PRIVACY POLICY

The companies responsible for processing your personal data are Movie Park Germany GmbH which operates Movie Park Germany with registered office at Warner Allee 1, 46244 Bottrop, Germany and Parques Reunidos Servicios Centrales, S.A., with registered office at Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, Spain each acting individually as controllers and together as joint controllers (the "Controllers").

If you have any questions about the processing of your personal data or if you would like to ask for relevant parts of the joint controller’s agreement, please contact the Data Protection Officer (DPO) by datenschutz@moviepark.de

The Controllers will process your personal data for the purposes set out below, and consistently with the purpose of the channel through which you may have provided your personal data: 

        1.      Data processing for ticket and article purchases 

You can purchase tickets, vouchers and products in our online store via our website by providing the personal data required to process your purchase.
The data collected and stored by us for the purpose and in the context of contract processing are Name, address, e-mail address, date of birth and payment information, your IP address and the date and time of your registration or order. All other information is marked accordingly and is voluntary. We collect your date of birth to ensure that you are at least 18 years old and can enter into binding legal transactions. (see General Terms and Conditions).
If you enter a personal dedication on the form provided when purchasing a voucher, this data will only be used to print the voucher and will then be deleted.

We store your data as part of the order history and send you the order data by e-mail. When confirming an order by e-mail, we do not disclose any payment details, only the selected payment method.
To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using SSL technology.
The legal basis for this processing is Art. 6 para. 1 lit. b GDPR.
Your data will not be forwarded to third parties. We store your contract data until the expiry of the legally prescribed periods. 

We also use your e-mail address and your name to send you a satisfaction survey by e-mail after your visit to our company. You can object to this at any time by sending us an e-mail to datenschutz@moviepark.de. You will also be informed of this separately during the ordering process. You will not incur any transmission costs on our part for this. We do this on the basis of a legitimate interest in constantly improving our services for you. Your responses are stored exclusively in anonymous form. The legal basis is Art. 6 para. 1 lit. f in conjunction with. § Section 7 (3) UWG.

In the course of purchasing a season pass, we collect a photo of the respective pass holder in addition to the above-mentioned personal data in order to issue the season pass. This serves the purpose of clearly identifying the pass holder and preventing misuse in the form of the pass being passed on.  The image is automatically deleted from our system 24 hours after creation. In addition, we will print the season pass number and first name and surname on the season pass. The legal basis is the contract concluded with us for the season pass under the conditions specified in the GTC. The legal basis also applies to those persons who have not concluded the purchase contract with us directly.

        2.       Management of bookings, contracting and events celebration (birthday parties, weddings, first communions, corporate events etc.)

If you book and purchase one of our events via our online booking form, we will process your personal data (name, email address, telephone number, whether you or your host are Annual Pass holders, method of payment, personal details included in the payment receipt and transactional details of your booking) to manage your booking and process the payment of your event you wish to arrange and send you by email your booking confirmation, the booking receipt and the relevant documentation for the celebration of your event. Additionally, during the booking process we will ask for your age to ensure that you are at least sixteen (16) years old. This is required because pursuant to European data protection legislation, if you are not over sixteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If you have booked your event by using promotions that are subjected to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify the compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controllers. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to the booking of your event, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). If for the purpose of customizing your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controllers will not process such information on a personalized basis. If for the purpose of customizing your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controllers will not process such information on a personalized basis. 

Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you for the booked event (terms and conditions of purchase). If you do not provide your personal data, we will not be able to process your booking. If, in order to customize your event (e.g., for decorating the event venue) you voluntarily provide personal data of a child under sixteen (16) years of age (first name and first surname), you declare that you are his/her father, mother or guardian and give your express and informed consent to process his/her personal for the above purpose.

        3.      Management of bookings and contracting visits from schools and groups  

If you book a group or school visit via our online booking form, we will process your personal data (name, surname, Zip code, email address, phone number, group or school name, address, city/town, method of payment, personal data included in the payment receipt, and transactional information about your booking) to manage your booking and process your payment of the visit you wish to arrange and e-mailing you your booking confirmation and all relevant documentation. We will also ask for your age to ensure that you are above sixteen (16) years of age. If you are not, we would be required to seek your parents/guardians consent for processing your personal data, pursuant to European data protection laws. If at the time of booking your visit you have made use of promotions that are subject to specific conditions, please note that we may ask you to provide us with supporting documentation to confirm your eligibility for these promotions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controllers. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to the booking of your event, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). If for the purpose of customizing your visit (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controllers will not process such information on a personalized basis.

Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you related to the visit (terms and conditions of purchase). If you do not provide us with your personal data, we will not be able to process the booking of your visit. 

        4.      Customer support

If you send us through any of the methods available for this purpose on this web site (by phone, online form or email) a query or request specific information about any of our products, services or events (first communions, birthday parties, corporate events, weddings, etc.), a suggestion or an information request about any claim or incidents that may have arisen from the products, services or event purchased or booked by you, we will process your personal data and the information contained in your query to deal with and respond to it by any means, including electronic methods (by email or phone). Additionally, during the booking process, we will ask for your age to ensure that you are at least sixteen (16) years old. This is required because pursuant to European data protection legislation, if you are not over sixteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If your query relates to any product, service or event purchased by you, we might also ask you (as part of the customer support process) specific details about your purchase (transactional information, your ticket locator, date of purchase, type of product purchased, etc.) to ensure that your query is addressed properly. 

Lawfulness basis: by contacting the Controllers via any of the above methods, you expressly agree that your personal data may be processed for this purpose. You may withdraw your consent at any time following the procedure described below in the section “What are my personal data rights?” of this Privacy Policy.

        5.      Surveys submission 

If you purchase any of our products or services (including any of our events) the Controllers will send you surveys by any method, including electronic means (email, SMS, phone calls) intended to gain insights into the degree of customer satisfaction with our products and/or services, their experience, to allow customers to make suggestions, and to enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and the likelihood for our customers to purchase our products and/or services again. The Controllers will process, strictly, the required data to fulfil this process: e-mail address or telephone number, and any non-personal information gathered in the surveys to which you have responded. To this end, the Controllers will process personal data that are strictly necessary for this purpose, in particular your e-mail address or phone number supplied by you at the time of your purchase and the non-personal information included in any surveys to which you have responded.

Lawfulness basis: this processing is based on the Controllers' legitimate interest in obtaining customer feedback related to the products and services purchased by them, their needs, and suggestions, to determine their likelihood for them to purchase again such products and/or services or other similar products and/or services that we offer related to the leisure and hospitality industries, our Annual Passes, events and activities and our position in the industry to identify areas of improvement of our products and/or services and our customers' experience, and to make internal decisions to plan our business operations and our activities. We believe that the interests and fundamental rights and freedoms of our customers are not undermined since, we carry out this processing as part of our contractual relationship with them resulting from their purchase of our products and/or services. We use personal data and basic, non-sensitive information to the extent strictly necessary. We do not send surveys to individuals under 16, and we only target customers who have recently purchased our products and/or services. As a result, we understand that by purchasing our products and/or services and having been specifically informed about the processing of their personal data, our customers may have a reasonable expectation regarding the processing of their personal data for this purpose. Customers may object, at any time, to the processing of their personal data or exercise any other rights under applicable data protection regulations in accordance with the procedure described below in “What are my personal data rights?” of this Privacy Policy. 

        6.      Sending you marketing information, discounts and promotions

Only if you expressly authorize us to do so via any of the forms available on this web site (e.g. online purchase form, contact or request for information form, event booking form, schools and groups visit booking form, newsletter subscription form etc.) will we process your personal data to send you commercial information and information on discounts and promotions by any means, including electronic methods (e-mail, SMS, phone) about products and services of any of the European companies of the Parques Reunidos Group  (you may find a list of these companies in the section “Companies of the Parques Reunidos Group in Europe” of this this Privacy Policy), related to the leisure or hospitality industries, Annual Passes or events run by any of these companies, also subject to prior profiling and analysis of your preferences via automated decisions so that we can suggest products and services that we think may be of interest to you. To send you this information, the Controllers will process your name, surname, your e-mail address or your phone number provided by you.  

To ensure the quality of your data, the Controllers use a two-step verification process. If you agree to the processing of your personal data for this purpose, you will receive an e-mail asking you to confirm your email and that your data can be processed for this purpose.

Profiling will be based on automated decisions to ensure that any commercial information, discounts and promotions you receive are of interest to you. We will perform this profiling according to our own sources based on our stored information provided directly by you (age, country and postal code), from your purchase history and details of the products and/or services purchased by you and, only if you expressly authorize us to do so by ticking the appropriate box on the data collection forms on this website (e.g. purchase form, booking form, information request form, contact form or newsletter subscription form, among others), in information provided by you in the surveys in which you have participated. 

Based on the above information automated decisions will be made based on your transaction history (type of products and services purchased, whether you are a Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), analysis of your reactions to our marketing communications (i.e. your decision or not to purchase the product or service offered) and, only with your express permission, the information you provide in the surveys you respond to (surveys designed to find out about your level of satisfaction, your experience and to allow you to make suggestions regarding purchased products and/or services, and to enable us to get insights into our position in the market and whether you are likely to purchase our products and/or services again).

This profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you. This profiling will only be used to send you commercial information, discounts and promotions on products, services, events or activities of the Parques Reunidos group that we believe may be of interest to you on the basis of the criteria described above.  

Lawfulness basis: we will only process your data if you give us your express consent to do so by ticking the box specifically included for this purpose in the forms available on this website (e.g., online purchase form, information request form, group and school visit booking form, newsletter subscription form, etc.). Please note that you may, at any time, withdraw your consent or exercise your rights as provided below in the section “What are my data protection rights?” of this this Privacy Policy. In addition to the above methods, we would like to remind you that you can opt out from these commercial communications following the procedure made available to you for this purpose on each marketing communication you have expressly authorized us to send to you. 

If you have expressly authorized us to use the information in the surveys to which you have responded for profiling purposes and send you relevant commercial information, you may also, at any time, exercise your rights and withdraw your consent or exercise your objection rights in accordance with the procedure described below in the section “What are my data protection rights?” of this this Privacy Policy.  

We would also like to remind you that you may also object to profiling based on automated decisions, request human intervention, give your point of view, resolve any queries about and object to automated decisions by sending your request to the Data Protection Officer following the procedure indicated below in the section “What are my personal data rights? of this Privacy Policy. 

        7.      Satisfaction survey

We also use your e-mail address and name to send you a satisfaction survey by e-mail after your visit to our facility. You can object to this at any time by sending us an e-mail to datenschutz@moviepark.de. You will also be informed about this separately during the order process. For this purpose, no transmission costs are incurred on our part for you. We do this on the basis of a legitimate interest in constantly improving our services for you. Your answers are stored exclusively in anonymous form. The legal basis is Art. 6 para.1 lit f in conjunction with. § 7 para. 3 UWG.

        8.      Using information collected on surveys as an additional profiling resource  

If you have expressly given us your consent by any of the forms included on this web site (online purchase form or event, group and school visit booking form), we will process your personal data (e-mail address and telephone number) and any non-personal information collected in the surveys to which you have responded (surveys intended to find out the degree of customer satisfaction with the products and/or services purchased, their experience and to allow customers to make suggestions and enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and whether our customers are likely to purchase our products and/or services again) will be processed as an additional parameter for profiling and for analysing your preferences to ensure that we send you relevant commercial, discounts and promotions information by any means, including electronic means (e-mail, SMS, and telephone calls) about the products and services of any of the European companies of the Parques Reunidos Group (a list of these companies is included in the section "European Companies of the Parques Reunidos Group" in this Privacy Policy) related to the leisure and hospitality industry, Park Passes, events and activities run by these companies consistent with your preferences and as long as you have authorized us to do beforehand.

Your profile will be developed using the following parameters: your history of transactions (type of products and services purchased, whether you are an Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which the Controllers will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), the analysis of your reactions when you receive any commercial communication (i.e. your decision or not to purchase the product or service offered by this commercial communication) and, only with your express permission, the information without personal data that you provide in the surveys you have chosen to respond to.  

Please note that based on your profile, automated decision will be made to suggest you commercial information, discounts and promotions of products, services and events that we believe may be of interest to you according to the parameters detailed above. In any case, this profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you. 

Lawful basis: we will only process your data if you give us your express permission to do so by ticking the box specifically included for this purpose in the ticket or event online purchase form or in the group and school visit booking form and if you have expressly authorized us to send you commercial information in accordance with the terms specified in this Privacy Policy. Otherwise, this processing will not occur.  

If you do not agree that the information provided in surveys may be used as additional criteria for profiling purposes, you may withdraw your consent or exercise your right to object by following the procedure indicated below in the section “What are my personal data rights?” included in this Privacy Policy. 

We would also like to remind you that you may also object to profiling based solely on automated decisions, request human intervention, give your point of view, and resolve any queries about and object to automated decisions by sending your request to the Controllers' DPO following the procedure described below in the section “What are my personal data rights?” of this Privacy Policy 

Finally, your data will also automatically ceased to be processed for the purpose described in this section if you ask us to unsubscribe from our commercial communications via any of the methods that will be made available to you on each commercial communication that you receive or through any of the methods described in the section “What are my personal data rights?” in this Privacy Policy.

        9.      Use of cookies and related technologies  

On this web site the Controllers use own and third parties cookies and similar technologies (HTTP Cookies, Pixel Tracker and Premises and Local Shared), which means that Controllers may process and store information and personal data about users when they browse through this web site, in accordance with the purposes and settings that are made available to users at all times.

For complete information on our use of cookies and similar technologies and the processing of your personal data, please visit our Cookies Policy.  

        10.   Compliance with legal obligations

When you provide personal data through the means available on this website, such personal data and, where applicable, the information related to the purchase any of our products, services or events will be processed to allow Controllers to comply with any legal obligations applicable to them as a result of their contractual relationship with you and the processing of your personal data. Such obligations result from tax, personal data protection, commercial, consumer protection, information society services and e-commerce, civil law, and accounting regulations, among others. 

Your personal data provided by you will be processed only to the extent required by the Controllers to comply with applicable legal duties. Such personal information may include: your name, surname, ID, email, telephone number, zip code, country, address, purchase or booking transaction information (location, date, means of payment, proof of payment and reservation details), browsing and device data in accordance with the provisions of the Cookies Policy, criteria, mechanisms and logic used to make automated decisions for profiling purposes, and any other personal data which may have been generated and which the Controllers must process to meet their legal duties. 

Lawful basis: to comply with legal obligations applicable to the Controllers under European Union law and/or applicable domestic laws. Without your personal data, the Controllers would not be able to adequately comply with their legal duties or discharge any legal liabilities arising from their relationship with you or from the processing of your personal data.  

        11.   Management of bookings and placing of orders for the use of the Speedy Pass

a) Usage data

When you purchase a Speedy Pass, we collect personal data that you provide when you place your order to enable you to visit use the Speedy Pass. These are:

• Email address

This information is transmitted to our partner Accesso for handling and stored there. A storage of this data together with other personal data does not take place. The storage also takes place for the subsequent handling of support requests.

b) Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

c) Purpose of data processing

The temporary storage of the e-mail address by the Accesso system is necessary to transmit a confirmation of the booked Speedypasses, to clearly identify the customer and to ensure subsequent support for the customer. In these purposes also lies our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

An evaluation of the data for marketing purposes does not take place in this context.

d) Duration of storage

The e-mail address is stored in the Accesso system for a maximum of 6 months.

e) Possibility of objection and elimination

The collection of the data and the storage of the data is mandatory for the operation of the website bwz. the processing of the Speedy Pass. Therefore, there is no possibility for you to object.

12. Biometric access procedure for season pass holders

If you wish to use a designated entrance with a biometric scanner for season pass holders, the data processing is as follows:

When you use the turnstile for the first time, a photo of your face is taken, which is stored for a fraction of a second and then immediately deleted. Beforehand, intelligent software uses this photo to create so-called biometric measuring points, which it stores on an array in a form that cannot be read by humans. Although the data is also encrypted, it can never technically be made "readable". The array is linked to your season pass number.

On all subsequent visits, the scanner takes another picture and compares the stored measuring points to check whether you are the same person as on your first visit and whether your season pass number is still valid. The image is automatically deleted immediately afterwards. The location, access date and time as well as denied access attempts are saved. The arrays are deleted when the season pass expires. The information on season pass numbers and the access location and times are deleted at the end of the season. The data is not passed on to third parties. Only the data on access time, location and season pass number are processed by our contract processors. Data is not transferred to third countries.

If you believe that you have been denied access without authorization, please visit our colleagues at the side entrances next to the turnstiles. Your right to entry is not affected by the result of the scanner. There is no automated decision-making within the meaning of Art. 22 GDPR.

You are not obliged to use the entrances with biometric scanners. There are other access points available to you.

If you wish to revoke your consent to use the biometric access turnstiles, you must do so in writing at the Visitor Welcome Center. You can then use the side entrances and the staff will check and scan your season pass manually.

13. Processing of your access data to our park at scanner turnstiles / gates

When you visit our park, your tickets are scanned at the entrances. As a result, we store the date and location of access together with your purchase data. We do this on the basis of our legitimate interest in effective internal financial accounting and to be able to detect fraud. This data is deleted at the end of the season. 

If your personal data are processed for purposes related to manage the product and / or service purchase, manage of bookings, contracting and events celebration (birthday parties, weddings, first communions, corporate events etc.) or manage of bookings and contracting visits from schools and groups, such personal data will be processed for the duration of the contractual relationship maintained with you for the purchased product and/or service or event contracted. If for customizing your event (e.g. decoration) you provide the personal data of a child under sixteen (16) years of age (including his/her name, surname and age), please note that the Controllers will only retain such personal data for such time as is necessary to customize your event and until this is finished, unless you decide to withdraw your consent or exercise your right to object to the processing as the child's parent or guardian, in which case we will implement your request. 

If your personal data are processed for customer support purposes, the Controllers will retain your personal data for such time as is strictly necessary to process and fulfill your request. If you submit a claim, your personal data will be processed for such time as is strictly necessary to properly address your claim. Thereafter, your personal data will be blocked in accordance with the procedure described later in this section to address any liabilities that may arise from your claim and only for the applicable statute of limitations period. 

Where the Controllers process your personal to send you surveys, they will retain your personal data for up to 12 months unless you request that your personal data be deleted or you otherwise object to the processing, in which case your personal will immediately ceased to be processed for this purpose. 

If you expressly consent to receiving commercial information and information on discounts and promotions under the terms described in this Privacy Policy, your personal data will be processed strictly to satisfy this purpose and until you withdraw your previously given express and informed consent, you send us an unsubscribe request via any of the means made available for this purpose on each of the commercial communications that you will receive or until you exercise your rights of erasure, objection or your right not to be subject to automated decisions, including profiling. In all such cases, your personal data will cease to be processed for this purpose. 

If you expressly consent to use the information collected on surveys as an additional profiling resource  under the terms specified in this Privacy Policy, your personal data and non-personal information included in such surveys will be processed only for this purpose until you withdraw your express and informed consent, or until you send us an unsubscribe request via any of the means made available for this purpose on each of the marketing communications that you will receive, or until you exercise your rights of erasure, objection or your right not to be subject to automated decisions, including profiling. In all such cases, your personal data will cease to be processed for this purpose. 

When your personal data are no longer relevant for the purposes for which they were collected or if you withdraw your consent or exercise your right of erasure or objection to the processing, the Controllers will your personal data duly blocked (identification and reservation of the personal data, adopting technical and organizational measures to prevent their processing, including their viewing) to make them available, if necessary, to the competent Public Administrations and in particular to the competent Data Protection Control Authority, Judges, or the Public Prosecutor's Office during the statute of limitations period for legal actions that may arise from the relationship maintained with you or from the processing of your personal data and/or the legally established retention periods in accordance with European Union Law and/or domestic regulations. Upon the expiry of these periods, we will proceed to the physical and irretrievable deletion of your personal data. 

Only if required to meet possible legal liabilities or to comply with statutory retention periods, your personal data may be disclosed to competent Public Authorities and in particular to the relevant Data Protection Control Authority, Judges, Courts or the Public Prosecutor's Office in accordance with European Union Law and/or domestic regulations.

The Controllers rely on third party suppliers who may also process your personal data to provide services related to the purposes for which you are being informed including, but not limited to, information security, customer relationship management (CRM), technology, legal consulting, marketing, customer service, professional services, and IT companies. These providers will only access your personal data to perform their services on behalf of the Controllers, following at all times the Controllers' instructions and without ever being authorized to use such data for their own purposes and/or unauthorized purposes. One of these providers is Salesforce, a global company which provides cloud marketing platform services. If you provide your personal data via any of the forms available on this website (other than the online ticket purchase form), or you agree to receive commercial information or that the information you provide in any surveys may be used as additional resource to create your profile to send you this commercial information, Salesforce will process your personal data on our behalf within the European Economic Area (EEA) and in compliance with applicable European data protection regulations. Exceptionally, for example, in the event of a disaster recovery situation (i.e. the process to recover data and functionalities lost in the event of an accidental or a man-made disaster), Salesforce may also provide its services through companies outside the EEA, for which your personal data may need to be processed in countries that do not offer a standard of protection commensurate with the level of protection offered by European data protection legislation (e.g. the USA). In these cases, the Controllers have entered into binding contractual commitments with Salesforce which guarantee the implementation of appropriate security measures to ensure that your personal data are at all times processed with an adequate level of protection comparable to that required in the EEA (standard contractual clauses approved by the European Commission on data protection in accordance with the European Data Protection Regulation (GDPR), additional security measures in accordance with decision C-311/18 of the Court of Justice of the European Union and subject to certification mechanisms). For further information, please do not hesitate to contact the Data Protection Officer at any of the addresses (postal or e-mail) indicated in the section “What are my personal data rights?”  in this Privacy Policy. Please remember that you may withdraw your consent and/or exercise your rights at any time in accordance with the provisions of the relevant section of this Privacy Policy or request to unsubscribe from our commercial communications via any of the methods that will be made available to you for this purpose in each commercial communications that you will receive if you have given us your express consent to do so. 

If you expressly agree to receive commercial information, and information on discounts and promotions about products and services of the European companies of the Parques Reunidos Group related to the leisure and hospitality industries, Annual Passes, events and activities run by these companies, including subject to prior profiling and analysis of your preferences via automated decisions to ensure that we are able to offer you information on the products and services that we believe may be of more interest to you, you should know that these companies are located in the European Union and their principal activity is the management and operation of leisure parks, water parks, zoos, aquariums, and travel related services, such as the sale of hotel packages and tickets to parks and leisure centers of the Parques Reunidos Group. Specifically, these companies are: 

• Spanish companies of the Parques Reunidos Group: Parques Reunidos Servicios Centrales, S.A. (Parks Pass); Parque de Atracciones Madrid, S.A.U. (Parque de Atracciones Madrid); Madrid Theme Park Management, S.L.U. (Parque Warner y Parque Warner Beach); Gestión Parque de Animales Madrid, S.L.U. (Faunia); Zoos Ibericos, S.A. (Zoo Aquarium Madrid); Parques de la Naturaleza Selwo, S.L. (Selwo Aventura y Hotel Selwo Lodge); Aquópolis Cartaya, S.L.U. (Aquópolis Cartaya); Leisure Parks, S.A. (Aquópolis de Villanueva de la Cañada, Aquópolis Costa Dorada - Vilaseca, Costa Dorada-,  Delfinario Costa Dorada – Vilaseca, Costa Dorada, Selwo Marina Aquópolis de Sevilla, Aquópolis de Cullera, Aquópolis de Torrevieja, Teleférico de Benalmádena); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium); Mall Entertainment Centre Murcia, S.L.U. (Nickelodeon Adventure Murcia); Travelpark Viajes, S.L.U. (products and services related to packages combining entrance fees to parks and leisure centers of the Parques Reunidos Group and hotel accommodation bookings). 

• Rest of European companies of the Parques Reunidos Group: Italia - Parco della Standiana S.R.L (Miraiblandia y Mirabilandia Beach) and Travelparks Italy, S.R.L.( products and services related to packages combining entrance fees to parks and leisure centers of the Parques Reunidos Group and hotel accommodation bookings); Norway - Tusenfryd A/S (Tusenfryd) y Bø Sommarland AS (Bo Sommarland); Belgium - Bobbejaanland, B.V.B.A (Bobbejaanland); BonBon-Land A/S (BonBon -Land); Germany - Movie Park Germany GmbH and Movie Park Germany Services GmbH (Movie Park), Event Park GmbH (Belantis), Nature Park Germany GmbH (Vogelpark Walsrode), Tropical Island Management (Tropical Island) and TI Hotel Asset GmbH (Tropical Island Hotels); The Netherlands - Attractie- at Vakantiepark Slagharen B.V. (Slagharen y Slagharen Beach); France - Marineland SAS (Marineland, Aquaplash Marineland, Marineland Resort and Kids Island) and LB Investissement (Aqualud); England- Grant Leisure Group LTD (Blackpool Zoo), Real Live Leisure Company LTD (The Bournemouth Aquarium y Aquarium of the lakes) and Lakeside Mall Entertainment Centre Limited (Nickelodeon Adventure-Lakeside). 

You may exercise your right of access, rectification, objection, limited processing, portability and, where appropriate, your right not to be subject to automated individual decisions, including profiling, by sending your request by post to the attention of the Data Protection Team via Warner Allee 1, 46244 Bottrop, Germany or via mail:DSB@moviepark.de. In either case, please attach a copy of your Identity Card or equivalent document so that we can verify that you are the owner of the personal data on which your request is based. For consent-based processing operations, please note that you can withdraw your consent or object at any time to the processing of your data following the procedure described in the previous paragraph.

If you have expressly authorized us to send to you commercial information or information about discounts and promotions, including subject to prior profiling and analysis of your preferences via automated decisions for relevance, you may also unsubscribe from this type of communications by using the methods that will be made available to you for this purpose in each commercial communication that you will receive.

Finally, please note that you can also tell us not to be subject to decisions based exclusively on the automated processing described above, or ask us for human intervention, express your point of view, raise any queries about or object to automated decisions by sending your request to the Data Protection Officer at any of the addresses indicated in this section. 

The personal data processed by the Controllers are provided directly by you as the data subject through this website and/or during the relationship with you. 

If you provide personal data of third parties, you agree to obtain their express and informed approval to provide their personal data to the Controllers in accordance with the provisions described in this Privacy Policy. 

Children under sixteen (14) years of age are not authorized to purchase or book our products, services or events on this website. 

However, if as a result of purchasing any of our products, services or events available on this web site and, particularly following an event, you voluntarily decide to provide personal data of a child under sixteen (16) years of age,  you will be deemed to have given your express and informed consent as father, mother or guardian to process the personal data as part of the contractual relationship arising from your purchase pursuant to the provisions of this Privacy Policy. 

Responsible party: Parques Reunidos Servicios Centrales S.A. Address, Data processed: Treatment * Treatment *, first name,* last name *, e-mail address *, postal code / age* / *country /,cell phone / mobile, winnings, tracking information (id of the survey). We use the data name, e-mail address and age to carry out the competition, your tracking data is used to evaluate your number of participations in the raffle. We delete this data after the raffle is completed.  We work with a processor for the implementation (Netquest). Your data may be transferred to the USA, for which corresponding standard contractual clauses have been concluded. Your data will not be passed on to third parties. Controller is PQR.

As part of our efforts to constantly improve, we may ask you to take part in surveys about our products. If you take part in these surveys, they will be analyzed anonymously. However, we do store whether you have taken part in a survey to evaluate the number of participations in the raffle. Your answers will be stored in an anonymized way. The numbers of your participations will be deleted after the raffle. We conduct these surveys either on the basis of your consent or our legitimate interest in effective marketing and further improvement of our services. It is possible that we may involve processors with whom we have concluded order processing contracts and, where applicable, the necessary standard contractual clauses in order to carry out the surveys. PQR is responsible for surveys under data protection law. If you do not wish to receive further surveys by e-mail, please contact dpo@grpr.com or use the methods provided in the e-mails to unsubscribe from the surveys.

In some surveys, you will be asked at the end of the survey whether you agree to us saving your answers in a personalized way. We do this so that you receive our marketing communications (if you have consented to commercial marketing) in a form that is already tailored to your preferences. We do this only on the basis of your consent and  by collecting your data from this questionnaire as part of a profile and merging and analyzing it with other data.  (Evaluation of questionnaires, demographic criteria based on country or postal code, transaction information - purchase history and type of product purchased - and socio-demographic parameters - age of the purchaser. ...). It is possible that we may involve processors with whom we have concluded order processing contracts and, if applicable, the necessary standard contractual clauses in order to carry out the surveys. You can revoke your consent at any time at dpo@grpr.com.

You may lodge a claim with the Data Protection Control Authority (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen) via poststelle@ldi.nrw.de to protect your rights at any time you deem appropriate. However, we advise you to approach first our Data Protection Team via DSB@moviepark.de to seek assistance with your request and to resolve any incident related to the processing of your personal data.

For your enquiry about celebrations (company or birthday parties) at Movie Park Germany, you have the option of using our "Event Form". In order to process your request, the following data is required for your entry:

·        Selection of the reason for the event
·        Salutation, first name and last name
·        E-mail address
·        Postal code
·        Number of children & adults
·        Selection of location
·        Your text message to us

In the case of an inquiry from a company, the following broad fields are mandatory:
·        Company Name
·        Industry

In addition, you can optionally (voluntarily) leave us the following data at this point:

·        Date & time of visit (in order to be able to provide you with an even more personalized offer)
·        Mobile phone (for telephone feedback, if desired)
·        Gastronomic offer desired, if so, with indication of the number of people (in order to be able to make you an even more individual offer)
·        Date of birth (you will receive a personalized gift from us)

In order to process your request, we will forward your data via our parent company (Parques Reunidos – see Controller) to our service provider Salesforce:

Salesforce Spain S.L., Paseo de la Castellana 79, Planta 7ª, Madrid, Spain, 28046

After the statutory retention period, this data will be deleted immediately or only processed anonymously (no conclusions can be drawn about your person).

The legal basis for this collection is Art. 6 (1) (b) GDPR.

This Privacy Policy was last updated in June 2024