Privacy Policy
Through this notice, “Cream Entertainment, S.L.” (hereinafter “Prison Experience”) informs users of the website www.prison-experience.com, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) and other applicable regulations, about its personal data protection policy. The purpose is to allow users to decide expressly, freely, and voluntarily to provide “Prison Experience” with the personal data requested, either for information requests or for contracting the various products offered within the scope of organizing recreational activities.
Unless otherwise specifically stated, it is considered necessary to complete all required data in the form or analogous document truthfully, accurately, completely, and up to date. Otherwise, “Prison Experience” may, depending on the case, refuse to register the user or deny the requested service. All data provided by the user/data subject will be processed in accordance with the details outlined below.
Information regarding the processing of personal data
Data controller identification: “Cream Entertainment, S.L.”, located at C/Antic de Bofarull 15, 08026 Barcelona, with Tax ID number (NIF) B67222786, registered in the Barcelona Mercantile Registry. Contact email: info@prison-experience.com
Purpose of the processing
All data provided will be processed for the following purposes:
Responding to requests made by the data subject.
Organizing the escape rooms.
Maintaining any established relationship.
Management, administration, information, provision, and improvement of the contracted services.
Commercial communications related to our products and services.
Personal data will be retained as long as the commercial relationship lasts, the data subject does not request its deletion, or they are necessary for the purposes of processing. Data will not be deleted when there is a legal requirement for retention, in which case the data will be blocked and kept available only to public administrations, courts, and tribunals to address any liabilities arising from the processing, during the applicable statute of limitations period.
Currently, no automated decision-making, including profiling, is carried out based on your personal data. If such automated decisions are implemented in the future, prior consent will be obtained.
Legal basis for processing
All processing of your personal data is based on your prior and explicit consent. You will be informed in advance of all legal requirements so that you can give informed consent.
You may withdraw your consent at any time as detailed later in this document.
Minors
For minors under fourteen years old wishing to register as users, documentation proving parental or legal guardian consent for data processing must be provided, which is mandatory to access our content. We expressly request that parents or guardians take appropriate measures to prevent minors from registering, using parental control software or similar systems, and to notify us if they suspect a minor has registered. “Prison Experience” reserves the right to request identity verification documents from the user when there are doubts about the truthfulness of the data provided, and may refuse service if the user does not comply.
“Prison Experience” has established reasonable control mechanisms to prevent minors under fourteen from using the offered services.
Recipients, disclosures, and transfers of data
Your data will not be disclosed except when strictly necessary to fulfill the aforementioned purposes or when legally required.
Similarly, your data will not be transferred outside the European Union unless necessary for these purposes and with your prior explicit authorization.
Image rights
Cream Entertainment S.L. reserves the right to use photos and videos for its social media accounts related to Prison Experience Barcelona.
Rights of the data subject
You may exercise your rights at any time by sending a postal letter to “Prison Experience”, C/Antic de Bofarull 15, local, 08026 Barcelona; or by email to info@prison-experience.com. The request must include your full name, proof of identity or legal representation, a document proving representation (if applicable), a clear statement of the request, address for notifications, date and signature, and any supporting documents. Requests not meeting these requirements will be subject to correction.
Your rights include access, rectification, restriction, portability, objection, and deletion, defined as follows:
Right of access: You have the right to obtain confirmation from the data controller whether your personal data is being processed and, if so, access to that data and certain additional information such as processing purposes, categories of data, recipients, retention periods, rights, origin of data (if not obtained from you), existence of automated decision-making, and guarantees for international transfers.
Right of rectification: You have the right to request immediate correction of inaccurate personal data and completion of incomplete data.
Right of deletion: You have the right to request deletion of your personal data without undue delay when certain conditions apply, such as the data no longer being necessary, withdrawal of consent, objection to processing, unlawful processing, legal obligation, or data collected from minors under the specified conditions. When data has been made public, reasonable efforts will be made to inform third parties processing the data to delete it as well. This right may be limited by other rights such as freedom of expression or legal obligations.
Right to restriction of processing: You may request limitation of data processing under certain conditions, including contesting data accuracy, unlawful processing, or when the data is no longer needed for processing but required for legal claims. During restriction, data can only be processed with your consent or for legal claims or protection of others’ rights.
Right to object: You have the right to object at any time, for reasons related to your situation, to processing based on legitimate interests or public tasks, including profiling. Processing must stop unless compelling legitimate grounds prevail or it is for legal claims. You also have the right to object to direct marketing, which will cease immediately if you object.
Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller when processing is based on consent or contract and is automated. You also have the right to request direct transmission between controllers where technically feasible. This right does not affect the right to deletion and does not apply to processing necessary for public interest tasks.
The data controller will inform you of any rectification, deletion, or restriction made regarding your data to the recipients of the data, unless impossible or disproportionate, and inform you upon request.
Withdrawal of consent
If you have given consent for data processing, you may withdraw it at any time with the same ease. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You have the right to file a complaint with the competent supervisory authority.
If personal data will be processed later for different purposes, you will be informed accordingly.
Security measures
The data controller declares that technical and organizational measures have been adopted to ensure data security and prevent unauthorized alteration, loss, processing, or access, taking into account technology state, data nature, and risks from human action or the environment.
The website www.prison-experience.com contains links to other websites that may be of interest. “Prison Experience” assumes no responsibility for these links and offers no guarantee regarding their privacy policies; users access these external sites under their own responsibility.
If you have any questions, concerns, or recommendations about our Privacy Policy, please contact us via email at: info@prison-experience.com
