Privacy Policy

Last updated: 20.05.2026

1. Introduction and data controller
We welcome your interest in Mega Jump Park and our website. The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions of the General Data Protection Regulation (GDPR / Regulation (EU) 2016/679), the Spanish Organic Law 3/2018 (LOPDGDD) and any other applicable data protection regulations.
Controller within the meaning of the GDPR
May Holding Baleares S.L.
Polígono 12, 07687 Manacor
Illes Balears, Spain
CIF: ESB16596975
Authorized representative: Markus Breisch
E-mail: Info@mayinvest.de
Phone: +34 611 23 50 28
Privacy contact
Please direct all data protection enquiries to: Info@mayinvest.de
 
2. General information on data processing
2.1 Scope of processing
As a matter of principle, we only collect and use personal data of our users to the extent that this is necessary to provide a functional website as well as our content and services, or where you have expressly given your consent.
2.2 Legal bases of processing

• Art. 6(1)(a) GDPR – Consent

• Art. 6(1)(b) GDPR – Contract or pre-contractual measures (e.g. ticket purchase)

• Art. 6(1)(c) GDPR – Legal obligation (e.g. retention periods)

• Art. 6(1)(f) GDPR – Legitimate interest (e.g. IT security, fraud prevention, reach measurement)

2.3 Erasure and storage period
Your personal data will be erased or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator (typically 4–10 years under Spanish and German commercial and tax law).
 
3. Provision of the website and server log files
Every time our website is accessed, our system automatically collects data and information from the device of the requesting computer:

• Browser type and browser version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Date and time of the server request

• IP address (shortened / anonymized where technically possible)

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free delivery and the security of our website.
Hosting provider: [Please add: name, registered office and data processing agreement of the hoster.]
 
4. Cookie consent management with Usercentrics
On our website we use the consent management platform (CMP) Usercentrics Consent Management Platform (CMP) to inform you about the cookies and similar technologies used on our website, to obtain your consent to certain processing operations, to manage that consent and to document it in a verifiable manner.
4.1 Provider
Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Deutschland
Provider's privacy policy: https://usercentrics.com/privacy-policy/
4.2 Purpose of processing
The use of Usercentrics serves to fulfil our legal obligation under Art. 7(1) GDPR and Art. 22 LSSI-CE / Sec. 25 TTDSG to obtain users' consent for the storage of and access to information on their devices and to be able to demonstrate that consent.
4.3 Data processed

• Consent data (consents given, refused or withdrawn, including time stamp)

• Consent ID (randomly generated identifier)

• Browser and device information (user agent, screen resolution, language)

• Anonymized / shortened IP address

• Date and time of the request

• URL of the visited page

4.4 Legal basis
The processing is based on Art. 6(1)(c) GDPR (compliance with a legal obligation to evidence consent) and, in addition, Art. 6(1)(f) GDPR (legitimate interest in a lawful and verifiable consent management).
4.5 Data processing agreement
A data processing agreement in accordance with Art. 28 GDPR is in place with Usercentrics. The data are processed within the European Union; no transfer to a third country outside the EU/EEA takes place.
4.6 Storage period
Consent data are stored for the duration of the consent, but for a maximum of 12 months, and then obtained again. Records of consent are retained in accordance with statutory retention periods so that consent can be proven in case of dispute.
4.7 Withdrawal of consent
You may withdraw your consent at any time with effect for the future. To do so, click on the "Cookie settings" icon (the "fingerprint" icon at the bottom left, or the corresponding link in the footer) permanently embedded on our website, adjust your selection and save it.
 
5. Cookies and third-party services
Through the Usercentrics banner we inform you transparently about all cookies and third-party services used. You can decide individually which categories (e.g. statistics, marketing) you wish to consent to. Technically necessary cookies (e.g. for shopping cart functionality or to store your cookie preferences) are set without consent — the legal basis is Art. 6(1)(f) GDPR and Sec. 25(2)(2) TTDSG.
Overview of services used (placeholder – please fill in based on your tech stack)

• Hosting / Content Delivery: [e.g. Cloudflare, AWS, Hetzner]

• Statistics: [e.g. Google Analytics 4 – Google Ireland Ltd. – consent required]

• Marketing: [e.g. Meta Pixel – Meta Platforms Ireland Ltd. – consent required]

• Maps: [e.g. Google Maps – Google Ireland Ltd. – consent required]

• Video: [e.g. YouTube / Vimeo – consent required]

 
6. Contacting us
When you contact us by e-mail, telephone or via a contact form, the data you provide (name, contact details, content of the message) will be processed in order to deal with your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. We delete your enquiry as soon as it is no longer required, at the latest after the statutory retention period has expired.
 
7. Ticket purchase and payment processing
Ticket sales take place on a separate domain (https://megajumpparktickets.eu). If you purchase tickets there, the data required for concluding and performing the contract will be processed:

• First and last name

• E-mail address

• Billing address

• Number and type of tickets booked, date/time

• Payment data (transmitted directly to the payment service provider)

The legal basis is Art. 6(1)(b) GDPR. Tax-relevant data are retained in accordance with Spanish and, where applicable, German legal requirements for up to 10 years (Art. 6(1)(c) GDPR).
Payment service providers used (placeholder)

• [Stripe Payments Europe Ltd., Ireland — https://stripe.com/privacy]

• [PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg]

• [Redsys Servicios de Procesamiento S.L., Spain]

 
8. Newsletter (optional)
If you have subscribed to our newsletter, we process your e-mail address for the purpose of sending the newsletter. Registration is carried out using the double opt-in procedure. The legal basis is Art. 6(1)(a) GDPR. You may unsubscribe at any time via the unsubscribe link in any newsletter e-mail or by message to Info@mayinvest.de.
 
9. Web analytics and marketing (consent required)
To the extent you have given your consent, we use web analytics and marketing services to improve our offering and measure our reach.
9.1 Google Analytics 4 (placeholder)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data processing may take place in third countries (in particular the USA), safeguarded by the EU-US Data Privacy Framework and standard contractual clauses. IP anonymization is enabled. Legal basis: Art. 6(1)(a) GDPR. Consent may be withdrawn at any time via the cookie settings.
9.2 Meta Pixel / Facebook & Instagram (placeholder)
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Pseudonymized data are transmitted to Meta for advertising and analytics purposes. Data transfer to the USA is possible. Legal basis: Art. 6(1)(a) GDPR.
9.3 Google Maps (placeholder)
Provider: Google Ireland Limited. When maps are loaded, data (including the IP address) are transmitted to Google. Legal basis: Art. 6(1)(a) GDPR.
 
10. Social media presences
We maintain profiles on social networks (e.g. Facebook, Instagram, TikTok, YouTube). When you visit these, the data protection provisions of the respective provider apply in addition. Joint controllership with the providers may exist (Art. 26 GDPR).
 
11. Recipients and transfers to third countries
Your data will only be transferred to third parties insofar as this is necessary for the performance of the contract, required by law or covered by your consent. We have concluded data processing agreements under Art. 28 GDPR with our processors. For third-country transfers (in particular to the USA) we rely on standard contractual clauses and the EU-US Data Privacy Framework.
 
 
12. Your rights as a data subject

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

An informal message to Info@mayinvest.de is sufficient to exercise your rights.
 
 
13. Right to lodge a complaint with a supervisory authority

• Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es

You may also contact the data protection authority at your habitual residence (e.g. the State Data Protection Commissioners in Germany, the Austrian Data Protection Authority or the Swiss Federal Data Protection and Information Commissioner).
 
14. Data security
We use TLS/SSL encryption as well as appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorized access.
 
15. Currency and amendment of this privacy policy
This privacy policy is currently valid. Due to ongoing development of our website or amended legal requirements, it may become necessary to amend this privacy policy. The privacy policy currently in force can be accessed on the website at any time.