Skip to main content
Magic Escape Room

Privacy and cookie policy

Last updated: September 18, 2026

1. General information

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and with Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), users of this website are hereby informed about the processing of their personal data and the use of cookies.

Data controller:

  • Owner: MAGIC ESCAPE, S.L.
  • Tax ID (CIF): B66741844
  • Address: Carrer de Ramón y Cajal, 67, 08012 Barcelona
  • Email: hola@magicescape.es
  • Website: www.magicescape.es

2. Purpose of the processing

Your personal data will only be used for the following purposes:

  • To carry out the commercial and administrative tasks required with the users of the website.
  • To send commercial and advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, with the option for the user to unsubscribe.
  • To answer enquiries and/or provide the information requested by the user.
  • To deliver the services and/or products contracted or subscribed to by the user.
  • To use your data to contact you, by electronic and non-electronic means, in order to obtain your opinion on the service provided.
  • To notify you of significant changes and developments in the privacy policy, the legal notice or the cookie policy.
  • To carry out profile and usability analysis.
  • To manage customer and/or supplier data within the contractual relationship binding them to the controller, in compliance with the administrative, tax, accounting and employment obligations laid down by the legislation in force.

3. Lawful basis for the processing

The processing of your data is based on the user's consent, the performance of a contract or the application of pre-contractual measures, compliance with legal obligations and/or the legitimate interest of the data controller.

4. Retention period

Personal data will be kept for as long as is necessary to fulfil the purpose for which it was collected and to comply with the applicable legal obligations. Once those periods have elapsed, the data will be deleted or anonymised.

5. Recipients

We do not sell your personal data, nor do we disclose it to third parties for them to use for their own purposes, except where required by law or with the user's express consent. There are, however, providers that process data on behalf of MAGIC ESCAPE, S.L. as data processors, following our instructions and under the terms established by the GDPR.

Specifically, and only if you consent to the corresponding cookie category (section 7), this website uses services provided by Google Ireland Limited:

  • Google Analytics 4 (analytics cookies): measurement of how the website is used. If you accept this category, the analytics identifier this service assigns to your browser may be associated with a booking so that it can be measured correctly.
  • Google Ads (advertising cookies): measurement of advertising conversions, including the ad click identifiers (gclid, gbraid, wbraid) associated, where applicable, with a booking.

If you reject these categories or leave the cookie notice unanswered, no analytics or advertising cookies are set and no identifier of this kind is associated with your visit.

As stated by Google, the provision of these services may involve processing outside the European Economic Area, covered by the safeguards Google itself declares (the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses). You can consult its privacy policy at https://policies.google.com/privacy.

Card payments are made on the bank's payment gateway (Redsys TPV): your card details are entered directly on that gateway and are neither received nor stored by this website.

6. User rights

The user has the right to:

  • Access their personal data.
  • Rectify inaccurate or incomplete data.
  • Request the erasure of their data once it is no longer necessary.
  • Object to the processing of their data or request that it be restricted.
  • Request the portability of their data to another provider.
  • Withdraw their consent at any time, without this affecting the lawfulness of the processing based on consent before its withdrawal.
  • Lodge a complaint with the competent supervisory authority.

To exercise these rights, you may send an email to hola@magicescape.es with the subject "Data protection".

To withdraw any consent you have given to cookies you do not need to write to us: you can do so at any time from the Cookie settings link in the page footer, as explained in section 7.4. For any other processing based on your consent, simply tell us at the email address above.

Likewise, if you consider that your rights have not been properly attended to, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es.

7. Use of cookies

This website uses its own and third-party cookies to improve the user experience and to analyse site traffic.

7.1. What are cookies? Cookies are small text files stored in your browser when you visit a website. They are used to improve the user experience, personalise content and analyse behaviour on the site.

7.2. Types of cookies used

  • Technical or necessary cookies: essential for the website to work (booking, language, site security and the record of your own cookie choice).
  • Analytics cookies (Google Analytics 4): allow the use of the website to be measured and analysed.
  • Advertising cookies (Google Ads): allow the bookings arriving from ads to be measured and relevant ads to be shown.

7.3. Cookies used

The cookies this site may set in your browser are identified below, together with who sets them, their purpose, their duration and the category they belong to.

  • magic_consent — Set by: us. Purpose: to remember your cookie choice, that is, which categories you have accepted or rejected, so you are not asked again on every page. Duration: 6 months (180 days). Category: technical or necessary.
  • NEXT_LOCALE — Set by: us. Purpose: to remember the language the site is shown to you in (Spanish, Catalan or English). Duration: session; deleted when you close your browser. Category: technical or necessary.
  • mg_booking — Set by: us. Purpose: to keep the booking form you filled in while you are sent to the bank's payment page and back, so that it can be restored if the payment is not completed. Duration: session; deleted when you close your browser and also as soon as the booking is confirmed. Category: technical or necessary.
  • mg_voucher — Set by: us. Purpose: the same purpose for the gift voucher purchase form. Duration: session; deleted when you close your browser and also as soon as the purchase is confirmed. Category: technical or necessary.
  • mg_gclid, mg_gbraid, mg_wbraid — Set by: us; the value they hold is generated by Google Ads. Purpose: to remember the click on a Google Ads advert that brought you to this site, so that a later booking can be attributed to that advert. Duration: 90 days. Category: advertising.
  • _ga — Set by: a third party (Google Ireland Limited); placed from this domain by the Google tag. Purpose: to distinguish your browser from those of other visitors in order to measure use of the site with Google Analytics 4. Duration: 2 years. Category: analytics.
  • _ga_… (the suffix identifies the Google Analytics property) — Set by: a third party (Google Ireland Limited); placed from this domain by the Google tag. Purpose: to maintain the Google Analytics 4 session state. Duration: 2 years. Category: analytics.

Alongside the magic_consent cookie, your browser keeps a copy of that same choice in the browser's own local storage (localStorage, under the key me-consent-v1). It is not a cookie, but it is an equivalent technology for the purposes of this policy: it contains only the categories you have accepted or rejected and the date on which you did so, it is kept on your device for the same six months (180 days) and it is updated whenever you change your choice. You can delete it at any time from your browser settings, along with the cookies.

Technical or necessary cookies do not require your consent, because the service you ask for cannot be provided without them. All the others — the analytics and the advertising ones — are only set after you accept them, and you can accept, reject or revoke them as explained in section 7.4.

When you pay, you are redirected to the bank's payment gateway (Redsys TPV), which is on a different domain from this one: that gateway may set its own cookies on its own domain, subject to the bank's policy and outside the scope of this policy.

7.4. Managing cookies. Analytics and advertising cookies are not set until you give your consent through the cookie notice. On your first visit, that notice offers the ACCEPT, REJECT and CONFIGURE options with equal prominence, the last of these so you can choose category by category. If you reject the notice or leave it unanswered, only the technical or necessary cookies remain active.

You can change or withdraw your choice at any time from the Cookie settings link in the footer of every page (shown as COOKIES in the menu on small screens), which reopens the cookie settings panel. Your choice is saved in your own browser for six months (180 days), after which the notice will ask you again.

You can also configure, block or delete cookies in your browser settings (Google Chrome, Mozilla Firefox, Microsoft Edge or Safari).

8. Changes to the privacy and cookie policy

We reserve the right to update this policy in order to adapt it to regulatory changes or to changes in how the website works. Any modification will be published on this same page.

For any enquiries, you can contact us at hola@magicescape.es.