Escape Xperience — also trading as Magische Speurtochten and the associated games, including Drakenjacht.
Escape Xperience (hereinafter: “we”) takes the protection of your personal data very seriously. This privacy policy explains what data we process, why we process it, the legal basis for doing so, how long we retain it and who we share it with. We comply with the General Data Protection Regulation (GDPR).
1. Who we are
The data controller is Escape Xperience, a sole proprietorship established at Chirurgijnsgilde 50, 3813 GZ Amersfoort, registered with the Dutch Chamber of Commerce under number 87185229. We also trade under the names Magische Speurtochten and the associated games, including Drakenjacht.
Questions about privacy? Email info@escape-xperience.nl.
2. What data we process and why
2.1 Booking and payment
When you book a game, we process your first and last name, email address, selected location (game, city and park), number of teams and the amount payable. Payment is handled by Mollie; Mollie processes the actual payment details, such as your bank account number. Purpose: to process your booking and payment and to contact you about your booking. Legal basis: performance of the agreement.
2.2 Delivery of the game (login details)
To create a ticket for each team, we send your name and email address to Loquiz, the provider of the game platform. Purpose: to give you access to the game. Legal basis: performance of the agreement.
2.3 Email
We send you a confirmation email containing the login details for each team. We use Microsoft 365 to send these emails. Purpose: to send you the game details and information about your booking. Legal basis: performance of the agreement.
2.4 Interest and registration forms
On some pages, you can leave your name and email address to receive updates about a game or location. Purpose: to inform you when it becomes available. Legal basis: your consent.
2.5 Newsletter
When booking, you can use an unticked checkbox to indicate that you would like to receive our newsletter. If you do, we use your name and email address to occasionally tell you about new games, locations and offers. Purpose: to keep you informed. Legal basis: your consent. You can unsubscribe at any time using the link at the bottom of every newsletter.
2.6 “Find a location near you”
On the game page, you can search for the nearest locations. This can be based on a place name you enter or — only if you give permission in your browser — your current location. We use OpenStreetMap/Nominatim to convert a place name into coordinates. We do not store this location data. Legal basis: your consent (via the browser).
2.7 Reviews
Reviews are currently collected through a Google form; the information you enter there is processed by Google.
2.8 Website visits and security
Our web server automatically records technical data such as your IP address, browser type and the pages requested. Purpose: to keep the website secure and functioning properly and to prevent misuse. Legal basis: our legitimate interests. We do not retain these log files for longer than necessary.
2.9 Statistics (Google Analytics 4)
We use Google Analytics 4 (provided by Google Ireland Ltd.) to understand how our website is used and how we can improve it. For example, we measure which pages are viewed, how visitors arrive at the website, and the number of visitors and sessions. Purpose: to improve the website. Legal basis: your consent.
We use Google Consent Mode: until you have given consent, no analytics cookies are placed and Google only receives anonymous, cookieless signals. Only after you click “Accept all” (or select the “Statistics” category) in the cookie notice will Google Analytics place cookies and full measurement begin. IP addresses are shortened/anonymised during processing. Google processes this data on our behalf as a processor; where data is processed outside the EEA, appropriate safeguards apply (standard contractual clauses).
2.10 Cookies and your choices
A cookie is a small file stored on your device. We use two types:
- Essential cookies — required for the website to function, for example to remember your cookie preferences and operate the booking form. These are always enabled and do not require consent.
- Statistics cookies — from Google Analytics (see 2.9). We only place these with your consent.
On your first visit, a cookie notice appears where you can choose to accept all cookies, allow essential cookies only, or set your preferences by category. We store your choice in a functional cookie for approximately six months. You can change or withdraw your choice at any time using the “Cookie preferences” link at the bottom of the website.
3. Sharing data with others (processors)
We do not sell your data. We only share it with parties that help us provide the service, and we enter into data processing agreements with these processors:
| Party | Purpose | Data we share |
|---|---|---|
| Mollie (Netherlands) | Payment | Name, email address, amount, payment details |
| Loquiz OÜ (Estonia, EU) | Game and tickets | Name, email address |
| Microsoft 365 | Sending email | Email address and email content |
| Hosting provider | Website and storage | All data on the website, log files |
| OpenStreetMap/Nominatim | Place name → coordinates | Entered place or location (not stored) |
| Google Ireland Ltd. (Analytics) | Website statistics (with consent only) | Cookie ID, anonymised IP address, click and page data |
| Google (Forms/Maps) | Reviews / navigation links | Information you enter or click there yourself |
As a rule, we process your data within the European Economic Area. Where a party processes data, in whole or in part, outside the EEA, we ensure that appropriate safeguards are in place, such as the European Commission’s standard contractual clauses.
4. How long we retain data
| Data | Retention period |
|---|---|
| Login details / tickets | Usable for 3 months; they expire afterwards |
| Booking and invoice data | 7 years (statutory tax retention requirement) |
| Interest registrations | Until you unsubscribe |
| Newsletter subscriptions | Until you unsubscribe or withdraw your consent |
| Server log files | Briefly, no longer than necessary for security purposes |
| Statistics data (Google Analytics) | Up to 14 months at user level |
| Cookie preference | Approximately 6 months |
| Location searches | Not retained |
5. Security
We take appropriate technical and organisational measures to protect your data against loss or unlawful use, including secure connections (https) and restricting access to those who need it.
6. Children
Our games are intended for children, but the booking and account are handled by an adult. We do not create accounts for children and do not knowingly collect data directly from children. The accompanying adult remains responsible for the children while they are playing.
7. Your rights
You have the right to access your personal data and to have it corrected or deleted. You may also object to processing, request restriction of processing, request transfer of your data (data portability), and withdraw any consent you have given at any time. To exercise these rights, email info@escape-xperience.nl. We will respond as quickly as possible and no later than the statutory deadline.
8. Complaint to the supervisory authority
If you disagree with how we handle your data, you can submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.
9. Changes
We may update this privacy policy, for example if we start using new features or tools such as website analytics. The most recent version is always available on our website.
10. Contact
Escape Xperience — Chirurgijnsgilde 50, 3813 GZ Amersfoort — info@escape-xperience.nl — Chamber of Commerce number 87185229.