Legal document
Effective from: [26.05.2026]
§ 1
Personal data controller
The controller of your personal data is:
Wizards of Fun Limited Liability Company
KRS: 0001208025
NIP: 6431786439
REGON: 543356021
Headquarters address: ul. Paweł Stalmacha 1, 41-106 Siemianowice Śląskie
§ 2
Aims and legal bases of the processing
We process your personal data for the following purposes:
- Contact handling - the fulfilment of enquiries made via the contact form or email (Article 6(1)(b) or (f) RODO).
- Reservations and orders - The conclusion and performance of a contract relating to the Company's services (Article 6(1)(b) of the DPA).
- Direct marketing - Sending commercial information with your consent (Article 6(1)(a) RODO).
- Legal obligations - fulfilment of accounting and taxation requirements (Article 6(1)(c) of the DPA).
- Legitimate interest - asserting or defending claims, ensuring the security of the Service (Article 6(1)(f) RODO).
§ 3
Categories of data processed
Depending on the purpose, we process data such as your name, e-mail address, telephone number, home/delivery address, booking data and data on the use of the Website (IP address, cookies).
§ 4
Recipients of the data
Data may be transferred to trusted processors on our behalf, including but not limited to:
- IT and hosting providers,
- payment and booking systems,
- law firms and accountancy offices,
- to public authorities where required by law.
We do not sell personal data to third parties.
§ 5
Data retention period
- Data from the contact form - up to 12 months from the end of contact.
- Data for the performance of the contract - for the duration of the contract and 6 years thereafter (tax regulations).
- Marketing data - until consent is withdrawn.
- Data from cookies - in accordance with the Cookies Policy.
§ 6
Rights of data subjects
You have the following rights:
- The right of access to data (Article 15 RODO),
- The right to rectification of data (Article 16 RODO),
- The right to erasure („right to be forgotten”) (Article 17 RODO),
- The right to restrict processing (Article 18 RODO),
- The right to data portability (Article 20 RODO),
- The right to object to processing (Article 21 RODO),
- The right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
- The right to lodge a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).
To exercise your rights, please contact us: [email protected]..
§ 7
Data security
We use appropriate technical and organisational security measures to protect data from unauthorised access, loss or destruction, including SSL/TLS transmission encryption and system access control.
§ 8
Changes to the privacy policy
We reserve the right to update this Policy. We will inform you of any material change by posting the new version on the Website, indicating the date of the update.