GDPR

1. Data controller

The controller of your personal data is Podkarpacki Bis sp. z o. o. with its registered office in Warsaw, Branch in Piastów, ul. ks. Piotra Skargi 17/U-01, NIP 522-292-59-94,
Contact: 730 008 009, kontakt@MagicEscapeRoom.pl

2. What data do we collect?

We only collect data necessary to provide the service, such as:

• name and surname,

• phone number,

• email address,

• CCTV recording (for the safety of participants and employees).

3. Purpose of data processing

Your data is processed solely for the purposes of:

• making reservations and contacting us regarding the service,

• consideration of complaints,

• ensuring security (monitoring),

• possible statistical analysis (anonymously).

4. Legal basis for processing

We process data on the basis of:

• Article 6(1)(b) of the GDPR – necessity for the performance of the contract,

• Article 6(1)(f) of the GDPR – legitimate interest of the controller (monitoring, statistics).

5. Data recipients

Data may be transferred to entities supporting our activities, e.g. IT companies, accounting – only if necessary and on the basis of data processing agreements.

6. Data storage period

We store data:

• for the time necessary to perform the contract and legal obligations,

• CCTV recordings – maximum 30 days (unless they are needed longer due to an incident).

7. Your rights

You have the right to:

• access to data,
• their corrections,
• deletion (“right to be forgotten”),
• processing restrictions,
• objection to processing,
• data transfer.

To exercise your rights, please contact us: 730 008 009, kontakt@MagicEscapeRoom.pl

8. Right to complain

You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe that your data is being processed unlawfully.

9. Voluntary provision of data

Providing data is voluntary, but necessary to provide the service.