Lockedup.pl Privacy Policy

The administrator of the website www.lockedup.pl is Lockedup.pl Małgorzata Świątkowska with its registered office at ul. Wybickiego 3/71, 31-261 Kraków NIP: 6771159753
Contact with the administrator is possible at info@lockedup.pl

1. Definitions
For the purposes of this privacy policy, the following terms are used: Website – website available at https://lockedup.pl
User – any entity that uses the Website.

2. Personal data
The administrator of personal data within the meaning of the provisions on the protection of personal data is Lockedup.pl Małgorzata Świątkowska with its registered office at ul. Wybickiego 3/71 31-261 Kraków NIP 6771159753.
Contact the administrator: info@lockedup.pl

In connection with our processing of your personal data, you have the following rights:

1. the right to request access to your personal data, rectification, deletion or limitation of processing,
2. the right to object to the processing
3. right to data portability,
4. the right to withdraw consent to the processing of personal data for a specific purpose
5. the right to lodge a complaint to the supervisory body in relation to the processing of personal data by us.

You can exercise the above rights in accordance with the principles described in art. 16 – 21 GDPR, by contacting us at info@lockedup.pl. We may refuse you the exercise of some of the rights indicated above in a situation where the exercise of a given right would be in conflict with the legitimate purpose of the data processing by us.

For example, we may refuse you to delete personal data contained in your order until the expiry of the limitation period for claims arising from the contract concluded via the website. Providing personal data by you is always voluntary, but necessary to make a reservation on the site, subscribe to the newsletter, contact us, send an inquiry or other form. We guarantee the confidentiality of all personal data provided to us. We ensure that all security measures and personal data protection required by the provisions on personal data protection are taken.

Personal data is collected with due diligence and adequately protected against access by unauthorized persons. All entities entrusted with the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

Because we use Google services, your data may be transferred to the United States of America (USA) for storage on servers. Google has joined the Privacy Shield program and thus guarantees the appropriate level of protection of personal data required by European regulations.

We entrust the processing of personal data to the following entities:
Amazon Web Service – to store data on a server, Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA – to use Google services such as Google Drive and Google Docs,
under which your personal data may be processed,

Data entrusted for processing

In addition to your personal data, we also process your clients’ personal data that you collect as part of the system. In this regard, you entrust us with the processing of this data, while agreeing to their further entrustment in order to provide the access service. You can be sure that your clients’ data is secure and we do not gain access to it in any way, unless it is necessary to handle your technical inquiry.

In such a situation, however, we undertake to maintain full confidentiality of data and not use them for any purposes other than providing the service. Remember that in relation to given clients, you are their administrator, so you are under the obligations that the applicable regulations impose on personal data controllers. These responsibilities include the need to have an appropriate legal basis for the processing of personal data and the implementation of the information obligation. We provide you with the option of concluding a separate contract for entrusting the processing of personal data. You can contact us in this matter info@lockedup.pl

3. 3. Invoices.
      If, in connection with the use of the website, we issue or deliver an invoice to you, we process your personal data to the extent necessary to issue an invoice. The legal basis for processing your data in this case is the fulfillment of the legal obligation to issue an invoice. In addition, all invoices issued are included in the accounting documentation, so your data will naturally be processed as part of this documentation for the period of time required by law.
   4. Booking
      When booking an escape room / puzzle rooms via the website, you must provide your personal data necessary to complete the order, i.e. name, email address and telephone number. The legal basis for processing your personal data contained in the order is the performance of the contract that you conclude on the basis of the website’s regulations. By booking a room via the lockedup.pl website, you conclude a contract directly with Lockedup.pl. and the owner of the room. Therefore, the administrator of your personal data provided in the order form is also the room owner. This means that in the implementation of the order placed, two entities – the room owner and the website administrator – are independent controllers of your personal data. The order is carried out by the owner of the room, therefore the administrator of the lockedup.pl website processes data only in the scope of storing them in their database. The data will be stored in the database for the duration of the website’s operation. Data related to the order will be stored in the administrator’s database for the duration of the website.
      Providing your data is a condition for using our services.
   5. Email, phone, Facebook contact
      By contacting the website administrator via e-mail you naturally give the administrator your e-mail address as the sender’s address. In addition, you can also include other personal data in the content of the message. When making a reservation or making an inquiry by phone, via Facebook you must provide the data necessary to complete the order / point 3 reservations / The legal basis for processing personal data in this case is your consent resulting from initiating contact with us. Your personal data provided to us as part of an e-mail, telephone or facebook contact is processed solely to process your inquiry. The content of correspondence may be archived.
   6. Newsletter.
      Through the website you can subscribe to the newsletter containing information about new products, promotions, products and services related to the website. In order to send the newsletter, your personal data is processed in terms of name and email address. The legal basis for the processing of your personal data in the case of the newsletter is your consent expressed by checking the relevant content of the checkbox when subscribing to the newsletter. You can withdraw your consent at any time by unsubscribing from the newsletter. The data processed for the purpose of sending the newsletter are stored in the mailing system database for the duration of the newsletter operation, unless you unsubscribe from the newsletter, which will delete the data from the database.
      Surveys, queries and other forms.
      The website may contain various types of surveys, inquiries and other forms in which you can enter personal data. If you complete and submit such a form, the personal data contained therein will be processed solely for the purpose of handling the survey, inquiry or other purpose of the form. The content of correspondence may be archived.
   7. Other technologies
      The Administrator informs the User that he uses the following technologies to track activities undertaken by the User within the Website: Facebook conversion pixel – to manage Facebook ads and conduct remarketing activities, Google Analitycs tracking code – to analyze Website statistics. Google AdWords tracking code – to display personalized ads
   8. Cookies
      The administrator uses cookies, i.e. small text information stored on the User’s end device (e.g. computer, tablet, smartphone). Cookies can be read by the Administrator’s ICT system. The administrator stores cookies on the User’s end device and then gains access to the information contained therein for statistical purposes, for marketing purposes (remarketing) and to ensure the proper functioning of the Website. The Administrator informs the User that there is a possibility of configuring the web browser that prevents the storage of cookies on the User’s end device. In such a situation, the User’s use of the Website may be difficult. The Administrator hereby indicates that cookies may be deleted by the User after they have been saved by the Administrator, through the appropriate functions of the web browser, programs used for this purpose or using the appropriate tools available under the operating system used by the User. Cookies allow us to direct personalized advertising to you.
   9. Server logs
      Using the Website is associated with sending queries to the server on which the Website is stored. Each query directed to the server is saved in the server’s logs. Logs include, among others User’s IP address, server date and time, information about the web browser and the operating system used by the User. Logs are saved and stored on the server. The data saved in the server logs are not associated with specific people using the Website and are not used by the Administrator to identify the User. Server logs are only auxiliary material used to administer the Site, and their content is not disclosed to anyone except persons authorized to administer the server.