Privacy policy
This policy explains how we use your personal data when you browse this site, when you contact us, when you book an experience or when you subscribe to our newsletter.
Who is responsible for your data?
Spes Salutis, 63 rue de Malte, 75011 Paris, France (RCS Paris 882 659 501), operates this site and handles enquiries and newsletter subscriptions. For bookings and invoices, the seller identified on your invoice is responsible for the processing necessary to provide the service: Clue&Co (RCS Paris 830 581 252) for La Crypte and L’Asile, and Spes Salutis for the other experiences. Both belong to the Monuments Ludiques group.
For any question about your personal data, contact contact@ledonjon.fr, specifying the experience or booking concerned.
What data is collected?
Depending on your request, we collect your first and last name, email address, telephone number, company and billing address; booking details (experience, date, time, number of players), gift card information, payment status and references, and the content of your messages. If you book for someone else, we may receive their details from you; please inform them of this policy.
Payment card details are entered on the payment provider’s hosted page (e-Transactions or CAWL, depending on the order). This site receives the information needed to identify and confirm the payment. Technical connection data may also be processed for operation and security. Optional browsing trackers are described below.
Fields marked as required are needed to process the request or booking. Without them, we may be unable to provide the requested service. Newsletter registration and optional cookies are not required to book.
Why do we use this data?
- Quotes, bookings, gift cards and customer support: preparing or performing the contract, including confirmations and reminders by email or SMS.
- Payments, invoicing and accounting: performing the contract and complying with legal obligations.
- Other enquiries, incident handling and service security: our legitimate interests in responding to visitors, protecting the service and defending our rights.
- Newsletter: your consent, which you may withdraw at any time by contacting us. Booking alone does not subscribe you to the newsletter. Your telephone number is not used for commercial prospecting.
- Optional statistics, videos, reviews and campaign attribution: your consent for each purpose, managed through “Cookie settings”.
Who can receive your data?
Recipients include authorised staff of the relevant operator and group services involved in handling your request, as well as providers of hosting, payment, accounting, email, SMS and technical support, within the scope of their work. Data may also be shared with competent authorities or professional advisers when required by law or necessary to handle a dispute. We do not sell your personal data.
The hosting provider is identified in the legal notice. Optional providers and links to their privacy policies appear in the cookies section below. Some providers may process data outside the European Economic Area. Information about the destinations and applicable transfer safeguards may be requested at the contact address above; the providers’ policies also describe their processing.
How long is data kept?
Booking and customer service data is needed to prepare and deliver the experience, handle follow-up and resolve any claim. Further retention is limited to the information needed to meet legal obligations or establish, exercise or defend legal claims, for the applicable statutory period. Accounting records and invoices must be kept for ten years from the close of the relevant financial year.
Enquiry data is needed until the request is resolved, with any further retention determined by the resulting contractual relationship or dispute. Newsletter contact data is used for the subscription; withdrawal ends its use for sending the newsletter. Information strictly necessary to honour an objection may be retained for that purpose.
Cookie choices are kept for six months in your browser, the selected calendar date for 30 minutes and the The Escapers attribution identifier for at most 30 days. Further details on optional storage appear below.
Supervision during the game
As set out in the terms of sale, authorised staff can see and hear players to run the game and ensure their safety. This processing serves the operator’s legitimate interests in supervising the experience and protecting participants. The terms provide for a maximum recording retention period of 15 days. You may contact us about recordings concerning you, specifying the date and time of your session.
Your rights and choices
Subject to the conditions of the GDPR, you may request access, correction, erasure or restriction of your data, object to processing based on legitimate interests, and request portability of data you provided where processing is automated and based on consent or a contract. You may object to direct marketing at any time. You may also give instructions about your data after your death under French law.
You may withdraw consent at any time, without affecting processing lawfully carried out before withdrawal. Use “Cookie settings” for optional trackers, or email us for other requests. Erasure may be limited by obligations to retain accounting records or information needed for legal claims.
Write to contact@ledonjon.fr or the postal address above. Please specify your request and the information needed to locate your booking. Additional identity verification may be requested if there is reasonable doubt about your identity. A response is due within one month; this may be extended by two months where necessary due to the complexity or number of requests, with an explanation within the first month.
You may lodge a complaint with the French data protection authority, the CNIL, or the competent supervisory authority in your country. This policy may be updated to reflect changes in the service or applicable rules.