Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

1) Data controller

ERLEBNISreich GmbH

Essenheimerstrasse 26a

55270 Ober Olm

info@hapik.de

represented by the managing directors Thorsten Held, David Kossak and Christopher Conzelmann

2) Collection and storage of personal data as well as the type and purpose of its use

2.1 Type of data collection when accessing the website

When you access our website hapik.de, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a "log file". The following information is recorded without your intervention and stored until it is automatically deleted:

  • IP address of the requested computer
  • Date and time of access
  • Name and URL of the accessed file
  • Website from which access takes place ("referrer URL")
  • Browser used and, if applicable, the operating system of your computer and the name of your access provider
  • Language and version of the browser software

2.2. Purpose of data collection

We will process the data listed for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring comfortable use of our website
  • Evaluating system security and stability
  • For other administrative purposes

2.3 Host

We use the following host to provide our website.

OVH SAS 2, Rue Kellermann 59100 Roubaix (France)

OVH SAS is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Article 6(1)(1)(f) GDPR not to have to maintain a server on our premises. The server location is France.

Further information on objection and removal options vis-à-vis OVH SAS can be found at: https://www.ovhcloud.com/de/terms-and-conditions/privacy-policy/

The legal basis for data collection is Article 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances will we use the data collected for the purpose of drawing conclusions about you personally.

We also use cookies and analysis services when you visit our website. You can find more detailed explanations in this regard under Sections 5 and 6 of this privacy policy.

2.4 Contact form and email enquiries

If you contact us via the website or by email, your sender data will be transmitted in accordance with Article 6(1)(1)(a) GDPR on the basis of your voluntary consent. This data will be stored for the purpose of processing your request. Transfer to third parties does not generally take place, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time. In the event of revocation, your data will be deleted immediately. Otherwise, your data will be deleted once we have processed your request or the purpose of storage no longer applies.

2.5. Registration/customer account

We collect personal data if you voluntarily provide it to us when registering to enter the climbing gym by registering or creating a customer account. We store and use the data collected, such as surname, first name, address, phone number, email address and date of birth, without your separate consent only for the purpose of providing our services and fulfilling and processing any contract concluded with you.

2.6 Orders

We collect personal data if you voluntarily provide it to us when ordering a paid service, for example by filling out a corresponding form. We store and use the data collected, such as name, address, phone number and email address, for the purpose of providing our services and fulfilling and processing any contract concluded with you, as well as for our own marketing purposes. After the contract has been fully processed, your data will be deleted, taking into account the legal retention obligations, unless you have consented to further use.

3. Use of your data for marketing purposes

In addition to processing your data to process your purchase, we use your data to recommend products and services to you. You can object to the use of your personal data for marketing purposes at any time, overall or specifically for selected communication channels, without stating reasons.

4. Disclosure to third parties

Your personal data will only be transferred to third parties if this is necessary to fulfil the contract and/or we are legally obliged and/or entitled to do so in individual cases and/or you have given your consent.

5. Cookies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device, and do not contain viruses, trojans or other malware.

The cookie stores information that arises in connection with the specific end device used. However, this does not provide us with direct information about your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use "session cookies" to recognise that you have already visited individual pages on our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies that are stored on your end device for a specific period of time to optimise user-friendliness. If you visit our site again to use our services, it will automatically be recognised that you have already visited, along with which inputs and settings you made, so that you do not have to re-enter them.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see Section 5). These cookies enable us to automatically recognise that you have already visited when you return to our site. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Article 6(1)(1)(f) GDPR.

Cookies that are technically necessary for the operation of our website:

These cookies are technically necessary for the operation and functionality of our website. They make the website technically accessible, secure and usable and offer essential and basic functions, such as navigation on the website or the correct display of the website in the internet browser.

Analytics/analysis cookies:

These cookies enable us to collect data in an aggregated form about website visitors. This data will be used to eliminate errors and to improve the quality of the website.

Disabling cookie settings:

Most browsers are pre-set to accept cookies automatically. You can object to the generation of cookies by disabling cookies in the system settings of your browser. Please note, however, that some cookies are technically necessary for our website to function, otherwise the page cannot be accessed and displayed. If you disable cookies, you will not be able to use parts of the website (without restriction).

We only use cookies that are not technically necessary for our website to function with your prior express consent.

In addition, you can also control the installation of cookies yourself at any time by changing your browser settings and/or deleting all cookies.

6. Analysis tools

We use the tracking measures listed below on the basis of Article 6(1)(1)(f) GDPR. We use the tracking measures below to ensure that our website is designed to meet requirements and is continually optimised. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offering for you. These interests are to be viewed as legitimate within the meaning of the aforementioned provision.

The relevant data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

For the purpose of customising and continually optimising our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). Use of data by Google Analytics: https://policies.google.com/privacy/partners?hl=en. In this context, pseudonymised user profiles are created and cookies (see Section 4) are used. The information generated by the cookie about your use of this website such as the

  • browser type/version
  • operating system used
  • referrer URL (the previously visited website)
  • host name of the accessing computer (IP address)
  • time of the server request

is generally transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on advertising activities and to provide further services associated with the use of the website and the internet for the purposes of market research and the needs-based design of these web pages. This information may also be transferred to third parties, provided this is legally required, or to the extent that such third parties process the information. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymised, so assignment is not possible (IP masking).

You can adjust your browser settings to prevent the installation of cookies; however, we would like to point out that you may then not be able to use all the features of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

Further information on data protection in connection with Google Analytics can be found in Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

b) MapBox

Our website uses MapBox API, a service provided by MapBox Inc. (address: 740 15th Street NW, 5th Floor, Washington, District of Columbia 20005, USA). We use MapBox to visually display geographic information. When MapBox is used, it also collects, processes and uses data about the use of the map functions by visitors.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in optimising the functionality of our website.

When you visit one of our websites, MapBox stores a cookie on your end device via your internet browser. This transmits information about your use of our website, including your IP address, to a MapBox server in the US and stores it there. This data is processed for the purpose of displaying the website or to ensure the functionality of the MapBox service. MapBox may pass on this information to third parties if required to do so by law or if the information is processed by third parties on behalf of MapBox.

You can adjust your browser settings to prevent the installation of cookies; however, we would like to point out that you may then not be able to use all the features of this website.

Further information on data protection in connection with MapBox can be found at https://www.mapbox.com/privacy/.

c) Google Tag

This website uses Google Tag Manager. This service allows website tags to be managed via an interface. Google Tag Manager itself does not set cookies but only tags and does not collect any personal data. The service triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If disabled at the domain or cookie level, this will remain in effect for all tracking tags implemented with Google Tag Manager.

d) Matomo

We use the statistical evaluation tool "Matomo" (formerly "Piwik") on this website to analyse its use. We can use the statistics we obtain to regularly improve our offering and make it more interesting for you as a user. We use "Matomo" for the purpose of performing our tasks pursuant to Article 6(1)(1)(f) GDPR.

Cookies are stored on your computer for this evaluation. We store the information collected in this way exclusively on our server in Germany. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to use this website to its full extent. It is possible to prevent the storage of cookies by setting your browser. If you do not want your browsing to be evaluated anonymously by "Matomo", you can disable this function. You can decide here whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyse various statistical data.

7. Social media linking

We link to the following social media providers:

  • Facebook
  • Instagram
  • YouTube

The linking is done by means of corresponding social media buttons.

Your usage data (e.g. address of the page currently visited) will only be transmitted to these networks after you click on the corresponding link.

These social networks may collect usage and possibly user data on the Facebook and/or Instagram and/or YouTube pages clicked on. We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

Therefore, we inform you according to our state of knowledge:

Only when you access the link will your browser establish a direct connection to the servers of the social networks mentioned. As a result, the information that you have visited our website is indirectly forwarded to these services. If you do not want such a data transfer to take place, we advise against clicking on the social media buttons.

Please refer to the privacy policies of these services for the purpose and extent of data collection by social networks, the further processing and use of your data there, as well as your rights in this regard and settings options to protect your privacy.

8. Payment procedures

a) PayPal

Payment via PayPal is possible on this website. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay with PayPal, the payment data you enter (for example your account or credit card number, IP address, browser and device type, first and last name if applicable, address data if applicable, information about the product ordered if applicable) will be transmitted to PayPal.

Your data will be transmitted to PayPal on the basis of Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing to fulfil a contract). You can revoke the consent you have already given at any time. If you revoke your consent, past data processing operations will remain unaffected.

b) Mollie

Payment via Mollie is possible on this website. The provider is Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, the Netherlands.

If you pay with Mollie, the payment data you enter (for example your account or credit card number, IP address, browser and device type, first and last name if applicable, address data if applicable, information about the product ordered if applicable) will be transmitted to Mollie B.V.

Your data will be transmitted to Mollie B.V. on the basis of Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing to fulfil a contract). You can revoke the consent you have already given at any time. If you revoke your consent, past data processing operations will remain unaffected.

9. Rights of data subjects

You have the right:

in accordance with Article 15 GDPR, to request information about your personal data processed by us. In particular, you may obtain information about the purposes of processing; the category of personal data; the categories of recipients to whom your data has been or will be disclosed; the planned retention period; the existence of a right to rectification, erasure, restriction of processing or objection; the existence of a right of appeal; the origin of your data, if the data has not been collected by us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about its details;

in accordance with Article 16 GDPR, to immediately request the rectification of incorrect or complete personal data stored by us;

in accordance with Article 17 GDPR, to demand the erasure of personal data stored by us, unless its processing is required to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

in accordance with Article 18 GDPR, to demand the restriction of processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful, but you reject its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to processing in accordance with Article 21 GDPR;

in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transmission to another data controller;

in accordance with Article 7(3) GDPR, to revoke your consent given to us at any time. This means that we are no longer allowed to continue the data processing based on this consent in the future, and

in accordance with Article 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our headquarters.

10. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6(1)(1)(f) GDPR, you have the right in accordance with Article 21 GDPR to object to the processing of your personal data if there are reasons for this which arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation.

If you would like to exercise your right of revocation or objection, simply send an email to info@hapik.de.

11. Data security

When you visit our website, we use the common SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. The transmission of a single page of our website in encrypted form is indicated on our website by the display of a closed key or lock icon in the bottom status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are improved continuously in order to meet state-of-the-art requirements.

12. Validity of and changes to this privacy policy

This privacy policy is currently valid as of december 2023.

Due to the further development of our website and offers on it or due to changing legal or official requirements, it may become necessary to make changes to this privacy policy. You can access and print out the current privacy policy at any time at hapik.de.