Privacy Policy

This Privacy Policy defines the rules for processing personal data obtained through the Website located at www.gramiejskakrakow.pl (hereinafter referred to as the “Website”).

All personal data is collected and stored in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR“), as well as the Act of 18 July 2002 on providing services by electronic means.

Data Controller

The administrator of personal data is EscapeCity Spółka z ograniczoną odpowiedzialnością with its registered office in Krakow, ul. Kościuszki 74/13, 30-114 Krakow, KRS: 0000357047, NIP: 9442219177.

Administrator contact details:

  • Email: hello@gamescape.pl
  • Phone: +48 789 315 401

Personal Data

Personal data of Users is collected when using the services provided via the Website. The following data is collected:

  • First name;
  • Last name;
  • Email address;
  • Phone number;

While using the Website, additional information is automatically collected, such as: the IP address assigned to the User’s computer or the external IP address of the Internet provider, domain name, browser type, access time, and operating system type. Navigation data may also be collected from Users, including information about links and references that Users decide to click on or other activities undertaken within the Website.

Use of Data

If a User utilizes services provided electronically, their personal data will be used to the extent necessary to fulfill reservations, execute the contract, technical administration of the website, individual support, marketing, and the provision of the newsletter service. The User provides their personal data voluntarily, however, it is essential primarily for:

  • Concluding a contract and handling/fulfilling reservations (legal basis Art. 6(1)(b) of the GDPR) – for the duration of the concluded contract and settlements after its completion;
  • Fulfilling the legal obligations incumbent on the Administrator (legal basis Art. 6(1)(c) of the GDPR), including: – Issuing and storing personal sales documents (invoice, receipt) – for the period during which regulations require us to store tax documents, – Handling and processing potential complaints – until the end of the warranty period for product compliance with the contract or the warranty for services provided;
  • Realizing the legitimate interests of the Administrator (legal basis Art. 6(1)(f) of the GDPR), i.e.: – Conducting direct marketing – until an objection to the processing of personal data is raised; – Selecting services for customers, optimizing products or services based on customer comments, optimizing service processes based on the course of reservation handling (analytical purpose); – Surveying customer satisfaction and determining service quality; – Creating statistics and analyses for internal needs – for the period during which your data is stored for other purposes indicated in this privacy policy.

For the purposes indicated above (except for “contract execution/reservation fulfillment” and “fulfillment of legal obligations”), we will perform profiling, which is an automated analysis of User data and the development of predictions about preferences or future behavior (e.g., in the case of marketing profiling, we will match advertising messages to needs and preferences). In cases where the User consents to the processing of their data, the content of that consent will specify the purpose for which we will process that data. Providing personal data by the User is voluntary but necessary to make a reservation, purchase a ticket, subscribe to the newsletter, or simply contact us, etc.

Data Recipients

We may transfer User data to other companies we cooperate with, i.e.: payment operators, hosting companies that store data for us on their servers, suppliers and partners in providing marketing and advertising services, law firms, and accounting firms. The above processing may also result in data being sent to data recipients outside the European Union. We strive to ensure that the transfer of data in this regard is consistent with the principles of the so-called Privacy Shield (https://www.privacyshield.gov/welcome) or based on the so-called Standard Contractual Clauses of the European Commission (http://ec.europa.eu/justice/data-protection/international-transfers/index_en.htm).

Cookies Mechanism, IP Address

The Website uses small files called cookies. They are saved via the Website on the User’s computer if the web browser allows it. A cookie file usually contains the name of the domain it comes from, its “expiration time,” and an individual, randomly selected number identifying the file. Information collected using this type of file helps to adapt the services offered by the Website to individual preferences and the actual needs of people visiting the Website. It also provides the opportunity to develop general statistics of visits to the information presented on the Website.

The Website uses two types of cookies:

  • Session cookies: After ending a given browser session or turning off the computer, the saved information is removed from the device’s memory. The session cookies mechanism does not allow for the collection of any personal data or any confidential information from the computer;
  • Persistent cookies: They are stored on the User’s computer’s hard drive and remain there until they are deleted. The persistent cookies mechanism sent by the Website allows for the storage of data only with your consent (expressed, for example, by selecting the “remember me” option when logging in). In no other case are these files saved permanently.

The Website uses external cookies to: a) Collect statistical data via the Google Analytics analytical tools (external cookies administrator: Google Inc based in the USA); b) Popularize the Website using the social networking site Facebook.com (external cookies administrator: Facebook Inc based in the USA or Facebook Ireland based in Ireland); c) Present multimedia content on the Website’s pages, which are downloaded from the external website www.youtube.com (external cookies administrator: Google Inc based in the USA); d) Enable the User to provide an electronic address intended for sending commercial information via the MailChimp tool (external cookies administrator: Rocket Science Group LLC based in the USA).

If the User has a profile on any of the social networking sites but does not want the site operator to collect data concerning them via our website and possibly combine it with other stored data, please log out completely from the given social networking site before visiting other websites and possibly delete the relevant cookies. The cookies mechanism is safe for the computers of Website Users. In this way, it is not possible for viruses or other unwanted software or malware to enter the Users’ computers. Nevertheless, in their browsers, Users have the option to limit or disable the access of cookies to their computers. If this option is used, using the Website will be possible, except for functions that by their nature require cookies.

Below we present how you can change the settings of popular web browsers regarding the use of cookies:

The Website may collect Users’ IP addresses. An IP address is a number assigned to a Website User’s computer by the Internet service provider. The IP number enables access to the Internet. In most cases, it is assigned to the computer dynamically, i.e., it changes with each connection to the Internet and for this reason is commonly treated as non-personal identifying information. The IP address is used by the Website to diagnose technical problems with the server, create statistical analyses (e.g., determining from which regions we record the most visits), as information useful in administering and improving the Website, as well as for security purposes and the possible identification of unwanted automated programs browsing the Website’s content that burden the server.

The Website contains links and references to other websites, however, the administrators of those sites are responsible for the privacy protection rules applicable there. For this reason, we encourage you to read the privacy policy adopted there after moving through the Website to a site managed by another administrator. We use social plugins from the following social networking sites:

  • Facebook Inc. (www.facebook.com, 1601 Willow Road, Menlo Park, CA 94025, USA);
  • Twitter Inc. (1355 Market Street, San Francisco, California, USA);
  • Pinterest Inc. ([podejrzany link usuniÄ™to], 651 Brannan Street, San Francisco, CA 94103, USA);
  • LinkedIn Corp. (www.linkedin.com, 222 Second Street, San Francisco, USA);
  • Google Ireland Limited (youtube.com, Gordon House, Barrow Street Dublin 4, Ireland).

Rights of the Website User

The Website User whose data is processed on the Website has the right to:

  • Access their personal data and receive a copy;
  • Rectify their personal data if it is untrue, as well as supplement it if it is incomplete;
  • Complete erasure of their personal data (the right to be forgotten);
  • Restrict the processing of their data;
  • Object to the processing of their data for analytical and statistical purposes;
  • Lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of their data violates the provisions of the GDPR or the provisions of the Personal Data Protection Act.

Changes to the Privacy Policy

We reserve the right to make changes to the privacy policy, of which we will, of course, inform you. Please send any additional questions related to the privacy policy to the email: hello@gamescape.pl

Date of last modification: 05.12.2025