Privacy policy
1. Introduction
Thank you for your interest in BAAM Kids Village, our indoor children’s play area and parent-child café.
The protection of your personal data is important to us. This Privacy Policy explains which personal data is processed when you use our website, for what purposes it is processed, and what rights you have.
2. Data Controller
The controller responsible for data processing on this website is:
BAAM Kids Village
Ludwig-Wolker-Straße 2
55252 Mainz-Kastel
Germany
Telephone:
06134 256 9995
06134 564 1188
Email:
info@baam-kidsvillage.de
3. Hosting and Server Log Files
When you visit our website, your browser automatically transmits information to our website server.
This may include, in particular:
- IP address of the requesting device,
- date and time of access,
- page or file accessed,
- referrer URL,
- browser used,
- operating system, and
- other technical information required for the provision and security of the website.
This data is processed in particular to ensure the secure and trouble-free operation of the website, to identify technical errors and to protect the security of our systems.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically functional operation of our website.
Server log files are stored only for as long as necessary for these purposes, unless legal obligations require longer storage.
4. Contacting Us
If you contact us by email, telephone or through another contact method offered by us, we process the information you provide in order to handle your enquiry.
This may include:
- your name,
- email address,
- telephone number,
- the content of your message, and
- any other information you voluntarily provide.
If your enquiry relates to a booking, contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in responding to customer and prospective customer enquiries pursuant to Art. 6(1)(f) GDPR.
Statutory retention obligations remain unaffected.
5. Online Bookings with BookingPress
Our website allows you to book visits, appointments and events, particularly children’s birthday parties, online.
For this purpose, we use the BookingPress booking system integrated into our WordPress website.
The following personal data may be processed as part of a booking:
- first and last name,
- email address,
- telephone number,
- requested date and time,
- booked service,
- number of participants,
- booking status,
- payment status,
- booking number, and
- other information you voluntarily provide during the booking process.
This data is processed to handle, manage and fulfil your booking and to communicate with you.
The legal basis is Art. 6(1)(b) GDPR.
Where booking or billing information must be retained due to legal requirements, particularly tax or commercial law requirements, further processing is based on Art. 6(1)(c) GDPR.
6. Payment Processing
Various payment methods are available for paid online bookings on our website.
Depending on the payment method selected, the information required to process the payment is transmitted to the respective payment service provider.
PayPal
We offer payments via PayPal.
If you select PayPal as your payment method, the information required to process the payment is transmitted to PayPal and processed there.
This may include your name, contact information, payment amount, transaction information and other information required to process the payment.
The processing is necessary for the performance of the contract with you pursuant to Art. 6(1)(b) GDPR.
PayPal may process certain data under its own responsibility as a data controller. Further information can be found in PayPal’s privacy information.
Stripe
We also offer payments via Stripe.
If you use a payment method processed by Stripe, the information required to process the payment is transmitted to Stripe.
This may include payment information, transaction data, contact information and technical information.
The processing is necessary for the performance of the contract with you pursuant to Art. 6(1)(b) GDPR.
Depending on the specific processing activity, Stripe may act as a controller and/or processor. Further information can be found in Stripe’s Privacy Policy.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small files or pieces of information that may be stored on or accessed from your device.
We distinguish between technically necessary cookies and technologies and those that are only used after you have given your consent.
Technically necessary technologies may be used where they are required to provide website functions requested by you.
For cookies and similar technologies that are not technically necessary, particularly those used for analytics and marketing purposes, we generally obtain your consent before they are used.
Where personal data is processed on the basis of your consent, the legal basis is Art. 6(1)(a) GDPR.
You may change or withdraw your consent at any time with effect for the future through the cookie settings on our website.
8. Real Cookie Banner
We use the WordPress plugin Real Cookie Banner to manage your consent regarding cookies and similar technologies.
In particular, this allows us to store or document which consent-required services you have accepted or rejected.
This processing is necessary to respect your choices and to demonstrate that consent has been obtained.
Processing is based in particular on Art. 6(1)(c) GDPR with regard to statutory documentation requirements and Art. 6(1)(f) GDPR with regard to our legitimate interest in properly managing consent.
You can change your selection at any time through the cookie settings on our website.
9. Google Analytics
We use Google Analytics 4, a web analytics service provided by Google, on our website.
Google Analytics helps us understand how our website is used. Information such as pages visited, interactions, devices used, browsers, approximate geographical location and technical information may be processed.
Google Analytics is integrated into our website using, among other things, the measurement ID G-645JDYFBVZ.
Google Analytics is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR insofar as personal data is processed.
You can withdraw your consent at any time through the cookie settings on our website.
10. Google Ads and Conversion Tracking
We use Google Ads to advertise our services and to measure the effectiveness of our advertisements.
Among other identifiers, the Google Ads ID AW-17499026508 is integrated into our website.
If you reach our website through a Google advertisement and subsequently perform a defined action, Google may associate that action with the advertisement.
This enables us, for example, to determine whether an advertisement resulted in a booking or another defined action.
Depending on your consent, cookies or similar technologies and technical information may be processed.
The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You can change or withdraw your consent at any time through the cookie settings on our website.
11. Google Tag Manager and Google Tag
We use Google Tag Manager and Google tags on our website to technically manage and control various website tags.
Among other things, the Google Tag Manager container GTM-KQM53VGB is integrated into our website.
Google Tag Manager is used in particular to centrally manage other services and tracking tags. Depending on the service integrated through it, personal data may be processed by the tags that are triggered.
Where consent is required for a service, its activation depends on your consent choice.
12. Google Consent Mode
Our website uses Google Consent Mode.
This is used to communicate your consent choices to Google services and to adjust the behaviour of the corresponding Google tags accordingly.
Consent states for analytics, advertising and personalisation may be taken into account.
These include analytics_storage, ad_storage, ad_user_data and ad_personalization.
On our website, these consent states are initially set to “denied” for users in Germany and other European countries and are adjusted according to your consent choice.
Depending on the configuration of Google Consent Mode, cookieless signals may still be transmitted to Google even if consent is denied.
13. Matomo
We use Matomo to analyse the use of our website.
Matomo enables us, for example, to analyse which pages are visited, how visitors use our website and which areas are accessed particularly frequently.
Technical usage data may be processed for this purpose.
Where Matomo uses cookies or other non-essential technologies on our website or processes personal data for analytics purposes, this processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may change or withdraw your consent at any time through the cookie settings on our website.
Matomo is installed locally within our WordPress installation. Where the analysis is performed entirely on our own server, the relevant analytics data is not transmitted to Matomo solely as a result of using the Matomo analytics software.
14. Google Reviews / Trustindex
Google reviews of our business may be displayed on our website. We use a WordPress plugin provided by Trustindex for this purpose.
This allows publicly available reviews of our business to be displayed on our website.
Depending on the technical integration, content and data may be loaded from external servers. Technical information such as your IP address may be processed in this context.
Where consent is legally required, the processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
15. AI Chatbot “BAAM Birthday Assistant”
We provide the AI-powered “BAAM Birthday Assistant” on our website.
The chatbot is intended to answer questions about our children’s birthday party services, for example:
- birthday packages,
- prices,
- included services,
- rules,
- decorations, and
- available birthday party dates and times.
Processing of Your Messages
Use of the chatbot is voluntary.
Your consent is obtained before you use the chatbot.
When you use the chatbot, the content you enter is processed in order to generate an appropriate response to your enquiry.
Please do not enter sensitive personal data, health information, payment information or other confidential information into the chatbot.
Use of OpenAI
We use API services provided by OpenAI to technically generate the chatbot’s responses.
For this purpose, the content you enter into the chat is transmitted to and processed by OpenAI.
According to OpenAI, data submitted through its API platform is not used to train its models by default, unless the customer has expressly opted in to such use.
OpenAI also states that API inputs and outputs may generally be retained for up to 30 days, subject to exceptions for certain services, features and configurations, including for service provision and abuse monitoring.
Further information is available in OpenAI’s privacy information.
Birthday Party Availability
To answer questions about available birthday party dates and times, the chatbot receives a regularly updated overview of available time slots from our booking system.
No names, email addresses, telephone numbers or other personal data relating to other customer bookings are provided to the AI model.
Availability shown by the chatbot does not constitute a binding reservation or booking confirmation.
Legal Basis
The legal basis for processing your chatbot messages is your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
16. Transfers to Third Countries
When certain external service providers are used, personal data may be processed outside the European Union or the European Economic Area.
This may particularly apply to internationally operating providers such as Google, OpenAI, Stripe or PayPal.
Where personal data is transferred to a third country, this is carried out in accordance with the requirements of Art. 44 et seq. GDPR.
Depending on the provider and processing activity, an adequacy decision of the European Commission, Standard Contractual Clauses or other legally recognised safeguards may apply.
17. Recipients of Personal Data
We only disclose personal data where this is necessary for the respective purpose, required by law or permitted by you.
Recipients may include:
- hosting and IT service providers,
- providers or components of our booking system,
- payment service providers,
- analytics and marketing service providers where you have given the required consent,
- AI service providers when you use the chatbot,
- tax advisers and other service providers used to fulfil legal obligations, and
- public authorities where disclosure is required by law.
Where external service providers process personal data solely on our behalf, they are engaged in accordance with applicable legal requirements.
18. Data Retention
We generally store personal data only for as long as necessary for the respective processing purpose.
In addition, statutory retention requirements may apply, particularly under tax or commercial law.
Once the purpose of the processing no longer applies and applicable statutory retention periods have expired, the relevant data will be deleted unless another legal basis permits or requires further storage.
19. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights:
- Right of access pursuant to Art. 15 GDPR,
- Right to rectification pursuant to Art. 16 GDPR,
- Right to erasure pursuant to Art. 17 GDPR,
- Right to restriction of processing pursuant to Art. 18 GDPR,
- Right to data portability pursuant to Art. 20 GDPR,
- Right to object pursuant to Art. 21 GDPR, and
- Right to withdraw consent pursuant to Art. 7(3) GDPR with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
To exercise your rights, please contact us at:
20. Right to Lodge a Complaint
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
In particular, you may contact the supervisory authority responsible for our place of business or the supervisory authority at your place of residence.
21. Right to Object
Where we process personal data on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
To exercise your right to object, you may contact us by email at:
22. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other risks.
Our website uses HTTPS encryption. You can recognise an encrypted connection in particular by https:// and the corresponding security symbol in your browser.
Our security measures are reviewed and adapted in line with technological developments.
23. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, our website or the services we use change.
Last updated: September 2026