1. General Information

1. The operator of the walkout.pl website is Walkout Marcin Daniel, Krzysztof Nowocin, and Piotr Walkowiak civil partnership based in Gdynia (81-370), Skwer Kościuszki 15/9, NIP: 5862380368, REGON: 521922302, email: biuro@walkout.pl (hereinafter "Administrator").
2. The Administrator processes personal data in accordance with applicable law, in particular the EU General Data Protection Regulation (GDPR).
3. Personal data is processed with respect for security principles and only to the extent necessary to achieve specific purposes.

2. Scope and Purposes of Data Processing

The Administrator processes personal data of users for the following purposes:

• to manage escape room reservations (Article 6(1)(b) GDPR),
• to handle inquiries sent electronically or by phone (Article 6(1)(f) GDPR),
• to fulfill accounting and tax obligations (Article 6(1)(c) GDPR),
• to ensure safety of persons and property through video monitoring in the facility (Article 6(1)(f) GDPR),
• to generate statistics and analyze website traffic (Article 6(1)(a) GDPR – consent),
• for marketing and remarketing activities using external tools (Article 6(1)(a) GDPR – consent).

3. Types of Processed Data

The Administrator may process in particular:

• first and last name,
• email address,
• phone number,
• content of messages,
• IP address and statistical data,
• image recorded by the monitoring system.

4. Recipients of Data

1. Personal data may be shared with cooperating entities solely to the extent necessary to provide services, including:
• hosting and IT service providers,
• reservation system operators,
• accounting service providers,
• Google LLC (Google Analytics),
• Meta Platforms Ireland Ltd. (Facebook Pixel).
2. Data is transferred based on data processing agreements or other legal grounds.
3. Data may be transferred outside the European Union (USA) when using Google and Meta tools, in accordance with the European Commission's standard contractual clauses.

5. Data Retention Period

• reservation-related data – for the duration of the contract and up to 5 years after its completion,
• data processed based on consent – until withdrawal of consent,
• accounting data – according to applicable law,
• monitoring recordings – maximum 30 days unless used as evidence in proceedings.

6. Rights of Data Subjects

Data subjects have the right to:

• access their data,
• correct their data,
• request deletion of their data (right to be forgotten),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (if processing is based on consent),
• lodge a complaint with the President of the Personal Data Protection Office.

7. Cookies

1. The walkout.pl website uses cookies.
2. Cookies are used for:
• technical purposes (proper functioning of the website),
• analytics (Google Analytics),
• marketing and remarketing (Facebook Pixel, Google Ads).
3. Users can manage cookies via their browser settings or via the cookie banner available on the website.
4. Use of analytical and marketing cookies requires user consent.

8. Server Logs

Visiting the website generates server logs, which may include IP address, request time, browser data, and other technical information. These logs are used solely for administrative purposes and ensuring security.

9. Data Security

The Administrator implements appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or disclosure.

10. Changes to Privacy Policy

The Administrator reserves the right to update this Privacy Policy. The current version is always available on the website.