Cookie Policy - Mysterious Room Escape room Warsaw

MYSTERIOUS ROOM Privacy and Cookie Policy

Effective from: 1 September 2026

Hello!

In this Privacy Policy, we explain how MPZ INVESTMENTS CENTER sp. z o.o., the owner of the MYSTERIOUS ROOM brand, processes personal data in connection with the operation of the pokojezagadek.eu website, booking management, contact with customers, the provision of services at the MYSTERIOUS ROOM Premises, and the use of cookies and similar technologies.

This Policy has been prepared to fulfil the information obligations arising from personal data protection laws, in particular the GDPR.

This Policy applies primarily to the pokojezagadek.eu website and to services provided at the MYSTERIOUS ROOM Premises at ul. Mielczarskiego 1/E in Warsaw.

The MYSTERIOUS ROOM Website may contain links to other services, in particular to the online shop operated at a separate address. The processing of personal data in connection with using the online shop, placing orders, making payments, product delivery and purchasing e-vouchers is governed by the Privacy Policy of the online shop.

Data Controller

The Data Controller is MPZ INVESTMENTS CENTER sp. z o.o. with its registered office in Warsaw, the owner of the MYSTERIOUS ROOM brand.

Controller details:

MPZ INVESTMENTS CENTER sp. z o.o.
ul. Mielczarskiego 1/E
02-798 Warszawa
NIP: 9512464279
REGON: 380546167
KRS: 0000735841

Contact regarding personal data

For matters relating to the processing of personal data, you can contact us by email at: biuro@mpzic.pl

You may use this address in particular if you wish to ask about the processing of your data, make a request concerning your rights, or obtain additional information about privacy protection.

Data Protection Officer

The Controller has not appointed a Data Protection Officer.

For all matters concerning personal data, please contact the Controller directly using the email address indicated in section 2 of this Policy.

What data may we process?

The scope of data we process depends on how you use the MYSTERIOUS ROOM Website, contact us, make a booking, or use our services at the Premises.

We may process, in particular, the following categories of data:

identification and contact details, such as your first name, surname, email address, telephone number, and information provided when making a booking, in correspondence, or via the contact form;
booking data, such as the selected Room, booking date and time, number of Participants, language of the Game, selected additional Services, organisational information entered in the booking notes, and data required to manage the booking in the Lockme system;
data concerning participation in MYSTERIOUS ROOM Services, such as information required to provide a Game, event, birthday party, organised group Service, redeem a Voucher, or provide paid extras;
data concerning Minors and their guardians where Minors take part in a Service, in particular the Child’s data, the parent’s or Legal Guardian’s data, Group Supervisor details, contact details, the content of the consent, signature, and information required to confirm that the Minor meets the conditions for participation in the Service;
payment-related data where payment is processed via an external payment provider or in another way requiring the processing of data necessary to settle the Service;
data relating to complaints and claims, such as the complainant’s details, contact details, information allowing the booking or Service to be identified, a description of the event, the expected outcome of the complaint, and correspondence relating to the matter;
data recorded by CCTV, i.e. images of persons present at the MYSTERIOUS ROOM Premises if they are within an area covered by CCTV;
data relating to souvenir photographs where a photograph is taken by MYSTERIOUS ROOM or provided to MYSTERIOUS ROOM in connection with a Service;
technical data relating to use of the Website, such as IP address, data stored in cookies, device, browser and operating system information, Website activity, and data stored in server logs;
other data provided voluntarily, where you provide it to us in a message, form, telephone conversation, booking notes, or in another way connected with the use of MYSTERIOUS ROOM Services.

Not every use of the Website or MYSTERIOUS ROOM Services involves the processing of all the categories of data listed above. We process data only to the extent necessary for a specific purpose, for example to manage a booking, reply to a message, ensure safety at the Premises, handle a complaint, or comply with legal obligations.

Purposes and legal bases for processing personal data

We process personal data only where we have a legal basis to do so and for a specific purpose. The main situations in which we may process personal data are set out below.

Booking management and provision of MYSTERIOUS ROOM Services
We process personal data in order to accept and manage bookings, contact the person making the booking, prepare the Service, provide a Game, event or other MYSTERIOUS ROOM Service, and handle organisational matters connected with the booking.The legal basis for processing is the performance of a contract or taking steps at your request before entering into a contract.
Contact by email, telephone or contact form
We process personal data in order to reply to messages, handle enquiries, manage organisational communication, and provide information concerning bookings, Services, organisational changes, or emergencies.The legal basis for processing is the Controller’s legitimate interest in communicating with persons who contact MYSTERIOUS ROOM and, where the contact concerns a booking or Service, also the performance of a contract or taking steps before entering into a contract.
Voucher redemption
We process personal data in order to manage bookings made using a Voucher, verify entitlement to use the Voucher, and ensure that the Service is provided correctly.The legal basis for processing is the performance of a contract or the Controller’s legitimate interest in verifying and correctly handling Vouchers.
Services involving Minors and guardian consents
We process personal data in order to confirm that a Minor may take part in a Service, verify the required consents, ensure the proper organisation of the Service and the safety of Participants, and comply with the rules for participation by Minors set out in the MYSTERIOUS ROOM Terms and Conditions.The legal basis for processing is the performance of a contract, the Controller’s legitimate interest in ensuring safety and the proper organisation of Services involving Minors, and, in certain cases, a legal obligation to which the Controller is subject.
Payments and settlements
We process personal data in order to handle payments, settle Services, issue accounting documents, maintain accounting and tax records, and comply with legal obligations.The legal basis for processing is the performance of a contract and compliance with a legal obligation to which the Controller is subject.
CCTV at the Premises
We process personal data in the form of images in order to ensure the safety of persons present at the MYSTERIOUS ROOM Premises, protect property, monitor the proper conduct of Games, respond to emergencies, investigate incidents, complaints or damage, and establish, pursue or defend claims.The legal basis for processing is the Controller’s legitimate interest in ensuring safety, protecting property, and establishing, pursuing or defending claims.
Souvenir photographs and image
Where MYSTERIOUS ROOM takes a souvenir photograph, we process personal data in the form of an image for the purpose of taking the photograph and providing it to the Participants.Publication of an image by MYSTERIOUS ROOM, in particular on the Website, on social media or in promotional materials, takes place only on the basis of separate consent from the person whose image is concerned and, in the case of a Minor, on the basis of consent from the Legal Guardian.
Complaints
We process personal data in order to receive, consider and handle complaints, contact the complainant, and provide a response.The legal basis for processing is the performance of a contract, compliance with a legal obligation to which the Controller is subject, or the Controller’s legitimate interest in handling complaints and retaining information necessary to demonstrate how a complaint was dealt with.
Establishing, pursuing or defending claims
We may process personal data in order to establish, pursue or defend claims, in particular in the event of damage, a breach of the Terms and Conditions, a dispute, a complaint, the need to investigate an incident, or the need to defend against allegations.The legal basis for processing is the Controller’s legitimate interest in protecting the rights and interests of MYSTERIOUS ROOM.
Ensuring safety and order at the Premises
We may process personal data in order to ensure the safety of Participants, Staff and other persons present at the Premises, protect property, and respond to breaches of the Terms and Conditions, emergencies, or situations requiring intervention.The legal basis for processing is the Controller’s legitimate interest in ensuring safety and order at the Premises.
Website operation, cookies, analytics and advertising
We may process technical data relating to use of the Website in order to ensure its proper operation, compile statistics, analyse how the Website is used and, where we use advertising tools, measure the effectiveness of advertising activities.Depending on the type of cookies or tools used, the legal basis for processing may be the Controller’s legitimate interest, the user’s consent, or the necessity of ensuring that the Website functions properly.
Compliance with legal obligations

We may process personal data in order to comply with obligations arising from applicable law, in particular tax and accounting rules, personal data protection law, consumer protection law, and safety-related obligations.

The legal basis for processing is compliance with a legal obligation to which the Controller is subject.

Bookings and the Lockme system

Bookings for MYSTERIOUS ROOM Services are handled through the external Lockme booking system.

The Lockme system may be available directly on the MYSTERIOUS ROOM Website as a widget, through the Lockme service itself, or may be used by MYSTERIOUS ROOM to enter a booking received by telephone or in another agreed manner.

In connection with booking management, we may process in particular:

first name and surname of the person making the booking;
email address;
telephone number;
selected Room;
booking date and time;
number of Participants;
language of the Game;
selected additional Services;
information entered in the booking notes;
payment information where payment is linked to the booking;
information relating to Voucher redemption where a Voucher is to be used for the booking.

We process data provided when making a booking in order to accept and manage the booking, contact the person making the booking, prepare the Service, provide organisational information, manage changes of date, cancellations, delivery of the Service, and investigate any problems connected with the booking.

Where a booking is made by telephone, the data provided during the call may be entered by MYSTERIOUS ROOM into the Lockme system in order to create and manage the booking.

Providing the data required to make a booking is necessary for the booking to be accepted and fulfilled. Failure to provide data required to manage the booking may make it impossible to make a booking or use the Service.

As the operator of an external booking system, Lockme may process personal data in accordance with its own Privacy Policy and other documents governing use of the system. Before making a booking through Lockme, you should also review the documents provided by Lockme.

Email and telephone contact

If you contact MYSTERIOUS ROOM by email, telephone, contact form, social media message or in another way, we may process the personal data you provide to us.

In connection with such contact, we may process in particular:

first name and surname;
email address;
telephone number;
profile name or user identifier where contact is made through social media;
the content of the message;
information concerning the matter to which the contact relates;
other data provided voluntarily during the contact.

We process this data in order to reply, handle the enquiry, conduct correspondence, clarify the matter, provide organisational information, manage a booking, provide a Service, or take other actions you request.

Where the contact concerns a booking, Service, complaint, Voucher, participation by a Minor, or another organisational matter, the data may also be processed for the purpose of dealing with that particular matter.

A telephone number provided when making a booking or during contact with us is used only for organisational contact, booking management, Service-related communication, information about changes, emergencies, or other matters directly connected with the use of MYSTERIOUS ROOM Services.

We do not carry out telephone marketing or SMS marketing. Providing a telephone number when making a booking or contacting us does not constitute consent to receive promotional offers by telephone or SMS.

We do not operate a newsletter or send regular marketing communications by email. If MYSTERIOUS ROOM decides to introduce a newsletter or other marketing communications in the future, these will be carried out on the basis of separate consent or another appropriate legal basis, in accordance with applicable law.

Provision of Services at the Premises and Voucher redemption

In connection with the provision of MYSTERIOUS ROOM Services, we may process personal data necessary to prepare and run a Game, event, birthday party, organised group Service, paid extras, Voucher redemption, and organisational contact with the person making the booking or Participants.

Depending on the type of Service, we may process in particular:

data relating to the person making the booking;
contact details provided when making the booking;
information concerning the selected Room, date, time and number of Participants;
information concerning the language of the Game;
information concerning additional Services, including the participation of a Game Facilitator;
information concerning Voucher redemption;
organisational information provided in booking notes, email messages or telephone conversations;
information necessary to ensure safety and the proper provision of the Service.

If you use a Voucher, we may process data required to verify and redeem it, in particular the Voucher code, booking details, the scope of the Service covered by the Voucher, its expiry date, and information about its use.

We process data connected with the provision of Services in order to perform the contract, properly organise the Service, contact the person making the booking, manage organisational changes, ensure safety, and investigate any incidents, complaints or claims.

Providing data necessary for a Service may be required in order to use MYSTERIOUS ROOM Services. Failure to provide the required data may make it impossible to fulfil the booking, take part in the Service, redeem a Voucher, or use selected additional Services.

Minors and guardian consents

Where a Minor uses MYSTERIOUS ROOM Services, we may process personal data necessary to confirm that they may take part in the Service, ensure safety, properly organise the Game or event, and comply with the rules for participation by Minors set out in the MYSTERIOUS ROOM Terms and Conditions.

In connection with a Minor’s participation in a Service, we may process in particular:

first name and surname of the Minor;
age or date of birth of the Minor where necessary to confirm that the conditions for participation in the Service are met;
data relating to the parent or Legal Guardian;
Group Supervisor details, where applicable;
contact details of the parent, Legal Guardian or Group Supervisor;
content of the consent for the Minor to take part in the Service;
signature of the person giving consent;
organisational information necessary to provide the Service involving a Minor;
information concerning participation by a Game Facilitator where a Game Facilitator is required or has been selected as an additional Service.

Consents relating to participation by Minors in MYSTERIOUS ROOM Services are required in paper form. Consent forms must be completed correctly, signed by an authorised person, and delivered to MYSTERIOUS ROOM no later than before the Minor begins using the Service.

We retain paper consent forms for the period necessary to demonstrate that the Minor used the Service with the consent of a Legal Guardian, to ensure the proper organisation of Services involving Minors, to ensure safety, and to establish, pursue or defend any claims.

Data relating to Minors, parents, Legal Guardians and Group Supervisors is not used for marketing purposes.

CCTV at the Premises

CCTV is used at the MYSTERIOUS ROOM Premises.

The CCTV system records images only and does not record sound.

CCTV is used to ensure the safety of persons present at the Premises, protect property, monitor the proper conduct of Games, respond to emergencies, investigate incidents, complaints or damage, and establish, pursue or defend claims.

CCTV may cover, in particular, the lobby, corridors and other circulation areas, Escape Rooms, and other areas of the Premises in which Services are provided or Participants are present.

CCTV is not used in toilet facilities.

CCTV recordings may be accessed by the owner of MYSTERIOUS ROOM and authorised members of MYSTERIOUS ROOM Staff, to the extent necessary for the purposes set out in this Policy.

CCTV recordings are retained for up to 7 days from the date of recording, unless a recording is required to investigate an incident, complaint, damage, breach of the Terms and Conditions, emergency, or to establish, pursue or defend claims. In such a case, the recording may be retained for the period necessary to conclude the relevant proceedings or secure claims.

CCTV recordings may be disclosed to entities authorised under applicable law, in particular competent public authorities, law enforcement bodies, courts, insurers, the building owner or manager, and other entities where this is necessary for the purposes set out above and compliant with applicable law.

Information about the use of CCTV is available at the MYSTERIOUS ROOM Premises.

Souvenir photographs and image

After a Game, MYSTERIOUS ROOM may enable Participants to take a souvenir photograph.

As a rule, souvenir photographs are taken by Participants using their own devices. In such cases, MYSTERIOUS ROOM does not decide how Participants subsequently use the photograph and is not responsible for publications made by Participants on their own initiative.

Where a souvenir photograph is taken using a device belonging to MYSTERIOUS ROOM or by a person acting on behalf of MYSTERIOUS ROOM, we process personal data in the form of an image for the purpose of taking the photograph and providing it to the Participants or the person who made the booking.

Taking part in a souvenir photograph is voluntary. Refusal to participate in the photograph does not affect the ability to use MYSTERIOUS ROOM Services.

MYSTERIOUS ROOM does not publish souvenir photographs of Participants on the Website, social media or in promotional materials without separate consent from the persons whose images are to be published.

Publication of a Participant’s image by MYSTERIOUS ROOM may take place only after obtaining the Participant’s separate consent and, in the case of a Minor, the consent of their Legal Guardian.

Consent to publication of an image is voluntary and may be withdrawn, provided that withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Complaints and claims

If you make a complaint concerning MYSTERIOUS ROOM Services, we process personal data necessary to receive and consider the complaint, provide a response, and document the course of the complaints procedure.

In connection with a complaint, we may process in particular:

first name and surname of the complainant;
contact details, in particular an email address or telephone number;
information allowing the booking or Service concerned by the complaint to be identified;
date, time and name of the Room or type of Service;
a description of the event or circumstances giving rise to the complaint;
desired outcome of the complaint, where stated;
correspondence relating to the complaint;
information necessary to respond or clarify the matter.

We process data connected with a complaint in order to handle the complaint, contact the complainant, provide a response, demonstrate how the complaint was handled, and protect the rights and interests of MYSTERIOUS ROOM.

We may also process personal data for the purpose of establishing, pursuing or defending claims. This applies in particular to situations involving damage, a breach of the Terms and Conditions, a complaint, a dispute, the need to investigate an incident, interruption of a Game, refusal to provide a Service, or another event requiring the interests of MYSTERIOUS ROOM, Participants or third parties to be protected.

In the case of events that may result in liability on the part of a Participant or MYSTERIOUS ROOM, we may process data contained in correspondence, notes, incident reports, CCTV recordings, accounting documents, complaint records, and other materials necessary to investigate the matter.

Recipients of personal data

We may disclose personal data to entities whose services we use in connection with operating the Website, managing bookings, providing Services, ensuring safety, handling payments, maintaining records, dealing with complaints, and complying with legal obligations.

Personal data may be disclosed in particular to:

providers of hosting, IT, technical and administrative services;
Lockme, the operator of the external booking system, where data is processed in connection with making or managing a booking;
payment service providers, banks, or other entities handling payments where the data is necessary to process a transaction;
providers of accounting, bookkeeping, tax or invoicing services;
providers of legal, advisory, debt recovery or insurance services where this is necessary to protect the rights and interests of MYSTERIOUS ROOM, establish, pursue or defend claims, or handle insured events;
postal operators, courier companies or delivery service providers, including InPost, where disclosure of data is necessary to send a parcel, return an item left at the Premises, or carry out another delivery agreed with the customer;
providers of analytics or advertising tools, in particular Google, where we use such tools on the Website and where permitted by applicable law and the user’s privacy settings;
building owners or managers, the housing association, technical service providers or entities responsible for security where this is necessary to investigate an event, damage, failure, incident or safety-related situation;
competent public authorities, courts, law enforcement bodies, or other entities authorised to obtain data under applicable law.

We disclose personal data only to the extent necessary for the relevant purpose and on the basis of an appropriate legal basis, a data processing agreement, or another mechanism required by applicable law.

Data retention periods

We retain personal data for the period necessary to fulfil the purpose for which it was collected and subsequently for any period required by law or necessary to establish, pursue or defend claims.

Depending on the type of data and the purpose of processing, data may be retained in particular as follows:

data connected with bookings and the provision of Services – for the period necessary to manage the booking and provide the Service, and then for the limitation period applicable to any potential claims;
data connected with contact by email, telephone or contact form – for the time necessary to deal with the enquiry or matter concerned and then for the period necessary to demonstrate the course of the correspondence or defend against potential claims;
data connected with Voucher redemption – for the period necessary to manage the booking and verify and redeem the Voucher, and then for the limitation period applicable to any potential claims;
data connected with payments, accounting and tax documentation – for the period required by applicable law, in particular accounting and tax rules;
data contained in complaints – for the time necessary to consider the complaint, provide a response and document the complaints procedure, and then for the limitation period applicable to any potential claims;
data connected with damage, incidents, breaches of the Terms and Conditions or claims – for the time necessary to investigate the matter, protect the interests of MYSTERIOUS ROOM, establish, pursue or defend claims, and comply with legal obligations;
paper consents relating to participation by Minors in MYSTERIOUS ROOM Services – for the period necessary to demonstrate that the Minor used the Service with the consent of a Legal Guardian, and then for the limitation period applicable to any potential claims;
CCTV recordings – for up to 7 days from the date of recording, unless a recording is required to investigate an incident, complaint, damage, breach of the Terms and Conditions, emergency, or to establish, pursue or defend claims; in such a case, the recording may be retained for the period necessary to conclude the relevant proceedings or secure claims;
data processed on the basis of consent – until consent is withdrawn, unless the data is also required on another legal basis, for example to demonstrate that consent was given, settle a Service, or establish, pursue or defend claims;
technical data, cookies and analytics data – for the period resulting from the settings of the relevant tool, the type of cookie, the user’s browser settings, or until the user deletes the cookies.

After the relevant retention period has expired, data is deleted, anonymised or restricted to the extent permitted by applicable law and technical capabilities.

Transfers of personal data outside the European Economic Area

As a rule, we process personal data within the European Economic Area.

In some cases, personal data may be transferred outside the European Economic Area, in particular where we use tools or services provided by entities established outside the European Economic Area or using technical infrastructure located outside it, such as providers of analytics, advertising, IT or hosting tools.

Where personal data is transferred outside the European Economic Area, the transfer takes place in accordance with applicable law, in particular on the basis of:

an adequacy decision of the European Commission confirming an adequate level of personal data protection in the relevant country or in relation to the relevant transfer mechanism;
standard contractual clauses adopted by the European Commission;
other safeguards or transfer mechanisms provided for under the GDPR.

Where Google services are used, in particular Google Analytics or Google Ads, data may be processed by Google in accordance with Google’s privacy rules, terms of service, and data transfer mechanisms.

Information about safeguards used when transferring data outside the European Economic Area may be obtained by contacting the Data Controller at the email address indicated in this Policy.

Cookies and similar technologies

The MYSTERIOUS ROOM Website uses cookies and similar technologies.

Cookies are small files stored on a user’s device when they use a website. Cookies may be used, in particular, to ensure that the Website functions properly, remember selected settings, compile statistics, analyse how the Website is used and, where advertising tools are used, measure the effectiveness of advertising activities.

The Website may use, in particular:

essential cookies – required for the proper operation of the Website and its basic functions;
analytics cookies – used to compile statistics and analyse how the Website is used, in particular through tools such as Google Analytics;
advertising or marketing cookies – used to measure the effectiveness of advertising activities or tailor advertising content, in particular where tools such as Google Ads are used.

Essential cookies may be used to the extent necessary for the proper operation of the Website.

Analytics, advertising or marketing cookies should be used on the basis of the user’s consent where such consent is required by applicable law.

Users may manage cookies through their browser settings. A browser can, in particular, be configured to block cookies, delete stored cookies, or display notifications when cookies are being stored.

Restricting or disabling cookies may affect the operation of some Website functions.

Where a cookie consent management tool is available on the Website, users may use it to give, refuse or change consent for the use of individual categories of cookies.

Google Analytics and Google Ads

The MYSTERIOUS ROOM Website may use analytics and advertising tools provided by Google, in particular Google Analytics and Google Ads.

Google Analytics may be used to compile statistics concerning use of the Website, analyse Website traffic, assess the effectiveness of content, and improve the Website.

Google Ads may be used to run or measure the effectiveness of advertising activities where MYSTERIOUS ROOM uses such activities at a given time.

In connection with the use of Google tools, the data processed may include, in particular, technical data, information about the device and browser, Website activity, source of entry to the Website, approximate location derived from technical data, and identifiers stored in cookies or similar technologies.

The scope of data processed by Google depends on the configuration of the tools, the user’s privacy settings, browser settings, consents given, and Google’s own rules.

Cookies and similar technologies associated with analytics or advertising tools should be used on the basis of the user’s consent where such consent is required by applicable law.

Users may restrict data processing by Google tools, in particular through cookie settings, browser settings, Google Account privacy settings, or other tools made available by Google.

More information on how Google processes data in connection with the use of Google services by websites, including Google Analytics and Google Ads, is available in documents published by Google, in particular information on how Google uses data from sites and apps that use Google services, information about Google cookies, and the Google Privacy Policy.

Links to external services, the online shop and social media

The MYSTERIOUS ROOM Website may contain links to external online services, in particular the Lockme booking system, the MYSTERIOUS ROOM online shop, and MYSTERIOUS ROOM social media profiles.

Clicking a link to an external service may take you to a website operated by another entity. Use of such a service is governed by the provider’s own terms and conditions and privacy policy.

The MYSTERIOUS ROOM online shop is operated at a separate address and has its own Privacy Policy. The processing of personal data in connection with use of the online shop, placing orders, payments, product delivery and purchasing e-vouchers is governed by the Privacy Policy of the online shop.

The MYSTERIOUS ROOM Website may contain links to MYSTERIOUS ROOM profiles on social media platforms such as Facebook, Instagram, TikTok or YouTube.

Where the Website contains only icons or links leading to social media profiles, simply viewing the Website does not automatically result in user data being transferred to those services through active social media plug-ins.

After clicking a link to a MYSTERIOUS ROOM social media profile, user data may be processed by the provider of that platform in accordance with the provider’s privacy documentation.

Rights of data subjects

In connection with the processing of personal data, you have the rights provided for under the GDPR.

Depending on the circumstances, you may have the right to:

access your personal data, including obtaining information on whether we process your data and to what extent;
receive a copy of the personal data being processed;
rectify data where it is inaccurate or out of date;
complete data where it is incomplete;
have data erased where the conditions for erasure are met;
restrict the processing of data;
data portability where processing is based on consent or a contract and is carried out by automated means;
object to the processing of data where processing is based on the Controller’s legitimate interests;
withdraw consent at any time where data is processed on the basis of consent. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn;
lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if you believe that the processing of your personal data infringes applicable law.

To exercise your rights, you can contact us by email at: biuro@mpzic.pl

In your message, it is helpful to state which right you wish to exercise and which data or situation your request concerns. This may make it easier and quicker for us to deal with your request.

Some rights may not apply in every situation. This depends, in particular, on the legal basis for processing, the purpose of processing, the type of data, and obligations arising from applicable law.

Where a request requires us to verify the identity of the person making it, we may ask for additional information necessary for verification.

Server logs

Using the MYSTERIOUS ROOM Website involves sending requests to the server on which the Website is hosted. Each request may be recorded in server logs.

Server logs may include, in particular:

user IP address;
date and time of connection to the Website;
information about the web browser;
information about the operating system;
address of the webpage visited;
address of the webpage from which the user came to the Website;
information about errors or technical events connected with the operation of the Website.

Server logs are used to ensure the proper operation of the Website, diagnose technical problems, ensure security, prevent misuse, and carry out technical administration of the Website.

As a rule, data stored in server logs is not used to identify a specific user unless this is necessary to investigate a security incident, misuse, failure, breach of law, establish, pursue or defend claims, or comply with legal obligations.

Server logs may be accessed by the Controller and by providers of hosting, IT or technical services, to the extent necessary to ensure the proper and secure operation of the Website.

Changes to the Privacy Policy

This Privacy Policy may be updated, in particular where there are changes to applicable law, the operation of the Website, the tools used, the scope of MYSTERIOUS ROOM Services, or the way in which personal data is processed.

The current version of the Privacy Policy is published on the MYSTERIOUS ROOM Website.

Changes to the Privacy Policy take effect on the date on which they are published on the Website unless the Policy states a different effective date.

In the event of material changes concerning the processing of personal data, MYSTERIOUS ROOM may take additional steps to provide information where required by law or justified by the nature of the changes.