WE CARE ABOUT YOUR PRIVACY

We, Electric Carnival, (hereinafter collectively known as “EC”), own and operate the following location-based leisure activities:

Electric Carnival | Araneta | S&T
Electric Carnival | Germany

At EC, we respect your privacy needs and we take our responsibilities seriously. We recognize the importance of your personal data and believe that it is our responsibility to properly manage, protect and process your personal data. This Privacy Policy explains how we handle your personal information (including any sensitive information, such as health information). In particular, it details how we collect, use, disclose, store and enable you to access your personal information.

Controller in accordance with GDPR

Electric Carnival

Mailänder Platz 7

70173 Stuttgart

Represented by: Kevin Cleary, Managing Director

info@electriccarnival.com

Consent
Our Privacy Policy applies to your personal information regardless how we collect it, for example, whether it is collected via one of our websites, when you visit one of our venues, when you contact our customer service departments or visit one of our social media sites.

By submitting information to us, accessing and using our websites or social media platforms or visiting our venues you consent to us collecting, using and disclosing your personal information in the ways described in this Privacy Policy.

What is personal information?
Personal information includes any information or opinion about an identified individual, or an individual who is reasonably identifiable regardless of whether the information is true or not. We only collect personal information (and sensitive health information) which is necessary for, or related to, one or more of its functions or activities.

How do we collect personal information?
We may collect personal information from you in a number of ways, including:

when you send us an e-mail, “contact us” message or make any other form of written enquiry;
when you use our websites or our channel partners’ websites;
when you make a booking on our websites or on our channel partners’ websites;
via our official social media pages that we control, such as the official pages for our various businesses on Facebook, Twitter and Instagram;
when you visit or call one of our venues to ask about our services;
when you make a booking at one of our venues;
when you enter a promotion, competition, provide feedback or participate in a survey, market research or other promotional activities which we (or one of our agents) conduct;
when you purchase photos and/or videos of your visit to one of our venues;
when you sign up to receive our newsletters or marketing material;
if your photograph or video is taken at one of our venues;
when you submit an application for employment with us;
when you register for one of our corporate programmes; and
when you register for one of our events.
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and possibly your computer’s operating system

Some of our venues have surveillance cameras which may capture your image on film. We may use this information in respect of the management and security of our venues and it may be provided to law enforcement and government bodies for these purposes.

How do we use your personal information?
Your personal information may be used by us in a number of ways, including:

for the purpose requested;
to respond to your query or feedback;
to process your booking or order with us;
personalised advertising to promote and market all current and future businesses, venues, products and services and to inform you about the products and services of our commercial partners;
participation in competitions
registering for newsletters or events
creating photos or videos
issuing of vouchers
recording of complaints, damage cases or lost property
rreparation and implementation of events
to process and consider your application for employment;
to assist with our internal business processes;
for market research purposes and to improve our product and service offering;
to administer contests, promotions and surveys;
for any other purposes that you would reasonably expect; and
to enable us to comply with our obligations under the law

When we disclose your personal information

We may disclose your personal information in a variety of circumstances including to:

our related entities within EC
contractors, agents and suppliers we engage to provide newsletters, products and/or perform services for us, for example, customer feedback analysts, digital marketing agencies, online shopping cart service providers, photo and video processing and production companies, and payment processors;
our professional advisors, such as lawyers and accountants;
law enforcement bodies;
if you choose, your email address and name will be added to our periodical newsletter database so you can receive it; and
any other person for any other purposes that would be reasonably expected (including if required by law).
ensuring a smooth connection setup
evaluating system security and stability
other administrative purposes

When third parties perform services on our behalf, we take reasonable steps to ensure that the third party will protect your personal information in a manner consistent with this Privacy Policy.

Your personal data will not be transferred to third parties unless:

You have given explicit consent (Art. 6 Para. 1 lit. a GDPR)
Disclosure is required for the establishment or defence of legal claims (Art. 6 Para. 1 lit. f GDPR)
There is a legal obligation (Art. 6 Para. 1 lit. c GDPR)

We do not sell your name or other personal information to third parties.

Transferring Your Data Outside the EU/EEA (Third Countries)

We may transfer your personal data to companies located in countries outside the European Union (EU) or the European Economic Area (EEA). These countries are known as "third countries" and these companies act as service providers who process data on our behalf, for example, our IT support or data storage providers.

When we transfer your data to a third country, we ensure that your personal data is protected to the standard required by EU data protection law. This includes implementing appropriate safeguards, such as:

Adequacy Decisions: Transferring data to countries that the European Commission has recognized as having data protection laws that are essentially equivalent to those in the EU/EEA.

Standard Contractual Clauses (SCCs): Using standard data protection clauses approved by the European Commission, which provide contractual guarantees that your data will be protected.

Binding Corporate Rules (BCRs): For transfers within our group of companies, we may use approved BCRs that ensure a consistent level of data protection.

Google Analytics and Data Transfer to the USA

When we use Google Analytics, your anonymized IP address is transferred to Google in the USA. The USA has not been recognized by the European Commission as having an adequate level of data protection. To ensure your data is protected, we rely on Standard Contractual Clauses with Google.

Social Media Plugins

Please be aware that if you interact with social media plugins on our website, your data may also be transferred to the providers of these plugins, who are often located outside the EU/EEA. We recommend reviewing the privacy policies of these social media providers for more information about their data transfer practices and safeguards.

We are committed to protecting your personal data and ensure that any transfers outside the EU/EEA are carried out in compliance with applicable data protection laws. You have the right to request information about the safeguards we have in place for international data transfers

Your payment information
Payment may be taken by a third party ticketing agent. We do not see your payment information, or store it on our server. An authentication code from a third party ticketing agent to verify payment, but this does not identify you or your payment information.

Updating personal information
We take reasonable steps to ensure that the personal information we collect and use is accurate, complete and up-to-date. However, the accuracy of the information we hold depends to a large extent on the information you provide.

You can update (or request us to update) your personal information at any time. We ask you to keep your information as current as possible so that we may continue to provide you with useful information. If you wish to update your information, please contact info@electriccarnival.com

If you no longer wish to receive our marketing material, you can opt out of the communication we provide you and that option will be made available to you.

Storage of your personal information
We take reasonable steps to maintain the security of your personal information and to prevent the misuse, interference, loss, modification and unauthorised access to or disclosure of your personal information.

Cookies
Our websites use cookies for identification purposes and to allow certain functions on the websites to work such as the online experience and shopping process. The cookies we pass to your electronic device are anonymous and do not hold information about you and are not capable of revealing your personal identity.

However, if you nevertheless prefer not to receive cookies, you can configure your Internet browser on your electronic device to reject them, or to notify you if they are being used. Rejecting cookies can, however, limit the functionality of our websites and the online shopping process.

Please note that a general deactivation of cookies may lead to functional restrictions on our website.

To do so, please proceed as follows:

Internet Explorer:
1. From the "Tools" menu, select "Internet Options."
2. Click the "Privacy" tab.
3. Now you can configure the security settings for the Internet zone. Here you can specify whether and which cookies should be accepted or rejected.
4. Confirm your settings by clicking "OK."

Firefox:
1. Select Options from the "Tools" menu.
2. Click "Privacy."
3. Select "Use custom settings" from the drop-down menu.
4. Now you can specify whether cookies should be accepted, how long you want to keep these cookies, and add exceptions for which websites you always or never want to allow to use cookies.
5. Confirm your settings with "OK."

Google Chrome:
1. Click the Chrome menu in the browser toolbar.
2. Select "Settings."
3. Click "Show advanced settings."
4. Under "Privacy," click "Content settings."
5. Under "Cookies," you can configure the following cookie settings:

Delete cookies
Block cookies by default
Delete cookies and website data by default after closing the browser
Allow exceptions for cookies from specific websites or domains

If you would like to delete individual cookies set in your browser or find out which service providers have set cookies in your browser, you can do so using a "preference manager."

Cookies/pixels/tags used on our website
Google Analytics

If you have given your consent in the cookie banner, this website uses Google Analytics UA and Google Analytics 4. These are web analysis services provided by Google LLC. The responsible party for users in the EU and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via a single interface. The tool itself (which implements the tags) is a cookieless domain and does not store any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Google Maps

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

This website uses the Google Maps map service provided by Google Inc.

In order for Google Maps to fully offer its service, the company must collect and store data from you. This includes, among other things, the search terms you specify, your IP address, and also the latitude and longitude coordinates. If you use the route planner function, the starting address you enter will also be saved. However, this data is stored on the Google Maps website. We can only inform you about this, but have no influence.

YouTube

This website embeds videos from the YouTube website. The site is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads

Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Ads Conversion to show you relevant advertising on other websites. This helps us understand if our ads are effective in attracting people to our site. To do this, Google uses small text files called "cookies" when you click on one of our ads. These cookies help us track things like how often you see an ad and whether you visited our website after clicking on it.

These cookies don't store any information that personally identifies you. We only see general statistics from Google that tell us how well our ads are performing. For example, we can see which ads led to more visits to our website, but we can't see who those visitors were.

When you visit our website after clicking on a Google ad, your browser automatically connects to Google's servers. This tells Google that you visited our site or clicked on our ad. If you're logged into a Google account, Google might connect this visit to your account. Even if you're not logged in, Google could still collect your IP address.

We don't have control over what Google does with this data. We're letting you know this based on our current understanding of how Google uses this tool. You can control how Google uses cookies for advertising by visiting Google's ad settings page: [Insert Link to Google Ad Settings]. You can also opt out of interest-based advertising altogether by adjusting your browser settings.

Meta

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

This website uses tools from Facebook (Meta Platforms Inc.) called the Facebook Pixel and Conversions API to help us show you relevant ads and understand how well our ads perform.

Showing You Relevant Ads on Facebook (Remarketing)

We use these tools to show you ads on Facebook that we think you'll be interested in, based on what you've looked at on our website. This helps us make our website and offers more relevant to you. If you've visited our website, we might show you ads on Facebook for up to 180 days afterwards.

Understanding How Our Facebook Ads Perform (Conversion Tracking)

We also use these tools to see if our Facebook ads are effective. For example, we can see if people who clicked on our ad on Facebook then visited our website. This helps us understand what's working and make our ads better.

When you visit our website and have agreed to the use of cookies that require your consent, your browser automatically connects directly to Facebook's servers. This tells Facebook that you've visited our website or clicked on one of our ads. If you're logged into Facebook, Facebook might connect this visit to your account.

Facebook uses cookies and similar technologies to collect this information. We only receive reports from Facebook that don't identify you personally. These reports help us understand the overall effectiveness of our ads.

You can control how Facebook uses your data for advertising, including opting out of seeing interest-based ads from Facebook, by visiting your Facebook ad settings. You can also manage your cookie preferences for our website through our cookie banner or settings.

Photos and Videos
A photographic image (including a video recording) which is sufficiently clear to enable you to be identified as an individual is personal information. We ensure that the personal information is used and disclosed only in ways which are consistent with the Policy.

As you participate in activities in our venues we may take photos and videos of you and your experience.This may be used for promotional and marketing activities.

We regularly reproduce photographic or video images of individuals who attend our venues in publications, promotional and marketing materials and on our social media sites. The images are used to record your experience at our venues, promote our venues or describe the activities. The images may be used for publicity and advertising purposes in any media.

By visiting our venue, you acknowledge and agree that we are the creator and owner of all intellectual property rights associated with your photos and videos and that we may use and exploit the photographs and videos in any manner, without restriction of any kind. You agree to us using, reproducing and disclosing photographic or video images of you. You agree that you will make no claim against us for any payment or fee for appearing in promotional material or advertising and release us from any other claims in connection with our use of your likeness and image.

Security of Your Personal Data

To meet our obligations under Data Protection law, we will protect your personal data from unauthorised access, misuse, alteration or loss by using commercially reasonable security measures. Any payment transactions will be encrypted using SSL technology.

While we do our best to keep your personal data safe, please be aware that sending information over the internet isn't completely secure. We can't guarantee the security of any data sent to our site; you do so at your own risk.

Our Liability

Nothing in this policy in any way excludes or limits our liability if we're negligent and it causes death or personal injury, or for fraudulent misrepresentation.

To the extent allowed by law, we are not responsible for losses or damages you might suffer because of events beyond our reasonable control that affect our online services, including the electronic sending of information, content, material and data over the internet and if others intercept and decrypt it.

We are also not liable to you for any losses or damage caused by a distributed denial-of-service attack, or any viruses, trojans, worms, logic bombs or other harmful stuff that might infect, damage or muck up your computer equipment or software, or damage or lose your data, unless this is directly down to our negligence. You should make sure you're using proper virus checking software and firewalls.

While we've taken reasonable steps to make sure the information on our website is accurate, up-to-date, correct and complete, we don't check, review, monitor, verify or endorse any information, content, material or data collected from or provided by third parties which is shown on or available from our website or any third party websites or services you can get to from our site. We're not responsible to you for any loss, damage or injury you might suffer because of such information, content, material or data. It's your job to check that such information, content, material or data is accurate, current, correct and complete.

If an unauthorised third party gets access to your personal data, we won't be responsible for any direct or indirect damage caused as a result of that unauthorised access, as long as we've used commercially reasonable security measures as mentioned above.

If we've given you a password to access certain parts of our site, it's your responsibility to keep it secret. Please don't share your password with anyone.

While we take all reasonable steps to ensure our website keeps working, there might be times when it's down. This could be for maintenance or alterations to the website, or for reasons beyond our control. We're not responsible to you if the website is unavailable.

Data Subject Rights

You have the right:

To request information about your personal data processed (Art. 15 GDPR)
To request correction of inaccurate data (Art. 16 GDPR)
To request deletion of your data (Art. 17 GDPR)
To request restriction of processing (Art. 18 GDPR)
To data portability (Art. 20 GDPR)
To object to data processing (Art. 21 GDPR)

Your right to complain

If you are unhappy about how your personal data is being processed, we encourage you to raise your concern with us first. If you remain dissatisfied, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement. You can find contact details for your local supervisory authority on the website of the European Data Protection Board (EDPB).

Updated March 2025