have inaccurate or incomplete data corrected.
Erasure (Art. 17 GDPR)
You can request the deletion of your data unless processing is necessary.
Restriction of Processing (Art. 18 GDPR)
You have the right to restrict the processing of your data if certain conditions are met.
Data Portability (Art. 20 GDPR)
You have the right to receive the data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller.
Objection (Art. 21 GDPR)
You can object to the processing of your data, particularly if this is based on Art. 6(1)(f) GDPR.
Complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates the GDPR.

III. Information on Data Processing

We process your personal data only to the extent necessary to provide our service. The data will be deleted or blocked as soon as the purpose of processing no longer applies and no legal retention obligations prevent deletion.

IV. Server Log Files

When you visit our website, your internet browser automatically transmits certain data to our web server. This data is stored in so-called server log files. The information collected includes:

  1. Type and version of your internet browser
  2. Operating system
  3. Referrer URL (the previously visited page)
  4. Date and time of access
  5. IP address

This storage is for technical reasons, in particular to ensure the stability and security of our website. Processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in the functionality and security of our website.

Server log files are deleted after seven days at the latest, unless further storage is required for evidence purposes. In the event of a security-related incident (e.g., an attack on our systems) the data may be stored until the incident is fully resolved.

V. Payment Processing

For payment processing, we use the payment service provider Mollie. During the ordering process, the following data is processed:

  1. Billing data (e.g., name, address, payment information)
  2. Email address

Processing is based on Art. 6(1)(b) GDPR, as it is necessary for the performance of the contract. Mollie processes the data under its own responsibility in accordance with its privacy policy.

Further Information

VI. Contact

If you contact us by email, we process the data you provide (e.g., name, email address, message content) to handle your inquiry. Processing is based on Art. 6(1)(b) GDPR, as it is necessary for handling your request.

If you wish to be contacted by us, for example by registering to participate in our newsletter, we will process the data you provide (email address) in order to inform you about current offers. The processing is based on your consent in accordance with Art. 6 (1) lit. a) GDPR.

Your data will be deleted as soon as your request has been fully processed and no statutory retention obligations apply, or as soon as you unsubscribe from our newsletter.

VII. Cookies

We do not use cookies.

VIII. Analytics

We use GoatCounter, to analyze user behavior on our website in an anonymized way. No personal data is collected.

IX. Security of Your Data

We implement technical and organizational measures to protect your data from unauthorized access, loss, or manipulation. Sensitive data, such as passwords, is encrypted and securely stored.

Effective as of 2025-10-08

Any Questions?

If you have further questions about data protection, you can contact us at any time.

Send email