Privacy Policy
The protection of your personal data is a matter of particular importance to us. With the following privacy policy, we explain our data protection provisions in an understandable way and, above all, inform you about your rights as a data subject.
I. Controller pursuant to Art. 4 No. 7 GDPR
The controller for the processing of personal data within the meaning of the European General Data Protection Regulation (GDPR) as well as other national data protection laws is:
2Spicy Entertainment GmbH Otto-Volger-Straße 9B 65843 Sulzbach (Taunus) Germany E-Mail: info@2spicy.com
II. Data Processing in General
The processing of personal data is generally only carried out to enable the provision of a functional website, the presentation of content and the provision of our services. Data processing is generally only carried out after obtaining the user's consent, unless this is not possible for factual reasons and/or the processing is permitted by law.
Unless otherwise stated, the relevant legal bases are: consent (Art. 6 para. 1 s. 1 lit. a GDPR), contract performance and pre-contractual measures (Art. 6 para. 1 s. 1 lit. b GDPR), fulfillment of legal obligations (Art. 6 para. 1 s. 1 lit. c GDPR) and legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR).
Personal data is deleted as soon as the purpose of storage no longer applies. Storage beyond this may take place if we are legally obliged to do so.
III. Notification List (Coming Soon / Waitlist)
If you sign up via our form to be informed about the launch of the Secret Society, we process the data you provide: chosen contact method (WhatsApp or email), WhatsApp number including country dial code or email address, selected country, automatically detected country of origin, language and browser locale, as well as the time of your consent.
Processing is based on your consent (Art. 6 para. 1 s. 1 lit. a GDPR) solely for the purpose of informing you about the launch and locations of the Secret Society. You may withdraw your consent at any time with effect for the future, e.g. by e-mail to info@2spicy.com. After withdrawal or once the purpose no longer applies, the data will be deleted.
IV. SSL/TLS Encryption and Server Log Files
For security reasons, our site uses SSL encryption. You can recognize it by the fact that the address bar of your browser begins with "https://" and a lock symbol appears.
When the website is accessed, the hosting provider automatically collects information in so-called server log files (e.g. IP address, date and time of access, browser type). This data serves to ensure trouble-free operation and is not merged with other data sources. The legal basis is our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR).
V. Your Rights as a Data Subject
You have the following rights with regard to your personal data: right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
If you have any questions about data protection, please contact: info@2spicy.com.
Analytics and advertising services
On secret-society.com we use services that measure how our website is used and help us show advertising for Secret Society and measure its success, for example whether an ad led to a booking.
What data is processed
- Browser identifiers and click IDs, device and browser information, IP address and approximate location.
- Pages visited, referral source and interactions such as menu selection, starting a booking and purchase. For a booking, also the booking number, value, currency, menu and city.
- With the relevant consent, hashed email addresses and phone numbers (SHA-256) may be processed to match a booking to an ad.
Services we use
- Google Analytics 4
- Google Ireland Ltd., Dublin. Audience and usage analytics. Privacy policy
- Google Ads (incl. enhanced conversions)
- Google Ireland Ltd., Dublin. Advertising and conversion measurement. Privacy policy
- Meta Pixel and Conversions API
- Meta Platforms Ireland Ltd., Dublin. Advertising on Facebook and Instagram, conversion measurement. Privacy policy
- TikTok Pixel and Events API
- TikTok Technology Ltd., Dublin. Advertising on TikTok, conversion measurement. Privacy policy
Server-side transmission
When you confirm consent, we also send some data through our server. The regional Google Ads default applies only in the browser. It does not trigger server-side transmission or the transmission of contact details.
Legal bases and regional settings
Analytics and advertising through Meta and TikTok require your consent. Google Ads also requires your consent in the EU, EEA, United Kingdom, Switzerland, Türkiye, Brazil, South Korea, China, Saudi Arabia, Thailand, Vietnam and Québec, and when your location is unknown.
Outside these regions, Google Ads may be active when you open a page if your location can be determined reliably. You can opt out through the notice on the page or the cookie settings. Our Cloudflare service uses the IP address to determine the country and, in Canada, the province. It returns only the resulting setting to the website. We keep no visitor logs for this check. We treat the Global Privacy Control (GPC) browser signal as an objection.
Where applicable, processing is based on your consent under Article 6(1)(a) GDPR, and access to your device on Section 25(1) TDDDG. Outside the regions listed above, processing follows applicable local law, including our legitimate interest in marketing our offering where permitted.
Joint responsibility with Meta
We are jointly responsible with Meta Platforms Ireland Ltd. for collection and transmission via Meta Pixel and Conversions API (Article 26 GDPR). Meta controller addendum
Transfers outside the EU
Some providers also process data outside the EU. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on EU Standard Contractual Clauses.
Retention
The website keeps a confirmed choice in a cookie for up to 30 days and a refusal in a cookie for up to 90 days. Provider retention depends on the service and is described in its privacy policy.
Withdrawal and objection
You can change or withdraw your choice in Cookie Settings at any time with effect for the future.
2Spicy Entertainment GmbH, Otto-Volger-Straße 9B, 65843 Sulzbach (Taunus), Germany · info@2spicy.com