Privacy policy and cookies

Welcome!

Some formal information for starters – online website pokojezagadek.eu is administered and owned by  Mysterious Room – MPZ Investments Center sp. z o.o. placed in Warsaw by Wynalazek 4 st., 02-677, NIP: 9512464279, REGON: 380546167, KRS: 0000735841.

In case of any questions regarding the privacy policy, feel free to contact us at biuro@mpzic.pl.

 

Most important information.

We care for your privacy as we do for your time, so  we prepared a compiled version of the most important rules regarding the privacy policy.

  1. We let only trusted and checked subjects to manage your personal data.

  2. We use analytic tools such as Google Analytics that collect data such as  what sites have you seen, time spent on them or opening specific subsites. For that purpose we use Google LLC cookie files. We collect geodata and  data about your interests.  You can decide whether you let us collect that  data or not by accepting or declining the use of cookie files.

  3. We allow usage of social features such as sharing our content on your social media or subscribing to our social profiles. By using those features we  may be using cookies from social medias such as Facebook, Instagram, Youtube, TikTok, LinkedIN.

  4. We use our own cookie files to make sure the site works correctly, especially  when processing user accounts in case of making an online  order.

If the information above is not enough for you, there is more detailed information down below.

Personal  data.

Administrator of your personal data according to the personal data protection law is MPZ Investments Center sp. z o.o. placed in Warsaw by Wynalazek 4 st., 02-677, NIP: 9512464279, REGON: 380546167, KRS: 0000735841.

Purpose, legal ground and time we process your personal data are different for each of purposes we process  that data (look for: description of each purpose of processing personal data).

Entitlements.

RODO grants you following legal rights regarding processing your personal data:

  1. accessing your personal data,

  2. correction of your personal data,

  3. removing your personal data,

  4. limiting your personal data,

  5. right to not agree to transfer your personal data,

  6. right to move data,

  7. filing a  complaint to supervisory authority,

  8. canceling the acceptance of personal data transfer if you have granted us one.

Rules of realisation the following rights are described in detail in article 16 – 21  RODO. We encourage you to read the following. We think that the best way is to explain that the above rights are not absolute and won’t be used in all personal data transfer cases. For your convenience we make sure that certain processes you do on our  website are detailed with what rights are tenable.

We emphasise that one of the above rights grants you the possibility to file a complaint if you think that we violated the personal data process law. To do so, please contact the head of the supervisory authority (the head of Office of Personal Data Protection)

You can always reach out to us with the demand to share your personal data we gathered and for what we have gathered them. You just have to send us an email at biuro@mpzic.pl. We  made  sure that all information you may find useful and interesting are gathered  down below. In case of any questions about  your personal data, feel free to contact us at the email address mentioned above.

Safety.

We guarantee confidentiality of every personal data shared to us. We ensure that we take any necessary safety measures of personal data protection required by personal data protection law. Information mentioned above are gathered with caution and kept safe away from unauthorised eyes.

Data recipients.

Your personal data may be processed by our subcontractors, meaning service providers we use to process the information and provide services and online orders for you.

  1. cyber_Folks S.A. ul. Franklina Roosevelta 22, 60-829 Poznań – online data storage,

  2. ATS ADL Agnieszka Laskowska ul. Krakowiaków 103, 02-255 Warszawa – accounting and personnel services,

  3. Infakt Sp. z o.o. ul. Szlak 49, 91-153 Kraków – for issuing invoices,

  4. Lockme Sp. z o.o.  ul. Ofiar Oświęcimskich 17, 50-069 Wrocław – in order to transfer information about booking rooms to a partner website (widget)

  5. mBank S.A. ul. Senatorska 18, 00-950 Warszawa – providing  the payment system,

  6. Inpost Sp. z o.o. ul. Pana Tadeusza 4, 30-727 Kraków – in order to provide shipment services

  7. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – zakres powierzenia obejmuje zapewnianie miejsca na serwerze na dokumenty w ramach Google Docs oraz na książkę telefoniczną.

Every subject, we give access to your personal data guarantees suitable safety and protection measures required by personal data protection law.

Personal data processing and purpose

Booking an escape room.

Booking an escape room via our online website you must fill required personal data, it is: name, surname, email address and phone number. Whether you have already filled above information in your account, it will be filled in automatically, ensuring you modification possibility.

Legal right to process your personal included in your order is included in services terms of use.

Booking an escape room via our online website you are signing a deal directly with the service owner. Accordingly, your personal data administrator is also the escape room owner. It means that during your order implementation two subjects are the administrators, service owner and administrator. Order is processed by the escape room owner, so the administrator is only responsible for personal data storage. Data may be kept for the service time being.

Retrieving carts.

Our website is equipped with a lost cart retrieving system. Meaning, when you fill the order form but you won’t finalise the transaction, we store your data for 3 days. System is based on room booking personal data collection.

Voucher purchase.

Purchasing a voucher is possible via our website https://sklep.pokojezagadek.eu (online store is only in polish, meaning the only currency is PLN) and locally. Buying a voucher via our online website you must fill required personal data, it is: name, surname, email address and phone number. Whether you have already filled above information in your account, it will be filled in automatically, ensuring you modification possibility.

Legal right to process your personal included in your order is included in services terms of use.

Data required for order processing may be kept for the service time being.

Invoices.

If an invoice is required after using our  service, we process your personal data  required to fill an invoice. Legal  right to process your personal data in this case is fulfilling the legal obligation to fill an invoice. Moreover, every invoice is included in our accounting documentation, meaning your personal data will be kept for the time required by the law.

Complaint and withdrawing from the contract.

If you’re filling a complaint or withdrawing from the contract, then you provide us with personal data included in the complaint or the statement, which includes name, surname, address, phone number, email address, bank account number. Providing that data is non-obligatory, but necessary to file a complaint or withdraw from the contract.

The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawing from the contract (art. 6 ust. 1 lit. c RODO).

Data given to us are used in complaint or withdrawal procedure. Complaints and withdrawal statements may also be kept for statistics purposes.

In case of data required for complaints and withdrawal statements, you can not correct the data. You can’t also not agree with the data processing and demand data removal after the limitation period. What you can do after the limitation period is to not agree to use your data as a statistic. You can also demand you data being completely removed from our database.

E-mail contact.

By contacting us via e-mail, including sending an inquiry via the contact form, you provide us with your e-mail address as the sender’s address. Moreover, you can also include other personal data in the message. Providing data is voluntary, but necessary to make contact with you.

In this case, your data is processed in order to contact you, and the basis for processing is article 6 of the Act 1 letter a GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is the legitimate purpose of archiving correspondence for internal needs (article 6 of the Act 1 letter c GDPR).

The content of the correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request a history of correspondence with us (if it was archived), as well as request its removal, unless its archiving is justified due to our overriding interests, e.g. defense against your potential claims.

Surveys, inquiries and other forms.

The website may offer various types of surveys, inquiries and other forms in which you can enter personal data. If you fill in and send such a form, the personal data contained therein will be processed only for the purpose of handling the survey, inquiry or other purpose of the form. The content of the correspondence may be archived.

Cookies and other tracking technologies.

Our website, like almost all other websites, uses cookies.

Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone), which can be read by our IT system (our own cookies) or the IT system of third parties (cookies of third parties).

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing it (session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the website (persistent cookies).

You can find more details below.

Consent to cookies.

During the first visit to the website, you are shown information about the use of cookies. You can manage cookies from the website level by using a special tool. Moreover, you can always change cookie settings using your browser or delete them. Browsers manage cookie setting in various ways. In the help menu of the web browser you will find explanations on how to change cookie settings.

Remember that disabling or limiting the use of cookies may cause difficulties in using our website, as well as many other websites that use them.

Own cookies.

We use our own cookies to ensure the proper functioning of the website, especially the ordering process and logging into the user’s account.

Cookies of third parties.

Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of such cookies is described below.

Google Analytics.

We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest, which is about creating statistics and analyzing them in order to optimize our websites.

Google Analytics automatically collects information about your use of our website. The information collected this way is most often transferred to a Google server in the United States and stored there.

Due to the IP anonymization activated by us, your IP address is shortened before forwarding. The full IP address is sent to a Google server in the United States and shortened there only in exceptional cases. The anonymized IP address provided by your browser as part of Google Analytics is not combined with other Google data.

Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program in order to ensure an adequate level of personal data protection required by European regulations. As part of the agreement between the USA and the European Commission, the European Commission has established an adequate level of data protection for companies certified by the Privacy Shield.

You can prevent the recording of the data collected by cookies regarding your use of our website by Google, as well as the processing of this data by Google, by installing the browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout.

As part of Google Analytics, we also collect demographic data and data about your hobbies. As part of the cookie settings, you can decide directly from our website whether you consent to the collection of such data about you or not.

If you are interested in details related to data processing as part of Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.

Social tools.

Our website uses plug-ins and other social tools provided by social networks, such as Facebook, Twitter, Instagram, Google, LinkedIN.

By displaying our website containing such a plug-in, your browser establishes a direct connection with the servers of social network administrators (service providers). The content of the plugin is transferred by the given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile on the website of a given service provider or you are not logged in at the moment. Such information (along with your IP address) is sent by your browser directly to the server of a given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, this service provider will be able to directly assign visiting our website to your profile on a given social networking site.

If you use a given plug-in, for example by clicking on the “Like” or “Share” button, the relevant information will also be sent directly to the server of the given service provider and stored there.

Moreover, this information will be published on a given social network and will appear to people added as your contacts. The purpose and scope of data collection, their further processing and use by service providers, the possibility of contact,  your rights in this regard and the possibility of making settings to protect your privacy are described in the privacy policy of individual service providers.

If you do not want social networking sites to assign the data collected during your visit to our website directly to your profile, you must log out from your profile before visiting our website. You can also completely prevent loading of plugins on the website by using appropriate extensions for your browser, e.g. blocking scripts

Server logs.

Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server logs.

Logs include Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and storen on the server.

The data stored in the server logs are not associated with specific people who use the website and are not used by us to identify you.

The server logs are used only to help with administering the website, and their content is not shown to anyone except those authorized to administer the server.