PRIVACY POLICY – regarding the “EscapeCity” application

This privacy policy outlines the principles for processing personal data collected through the website located at www.escapecity.pl (hereinafter referred to as the “Service”) in connection with the purchase of access codes to the game (hereinafter referred to as the “Game”) within the “EscapeCity” application (hereinafter referred to as the “Application”), as well as during the use of the Application.

All personal data is collected and stored in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), as well as the Act of 18 July 2002 on the provision of services by electronic means.

Personal Data Administrator

The administrator of personal data is GAMESCAPE Spółka z ograniczoną odpowiedzialnością (Limited Liability Company) based in Krakow, ul. Kościuszki 74, 30-114 Kraków, KRS 0000666086, NIP 6751584536; Administrator contact details: email: hello@gamescape.pl; phone: +48 789 315 401.

Personal Data Personal data of the Service users is collected when they purchase access codes to the Game via the Service. In this situation, the following data is collected:

first name;
last name;
email address.
Personal data of Application users is collected when they use the Game in the Application. In this case, the following data is collected:

first name or player nickname provided by the user, noting that they may provide fictional data,
image captured in a photo taken as part of the Game’s task (if the user consents),
image or voice recorded on a video taken as part of the Game’s task (if the user consents),
user’s GPS location to display it on the map and perform subsequent tasks (the user’s location will not be shared or sent to the server).
Data Usage

In case the user purchases access codes to the Game via the Service, their personal data will be used to the necessary extent to fulfill the agreement, including providing the access code. The user provides their personal data voluntarily, but they are necessary primarily for:

entering into and servicing the agreement (legal basis: Article 6(1)(b) GDPR) – for the duration of the agreement and settlement after its completion;
fulfilling legal obligations incumbent on the Administrator (legal basis: Article 6(1)(c) GDPR), including:
issuing and storing sales documents – for the period required by tax law,
handling and processing potential complaints – until the end of the warranty period for the conformity of goods with the contract or warranty for provided services.
When the user plays the Game in the Application, their personal data will be processed with their consent (legal basis: Article 6(1)(a) GDPR). Providing data is voluntary, but the first name or nickname is necessary to use the Game (these can be fictional). Lack of consent to take photos (processing data in the form of an image) does not prevent participation in the Game, but it may prevent the use of certain features (e.g., completing tasks requiring photos). This data will be processed for the duration of the user’s Game usage and for 90 days after its completion.

The data mentioned above will not be subject to profiling.

Data Recipients

We may share Service or Game user data with other companies we cooperate with, such as payment operators, hosting companies that store data on their servers for us, law firms, accounting firms, service providers, and partners related to the Application or Game, particularly Locatify ehf based in Borgarnes, Iceland. Locatify’s privacy policy is available here: https://locatify.com/privacy-policy-for-locatifys-treasure-hunt-apps/

The aforementioned processing may also result in data being transferred to recipients outside the European Union. We strive to ensure that any such data transfer complies with the Data Privacy Framework (https://www.dataprivacyframework.gov/) or is based on the European Commission’s Standard Contractual Clauses (https://ec.europa.eu/commission/presscorner/detail/en/ip_21_2847).

User Rights

A Service or Game user whose data is processed has the right to: • access their personal data and receive a copy, • correct their personal data if it is inaccurate or complete it if it is incomplete, • completely delete their personal data (right to be forgotten), • restrict the processing of their data, • object to the processing of their data for analytical and statistical purposes, • withdraw consent to the processing of personal data at any time without affecting the lawfulness of the processing carried out based on the consent before its withdrawal, • file a complaint with the President of the Data Protection Office (ul. Stawki 2, 00-193 Warsaw), if they believe that the processing of their data violates GDPR or the provisions of the personal data protection law.

Changes to the Privacy Policy

We reserve the right to make changes to this privacy policy, of which we will inform you. Any additional questions regarding the privacy policy should be directed to the email: hello@gamescape.pl.

Service Privacy Policy

The principles for processing personal data collected by the Service, which are not regulated in this Privacy Policy, as well as information regarding cookies, can be found at: https://escapecity.pl/polityka-prywatnosci/

Last modification date: 19.06.2024.