Політика конфіденційності

Privacy and cookie policy

Welcome!

If you came here, it is a sure sign, that you value your privacy. We understand it perfectly, therefore we have prepared this document for you, in which you will find the rules for the processing of personal data and the use of cookies in connection with the use of the Lockme.pl website

Formal information at the beginning - the administrator of the Lockme.pl is Lockme sp. z o.o. ul. Ofiar Oświęcimskich 17 | 50-069 Wrocław KRS 0000942965 WR.VI NS-REJ NIP 8971900213 REGON 520822461 - Share Capital: 5000 zł

In case of any doubts related to the privacy policy, you can contact us at any time by sending a message to the address [email protected]

Short version - the most important information

• We care about your privacy, but also about your time. That is why we have prepared a short version of the most important rules related to privacy protection
• By registering on our website, editing your profile, placing orders, adding comments, contacting us, or filling in other forms, you provide us with your personal data, and we guarantee that your data will remain confidential, secure and will not be shared with any third parties without your express consent
• We entrust the processing of personal data only to verified and trusted entities providing services related to the processing of personal data.
• We use Google Analytics tools that collect information about our website visits, such as the subpages you have displayed, the time you spent on the website, or the transitions between individual subpages. For this purpose, Google LLC cookies are used for the Google Analytics service. As part of Google Analytics, we collect demographic data and data on interests. As part of the cookie settings, you can decide whether you consent to the collection of such data about you or not.
• We provide the opportunity to use social functions, such as sharing content on social networks and subscribing to a social profile. Using these functions may involve the use of cookies of social network administrators such as Facebook, Instagram, YouTube, Twitter, Google+, LinkedIn.
• We use our own cookies for the proper functioning of the website, in particular for the user account management and the ordering process.
• If the above information is not sufficient for you, you will find further details below.

Personal data

The administrator of your personal data within the meaning of the provisions on the protection of personal data is Lockme sp. z o.o. ul. Tęczowa 7 | 53-601 Wrocław KRS 0000942965 WR.VI NS-REJ NIP 8971900213 REGON 520822461 - Share Capital: 5000 zł
The purposes, legal basis, and period of personal data processing are indicated separately for each purpose of data processing (see the description of individual purposes of personal data processing below).

Permissions

GDPR grants you the following potential rights related to the processing of your personal data:

• the right to access personal data,
• the right to rectify personal data,
• the right to delete personal data,
• the right to limit the processing of personal data,
• the right to object to the processing of personal data,
• the right to transfer data,
• the right to lodge a complaint with a supervisory authority,
• the right to withdraw consent to the processing of personal data, if you have given such consent.

The rules related to the implementation of the indicated rights are described in detail in Art. 16 - 21 GDPR. We encourage you to familiarize yourself with these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all activities of processing your personal data. For your convenience, we have made every effort to indicate the rights you are entitled to as part of the description of individual personal data processing operations.

We emphasize that you always have one of the rights indicated above - if you believe that we have violated the provisions on the protection of personal data while processing your personal data, you have the option to lodge a complaint with the supervisory body (the President of the Office for Personal Data Protection).

You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. All you need to do is send a message to the address [email protected]. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address provided above if you have any questions related to the processing of your personal data.

Data recipients

We guarantee the confidentiality of all personal data provided to us. We ensure that all security and personal data protection measures required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons.

Data recipients

Your data may be processed by our subcontractors, i.e. entities whose services we use to process data and provide services to you or fulfill orders in the online store.

• ADMIN.NET.PL Tomasz Rzepka Arkadiusz Nowara S.C. - to store data on the server,
• Vercom S.A. - in order to use the external email server Emaillabs and the RedLink newsletter service
• IDEA.TM Sp. z o.o., ul. Kukuczki 5/13, 50-570 Wrocław - in order to provide accounting and HR services,
• Sugester Sp. z o.o., ul. Smulikowskiego 6/8, 00-389 Warsaw - in order to provide a helpdesk service,
• Furgonetka Sp. z o. o. Sp. k., ul. Inżynierska 8, 03-422 Warsaw - in order to use the services of courier companies,
• BrainSHARE IT sp.z o.o., ul. Conrada 51, 31-357 Kraków - in order to provide the service of access to the saldeoSMART accounting system,
• Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States of America (USA) - the scope of entrustment includes the provision of space on the server for documents under Google Docs and for a telephone book.
• All entities entrusted with the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

Processing purposes and activities

User's account

When creating a user account, you must provide the data necessary to set up an account, such as e-mail address, first and last name, address details, telephone number. Providing data is voluntary, but necessary to create an account. As part of editing account details, you can provide your further details.

If you create an account using Facebook, your e-mail address will be collected from your data assigned to your Facebook profile.

The data provided to us for the creation of an account are processed in order to set up and maintain an account on the basis of an agreement for the provision of electronic services concluded through account registration (Article 6 (1) (b) of the GDPR).

The data contained in the account will be processed for the duration of the account operation. When you decide to delete your account, we will also delete the data contained therein. Remember, however, that deleting an account does not delete information about orders placed by you using the account.

You can rectify the data contained in your account at any time. You can also decide to delete your account at any time. You also have the right to transfer the data referred to in art. 20 GDPR.

If you use the website as a company user pursuant to the regulations for corporate users or as a partner pursuant to the regulations for partners and you are a natural person, all provisions contained in this privacy policy apply to you, also with regard to creating a user account, with the difference, that setting up a corporate user account does not take place automatically from the website, but manually by the administrator after contacting us.

Your data as part of a corporate user account or a partner account is always processed for the purpose of implementing a business account agreement or a partnership agreement and this is also the legal basis for the processing of this data. In the case of a business account, the scope of data publicly available on the website will be greater than in the case of a basic user account due to the fact that the website will contain business cards of your company and your rooms.

Comments

On the website, you can add comments about the rooms present on the website in accordance with the rules described in the website regulations for users. After adding and authorizing the comment, your data regarding the nickname, photo, the content of the comment, and link to the Facebook profile will be published on the website. Data processing as part of the comments function takes place as part of the contract for maintaining an account on the website because adding comments is one of the functions available to registered users.

Room booking

When booking an escape room through the website, you must provide your personal data necessary to complete the order, i.e. name and surname, e-mail address, and telephone number. If you have previously provided such data in your user account, this data will be automatically entered into the order form, and you can always modify them.

The legal basis for the processing of your personal data contained in the order is the performance of the contract that you conclude on the basis of the website regulations.

By booking a room through the website, you enter into a contract directly with the owner of the room. Therefore, the administrator of your personal data provided in the order form is also the room owner. This means that in the implementation of the order placed, two entities are independent administrators of your personal data - the room owner and the website administrator. The order is carried out by the owner of the room, therefore the website administrator processes the data only for the purpose of storing them in his database. The data will be stored in the database for the duration of the website's operation.

Recovering abandoned carts

Our website is equipped with a mechanism for recovering abandoned carts. This means that if you fill out the order form but do not complete the transaction, you will receive an e-mail reminding you to complete the order. This mechanism is based on a set of personal data related to room reservations.

Purchase of a voucher

When purchasing a voucher via the website, you must provide your personal data necessary to complete the order, i.e. name and surname, e-mail address, telephone number, and shipping address (if you are buying a paper voucher). If you have previously provided such data in your user account, this data will be automatically entered into the order form, and you can always modify them.

The legal basis for the processing of your personal data contained in the order is the performance of the contract that you conclude on the basis of the website regulations.

When purchasing a voucher via the website, you must decide whether you want to receive it in an electronic or paper version. If you choose the paper version, your personal data will be transferred to Bartosz Idzikowski, running a business under the name "Lockme Bartosz Idzikowski" with its registered office in Wrocław (51-603), ul. Tęczowa 7, NIP 894-287-61-10 in order to print and send the voucher to you.

Data related to the order will be stored in the administrator's database for the duration of the website's operation.

Invoices

If in connection with the use of the website, we issue or deliver an invoice to you, then we process your personal data to the extent necessary to issue an invoice. The legal basis for the processing of your data in this case is the fulfillment of the legal obligation to issue an invoice. In addition, all issued invoices are included in the accounting documentation, therefore your data will be naturally processed as part of this documentation for the period of time required by law.

Newsletter

If you want to subscribe to the newsletter, you must provide us with your e-mail address via the newsletter subscription form. Providing data is voluntary, but necessary to subscribe to the newsletter.

The data provided to us when subscribing to the newsletter is used to send you a newsletter, and the legal basis for their processing is your consent (Article 6 (1) (a) of the GDPR) expressed when subscribing to the newsletter.

The data will be processed for the duration of the newsletter, unless you unsubscribe earlier, which will delete your data from the database.

You can correct your data stored in the newsletter database at any time, as well as request their removal by resigning from receiving the newsletter. You also have the right to transfer the data referred to in art. 20 GDPR.

Complaints and withdrawal from the contract

If you submit a complaint or withdraw from the contract, you provide us with the personal data contained in the complaint or the statement of withdrawal from the contract, which includes your name and surname, address, telephone number, e-mail address, bank account number. Providing data is voluntary, but necessary to submit a complaint or withdraw from the contract.

The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the procedure for withdrawing from the contract (Article 6 (1) (c) of the GDPR).

The data will be processed for the time necessary to implement the complaint procedure or the withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived for statistical purposes.

In the case of data contained in complaints and declarations of withdrawal from the contract, you cannot rectify this data. You also cannot object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims under the contract, you can object to the processing of your data for statistical purposes, as well as request the removal of your data from our database.

E-mail contact

By contacting us via e-mail, including sending an inquiry via the contact form, you naturally provide us with your e-mail address as the sender's address. In addition, you can also include other personal data in the message. Providing data is voluntary, but necessary to make contact.

In this case, your data is processed in order to contact you, and the basis for processing is art. 6 sec. 1 lit. a GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after the end of contact is the legitimate purpose of archiving correspondence for internal needs (Article 6 (1) (c) of the GDPR).

The content of the correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request a history of correspondence with us (if it was archived), as well as request its removal unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

Surveys, inquiries, and other forms

The website may offer various types of surveys, inquiries, and other forms, within which you can enter personal data. If you fill in and send such a form, the personal data contained therein will be processed only for the purpose of handling the survey, inquiry, or other purposes of the form. The content of the correspondence may be archived.

Handling matters related to the DSA

As an intermediary service provider, we are obligated to fulfill the obligations arising from the Digital Services Act (DSA), such as accepting and reviewing reports concerning User Content, receiving and reviewing appeals regarding decisions made by us regarding User Content, providing specific information about a user upon receipt of an order issued by authorized institutions or authorities, and notifying law enforcement and/or judicial authorities of suspected criminal activities posing a threat to the life or safety of one or more persons related to the use of the service. For these purposes, we process personal data to the extent necessary to fulfill the obligations provided by law. The data is processed for the time necessary to fulfill the obligations imposed by law and is archived for the purpose of demonstrating that we have properly fulfilled our obligations, until the expiration of our liability.

Cookies and other tracking technologies

Our website, like almost all other websites, uses cookies. Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone) that can be read by our IT system (own cookies) or the IT system of third parties (third-party cookies). Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the website (persistent cookies).

See below for more details.

Consent to cookies.

During the first visit to the website, you are shown information about the use of cookies. Thanks to a special tool, you can manage cookies from the website level. In addition, you can always change cookie settings from your browser or delete cookies altogether. Browsers manage cookie settings in various ways. In the auxiliary menu of the web browser, you will find explanations on changing cookie settings. Remember that disabling or limiting the use of cookies may cause difficulties in using our website, as well as from many other websites that use cookies.

Own cookies.

We use our own cookies to ensure the proper functioning of the website, in particular, the ordering process and logging into the user's account.

Third-party cookies.

Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of such cookies is described below.

Google Analytics

We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest, consisting in the creation of statistics and their analysis in order to optimize our websites.

Google Analytics automatically collects information about your use of our website. The information collected in this way is most often transferred to a Google server in the United States and stored there.

Due to the IP anonymization activated by us, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. The anonymized IP address provided by your browser as part of Google Analytics is, as a rule, not combined with other Google data.

Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program in order to ensure an adequate level of personal data protection required by the European law. Under the agreement between the US and the European Commission, the latter has established an adequate level of data protection in the case of companies certified by the Privacy Shield.

You can prevent the recording of the data collected by cookies regarding your use of our website by Google, as well as the processing of this data by Google, by installing a browser plug-in at the following address: https://tools.google.com/dlpage/gaoptout.

As part of Google Analytics, we also collect demographic data and data about interests. As part of the cookie settings, you can decide directly from our website whether you consent to the collection of such data about you or not.

If you are interested in details related to the data processing as part of Google Analytics, we encourage you to read the explanations prepared by Google: https://support.google.com/analytics/answer/6004245.  

Sklik

We use the Sklik tool provided by Seznam.cz, Radlická 3294/10, 150 00 Praha 5. We carry out activities in this area based on our legitimate interest, consisting in the creation of statistics and their analysis in order to optimize our websites.

Due to the IP anonymization activated by us, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address sent to a Seznam.cz server and shortened there. 

Seznam.cz processes personal data based on the main principles of Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

If you are interested in details related to the data processing as part of Sklik, we encourage you to read the explanations prepared by Seznam.cz: https://o.seznam.cz/ochrana-udaju/.  

Social tools

Our websites use plugins and other social tools provided by social networks, such as Facebook, Twitter, Instagram, Google, LinkedIn.

By displaying our website containing such a plugin, your browser will establish a direct connection with the servers of social network administrators (service providers). The content of the plugin is transferred by the given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed on our website, even if you do not have a profile with a given service provider or are not logged in at the moment. Such information (along with your IP address) is sent by your browser directly to the server of a given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, this service provider will be able to directly assign a visit to our website to your profile on a given social networking site.

If you use a given plug-in, for example by clicking on the "Like" or "Share" button, the relevant information will also be sent directly to the server of a given service provider and stored there.

In addition, this information will be published on a given social network and will appear to people added as your contacts. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings to protect your privacy are described in the privacy policy of individual service providers.

Facebook - https://www.facebook.com/legal/FB_Work_Privacy,

Instagram - https://help.instagram.com/519522125107875?helpref=page_content,

Twitter - https://twitter.com/en/privacy,

Google - https://policies.google.com/privacy?hl=pl,

LinkedIn - https://www.linkedin.com/legal/privacy-policy.

If you do not want social networks to assign the data collected during your visit to our website directly to your profile on a given website, you must log out of this website before visiting our website. You can also completely prevent the loading of plugins on the website by using appropriate extensions for your browser, e.g. blocking scripts.

Server logs

Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server logs.

Logs include Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.

The data stored in the server logs are not associated with specific people using the website and are not used by us to identify you.

The server logs are the only auxiliary material used to administer the website, and their content is not disclosed to anyone except those authorized to administer the server.

Facebook Custom Audiences - details

As part of the Facebook Ads advertising system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, we use the Custom Audience Group functionality to target targeted advertising messages to specific groups of users. We carry out activities in this area based on our legitimate interest, consisting in the marketing of our own products or services.

In order to send you personalized ads in terms of your behavior in our store, we have implemented Pixel Facebook as part of our website, which automatically collects information about your use of our website. The information collected in this way is most often transferred to Facebook servers, which may be located all over the world, in particular in the United States of America (USA).

The information collected as part of Facebook's Pixel is anonymous, i.e. it does not allow us to identify you. Depending on your activity on our websites, you can reach a specific group of recipients, but we do not identify individuals belonging to these groups in any way.

However, we inform you that Facebook may combine the collected information with other information collected about you as part of your use of Facebook and use it for its own purposes, including marketing. Such Facebook activities are no longer dependent on us, and you can search for information about them directly in Facebook's privacy policy: https://www.facebook.com/privacy/explanation. You can also manage your privacy settings from your Facebook account. Here you will find useful information in this regard: https://www.facebook.com/ads/settings. "