Privacy Policy

1. General Information

This Privacy Policy defines the rules for the processing and protection of personal data of users of the Piwnica Quest website.

The controller of personal data is Piwnica Quest, based in Wroclaw at ul. Tęczowa 7, 53-601 Wrocław.

The Controller places particular importance on protecting the privacy of website users. The Controller exercises due diligence in selecting and applying appropriate technical and organizational measures to ensure the protection of processed data. In particular, the Controller protects data against unauthorized access and against processing in violation of applicable law.

2. Data Collection

The Controller collects personal data during:

  • Making an escape room booking through the website form
  • Contact through the contact form
  • Newsletter subscription (if available)

Collected data may include:

  • First and last name
  • Email address
  • Phone number
  • Booking details (date, time, number of participants, selected room)

3. Purposes of Data Processing

Personal data is processed for the following purposes:

  • Fulfillment of escape room bookings
  • Handling inquiries and contacts
  • Sending marketing information (with separate consent)
  • Website traffic analysis and service quality improvement
  • Fulfillment of legal obligations incumbent upon the Controller

4. Legal Basis for Processing

Personal data is processed on the basis of:

  • Article 6(1)(b) GDPR - processing is necessary for the performance of a contract to which the data subject is party (fulfillment of bookings)
  • Article 6(1)(c) GDPR - processing is necessary for compliance with a legal obligation to which the Controller is subject
  • Article 6(1)(f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the Controller (marketing of own products and services, website traffic analysis)
  • Article 6(1)(a) GDPR - the data subject has given consent to the processing of their personal data for one or more specific purposes (e.g., newsletter, marketing)

5. Data Recipients

Personal data may be transferred to the following categories of recipients:

  • Hosting service providers
  • Booking system service providers
  • Accounting and legal service providers
  • Marketing service providers
  • Analytics service providers

The Controller uses analytical and marketing tools provided by third-party companies such as Google LLC and Meta Platforms, Inc. (formerly Facebook, Inc.). These entities may process user data outside the European Economic Area (EEA).

6. Data Retention Period

Personal data is stored for the following periods:

  • Data processed for booking fulfillment - for the period necessary to fulfill the booking, and subsequently for the statute of limitations period for claims arising from legal provisions
  • Data processed on the basis of consent - until the consent is withdrawn
  • Data processed for tax and accounting purposes - for a period of 5 years from the end of the calendar year in which the tax obligation arose
  • Data processed for marketing purposes - for a period of 3 years from the last contact with the data subject

7. Rights of Data Subjects

Data subjects have the following rights:

  • Right of access to their data and to receive a copy thereof
  • Right to rectification (correction) of their data
  • Right to erasure of data (the "right to be forgotten")
  • Right to restriction of data processing
  • Right to data portability
  • Right to object to data processing
  • Right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal
  • Right to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office - Prezes Urzędu Ochrony Danych Osobowych)

To exercise the above rights, please contact the Controller via email: biuro@piwnica-quest.com or by post to the Controller's registered office address.

8. Cookies and Other Technologies

The website uses cookies, which are small text files stored on the user's end device while using the website.

Types of cookies used:

  • Necessary cookies - enable the use of basic website functions such as login and remembering user preferences. These cookies cannot be disabled.
  • Analytical cookies - used to collect information about how the website is used, helping to improve its functionality. These cookies can be disabled.
  • Marketing cookies - used to track users across websites in order to deliver advertisements that are more relevant to the user's interests. These cookies can be disabled.

The Controller uses the following tools that utilize cookies:

  • Google Analytics - an analytical tool provided by Google LLC
  • Facebook Pixel - a marketing tool provided by Meta Platforms, Inc.
  • Google Tag Manager - a tag management tool

The user can manage their cookie preferences using the cookie consent banner available on the website or through their internet browser settings.

9. Security

The Controller applies appropriate technical and organizational measures to ensure the protection of processed personal data. These measures are adapted to the risk associated with personal data processing and include, among others:

  • SSL protocol protection of the website
  • Data encryption
  • Internal data access procedures
  • Regular system updates

10. Changes to the Privacy Policy

The Controller reserves the right to make changes to the Privacy Policy. Changes will be published on the website. The new version of the Privacy Policy takes effect on the date of its publication.

Date of last update: 27.04.2025

11. Contact

If you have any questions regarding the Privacy Policy or the processing of personal data, please contact us:

  • Email: biuro@piwnica-quest.com
  • Phone: +48 506 040 089
  • Address: Tęczowa 7, 53-601 Wroclaw