Privacy

Adventure World GmbH, Isekai 13, 20249 Hamburg, represented by managing director Mathias Kahle, is responsible for processing personal data on this website. Telephone: +49 40 226 3 227 0. Email: service@kja.hamburg.

This policy describes data processing when you visit this website, contact us or access the documents provided here. When you book on a linked website, the privacy notices provided there also apply.

This website is delivered through Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you access the site, Cloudflare processes technical connection data, particularly your IP address, the date and time, requested pages and files, browser information, operating system and, where applicable, the referring page. This is necessary to deliver content, keep the website running reliably and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure and reliable website. Access data is processed only for as long as necessary for these purposes. In the event of a security incident, longer retention may be necessary to investigate it.

Cloudflare also processes data outside the EU. Cloudflare is certified under the EU-US Data Privacy Framework for transfers to the USA. Its Data Processing Addendum also provides for standard contractual clauses. Further information and contractual safeguards are available from Cloudflare.

Technical support is provided by ecomno GmbH, Rugenbarg 70, 22848 Norderstedt. Service providers receive only the access they need for their tasks. Processing by processors is governed by Article 28 GDPR.

We use marketing cookies and similar technologies, specifically the Meta Pixel and TikTok Pixel, only if you have given your consent in the cookie banner (sections 5 and 6). Without your consent, these services are not loaded and no data is transferred to Meta or TikTok. The website uses no other analytics or marketing services. Your cookie banner selection is saved in your browser's local storage (section 4).

When you close a notice, we save that choice in your browser's local storage. The entry contains the notice ID and version and the status "closed", but no contact details. This prevents a notice you have closed from appearing again. It remains saved until you delete the website data in your browser. A new version of the notice may appear again.

This storage supports the website display you have selected (section 25(2), no. 2 TDDDG). Where personal data is involved, the legal basis is Article 6(1)(f) GDPR. You can remove the saved choice through your browser's website data settings.

If you select a language manually, we save your choice in your browser's local storage under "kja-language". This entry contains no contact details and is not transmitted to us or third parties. On an initial visit to the homepage, the website suggests a language based on your browser languages. If these are unavailable, it uses the country code supplied by our hosting provider Cloudflare. We do not use a precise location, request geolocation permission or contact an external location service for this purpose. You can change the language at any time using DE/EN and delete the saved choice through your browser's website data settings.

On your first visit, our own cookie banner asks whether you agree to the use of the Meta Pixel and TikTok Pixel. You can reject all services, accept all services or decide separately for each service in the settings. No option is preselected. We do not use an external service for the banner.

Your selection is saved in your browser's local storage (localStorage). The entry records whether you consented to each service, the time of your decision and the banner version. It is not transferred to us or to third parties. Your selection remains valid for 12 months or until you delete it. We ask again after that period or if the services or purposes change. You can remove the entry at any time through your browser's website data settings.

Saving your selection is strictly necessary so that we can respect your decision (section 25(2), no. 2 TDDDG). The legal basis for processing is Article 6(1)(c) GDPR in conjunction with section 25(1) TDDDG and Article 7 GDPR, because we are required to respect your decision and to store or access information on your device only with your consent.

You can change your selection and withdraw consent with future effect at any time through the "Cookie settings" link in the footer. When you withdraw consent, the website removes the cookies that the relevant service has set under our domain and reloads the page. You can delete cookies that Meta or TikTok have stored on their own domains in your browser.

With your consent, we use the Meta Pixel. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). We use the pixel to measure how visitors use our website after seeing or clicking an advertisement on Facebook or Instagram (reach and conversion measurement). We can also create audiences for our advertising on Facebook and Instagram, for example to show further advertisements there to visitors to our website (remarketing).

When the pixel loads, Meta processes in particular your IP address, browser and device information, the page visited (URL) and referring page, the time of the visit, the pixel ID, cookie identifiers and, where applicable, information about button clicks. Contact details such as your name, email address or telephone number are not transferred. This website has no forms in which you can enter such information. If you are logged into Facebook or Instagram, or if Meta has already stored cookies in your browser, Meta may associate your visit with your account.

We and Meta are joint controllers for the collection of this data on our website and its transfer to Meta (Article 26 GDPR; see CJEU judgment of 29 July 2019, C-40/17, Fashion ID). The Controller Addendum applies between us and Meta. It provides that we supply you with information about joint processing and that Meta is responsible for enabling you to exercise your rights under Articles 15 to 20 GDPR concerning the data that Meta stores after transfer. You can also exercise your rights directly with Meta. Meta is independently responsible for further processing of the transferred data. You can find information about this, including Meta's legal bases and your rights in relation to Meta, in Meta's privacy policy. Where Meta uses the data to prepare measurement and analytics reports for us, Meta acts as our processor (Article 28 GDPR).

The legal basis for storing and accessing information on your device is your consent under section 25(1) TDDDG, and for further processing it is your consent under Article 6(1)(a) GDPR. The pixel sets the "_fbp" cookie (a random identifier for your browser) under our domain and, if you reach us through a Meta advertisement, the "_fbc" cookie (a click identifier). These cookies are stored for 90 days. Under the Meta Business Tools Terms, Meta may store the transferred event data for a maximum of two years. Audiences created from this data remain stored until we delete them.

Meta also transfers data to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR).

You can withdraw your consent with future effect at any time through "Cookie settings" in the footer. If you use Facebook or Instagram, you can also specify in your Meta account's cookie settings whether Meta uses information about your activities on other websites. General information about online behavioural advertising and opt-out options is available from Your Online Choices.

With your consent, we use the TikTok Pixel. The providers for the European Economic Area are TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, D02 HD23, Ireland, and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom (together "TikTok"). We use the pixel to measure how our TikTok advertisements affect use of our website. We can also create audiences for our advertising on TikTok, for example to show further advertisements there to visitors to our website.

When the pixel loads, TikTok processes in particular your IP address, browser and device information (user agent), country and language setting, the page visited (URL), the time of the visit, the pixel ID and cookie identifiers. Contact details such as your name, email address or telephone number are not transferred. This website has no forms in which you can enter such information. TikTok may associate this data with people who use TikTok.

Under the TikTok Business Products (Data) Terms and the supplementary Jurisdiction Specific Terms, we and TikTok are joint controllers (Article 26 GDPR) for the collection of data on our website and its transfer to TikTok, and for the preparation of measurement and analysis reports. The Joint Controller Terms contained in those documents provide that we supply you with information about joint processing and that TikTok is responsible for enabling you to exercise your rights under Articles 15 to 20 GDPR concerning data that TikTok stores after the joint processing. We and TikTok are each independently responsible for audience creation and advertising delivery, advertising improvement and personalisation, and security, fraud prevention and product development. Information about TikTok's processing, including its legal bases and your rights in relation to TikTok, is available in TikTok's privacy policy.

The legal basis is your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. The pixel sets cookies under our domain including "_ttp", "ttcsid" or "ttcsid_" followed by the pixel ID, and "ttclid" if you reach us through a TikTok advertisement. It also creates technical entries in your browser's storage. TikTok may also use cookies on its own domains (for example "_ttp" and "_pangle"). According to TikTok, these cookies are stored for 13 months from their last use. Under the TikTok Business Products (Data) Terms, TikTok may store the transferred event data for a maximum of 18 months. Audiences created from this data remain stored until we delete them, but no longer than 12 months after their last modification or use.

TikTok states that it stores data on servers in the USA, Malaysia and Singapore. TikTok group companies outside the European Economic Area receive limited remote access. According to TikTok, these companies are based in countries including China, the USA, Singapore, Malaysia, Australia, Brazil and the Philippines. TikTok states that it relies on standard contractual clauses (Article 46 GDPR) for transfers to countries without an adequacy decision from the European Commission.

You can withdraw your consent with future effect at any time through "Cookie settings" in the footer. If you use TikTok, you can also control personalised advertising in your TikTok account settings.

The Exo 2 and Inter fonts and the images and flags used are delivered locally with the website. This does not establish any connection to Google Fonts, Unsplash or FlagCDN.

Videos are provided through a standard video player. No YouTube or Vimeo players are embedded.

Downloading a form does not send us any information you enter in it later. Please submit completed documents on site as instructed. Information about processing the data they contain is provided in the relevant form.

When you contact us, we process your contact details and the content of your message to handle your enquiry. For questions about a booking, the legal basis is Article 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in responding under Article 6(1)(f) GDPR.

We use Microsoft 365 for our email mailbox. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, which acts as our processor under Article 28 GDPR. Processing by Microsoft Corporation in the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework for transfers to the USA. Standard contractual clauses also apply.

We delete enquiry data once the matter has been fully resolved, unless statutory retention obligations or the necessary establishment, exercise or defence of legal claims prevent deletion. Providing data is voluntary. Without a means of contacting you, we may be unable to answer an enquiry.

Tickets and event bookings are offered through links to Fever. You do not enter payment details on this website. Only when you open the booking link do you go to Fever, where its privacy notices apply.

Google Maps, Westfield, Instagram, TikTok and other services are also provided only as links. No map window or social media plugin is embedded. Simply visiting our website therefore does not transfer data to those services for the use of these links. After you click a link, the relevant provider's notices apply. This is separate from the use of the Meta Pixel and TikTok Pixel, which load only with your consent (sections 5 and 6).

Subject to the GDPR, you have the right to access your personal data (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). To exercise these rights, contact service@kja.hamburg.

Where processing is based on consent, you can withdraw it at any time with future effect. This does not affect the lawfulness of processing carried out before withdrawal.

Right to object under Article 21 GDPR: Where processing is based on Article 6(1)(f) GDPR, you can object on grounds relating to your particular situation. We will then stop processing the data unless overriding compelling legitimate grounds or the establishment, exercise or defence of legal claims apply. You can object to processing for direct marketing at any time.

You can lodge a complaint with a data protection supervisory authority. In Hamburg, this is the Hamburg Commissioner for Data Protection and Freedom of Information. Current contact details are available on its website.

We do not ourselves make automated decisions, including profiling, within the meaning of Article 22 GDPR. With your consent, Meta and TikTok may also use the data collected through their pixels under their own responsibility to personalise advertising (sections 5 and 6).

The public website uses HTTPS to encrypt data during transmission. We update this privacy policy when functions or the services used change. Last updated: October 2026.