Privacy Policy

Last updated: 2026-02-01

This translation is provided for convenience. The Polish version is the legally binding document.

PERSONAL DATA PROTECTION POLICY

Personal data protection policy for all PvPlayer Sp. z o.o. locations, hereinafter referred to as the Venue, and the website at https://pvplayer.com/.

Dear Users,

In accordance with Article 13(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1) - hereinafter GDPR - we inform you that:

I. DATA CONTROLLER

  1. The controller of your personal data is the company operating under the name PVPLAYER Spolka z ograniczona odpowiedzialnoscia (limited liability company) with its registered office in Poznan (61-823), at ul. Piekary 7 / P. 5, NIP: 783-185-30-97, REGON: 521409958 - hereinafter referred to as the Service Provider or Data Controller.

  2. The Service Provider operates Venues (gaming centers) at the following addresses:

    • ul. Wierzbiecice 39, Poznan
    • ul. Staszica 5, Poznan

  3. All inquiries, comments, and objections regarding the Service Provider’s personal data protection policy should be directed to:

    • Email: kontakt@pvplayer.com
    • Phone: +48 797 027 131
    • Mail: PvPlayer Sp. z o.o., ul. Piekary 7 / P. 5, 61-823 Poznan

II. SOURCES OF PERSONAL DATA

  1. The Service Provider processes only personal data that you voluntarily provide.

  2. The Service Provider receives your personal data in connection with:

    • Registration of an account in the Booking Application (GGLeap) - at the Venue or through the Website
    • The computer Station booking process
    • Purchase of Game Time (through the Website or at the Venue)
    • The payment process carried out by the Payment Operator (Tpay)
    • Correspondence via email, phone, or social media
    • Use of the Website (automatically collected data - see Section XII)
    • Image recording by video surveillance at the Venues (see Section XIII)

  1. Processing of your personal data is necessary for the performance of the contract concluded with you, including booking management, Service provision, and handling inquiries (Article 6(1)(b) GDPR).

  2. Legal provisions require the Service Provider to process your data for tax and accounting purposes (Article 6(1)(c) GDPR).

  3. The Service Provider also processes your personal data on the basis of the Service Provider’s legitimate interest (Article 6(1)(f) GDPR), which is:

    • Ensuring the delivery, security, and billing of Services, including enforcement of the Terms of Service at the Venues
    • Handling your inquiries when they are not directly related to the performance of a contract
    • Ensuring the safety of persons and property at the Venues (video surveillance)
    • Conducting research and statistical analysis of the Website for functionality, Service improvement, or estimating the main interests and needs of visitors
    • Debt recovery; conducting court, enforcement, arbitration, and mediation proceedings
    • Data storage for archival purposes and demonstrating compliance with legal obligations

  4. Processing of your data for direct marketing of products and Services, including commercial communications, is based on your consent (Article 6(1)(a) GDPR).

  5. Processing of data via cookies and analytical tools (see Section XII) is based on your consent (Article 6(1)(a) GDPR), except for cookies necessary for the proper functioning of the Website.

IV. CATEGORIES OF PROCESSED PERSONAL DATA

Depending on the purpose and method of data collection, the Service Provider may request the following personal data:

  1. First name, last name
  2. Home address
  3. Correspondence address
  4. ID card / Passport number
  5. Phone number, email address
  6. Business name, address, NIP (tax ID)
  7. Payment card number, bank account number (processed exclusively by the Payment Operator)

Additionally, the following technical data is automatically collected:

  1. IP address
  2. Browser type and version
  3. Operating system
  4. Screen resolution
  5. Geolocation data (approximate location based on IP address)
  6. Information about Website usage (visited pages, visit duration, traffic source)
  7. Image recorded by video surveillance at the Venues

V. VOLUNTARY NATURE OF PROVIDING PERSONAL DATA

  1. Providing personal data is voluntary but also necessary for the provision of Services - in particular, account registration, Station booking, and payment processing.

  2. Consent to receive information about special offers, promotions, discounts, and other marketing activities is also voluntary. You may withdraw your consent at any time.

  3. Consent to cookies (except necessary cookies) is voluntary. Lack of consent to analytical or marketing cookies does not affect the ability to use the Website.

VI. PERIOD OF PERSONAL DATA PROCESSING

  1. The Service Provider stores your data until the Service is completed and the period for potential claims related to the Services has expired.

  2. Data may be stored for fraud prevention, statistical, and archival purposes for up to 10 years from the date of contract termination.

  3. Video surveillance data is stored for a maximum of 30 days from the date of recording, unless the recording constitutes evidence in legal proceedings.

  4. Data processed on the basis of consent (marketing, cookies) is stored until you withdraw your consent.

  5. Tax and accounting data is stored for the period required by law (generally 5 years from the end of the tax year).

VII. CUSTOMER RIGHTS REGARDING PERSONAL DATA PROCESSING

In accordance with the GDPR, you have the following rights:

  • Right of access to personal data (Article 15 GDPR)
  • Right to rectification of personal data (Article 16 GDPR)
  • Right to erasure of personal data, the so-called “right to be forgotten” (Article 17 GDPR)
  • Right to restriction of personal data processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to personal data processing (Article 21 GDPR)
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
  • Right to challenge a decision based solely on automated processing, including profiling (Article 22 GDPR)

You may exercise the above rights by sending a request:

  • To email: kontakt@pvplayer.com
  • By mail to the registered office: ul. Piekary 7 / P. 5, 61-823 Poznan

The Service Provider will process the request without undue delay, no later than 30 days from its receipt.

VIII. RIGHT TO FILE A COMPLAINT

If you believe that the actions of the Data Controller or entities acting on its behalf violate personal data protection regulations, you have the right to file a complaint with the supervisory authority:

Prezes Urzedu Ochrony Danych Osobowych (PUODO) ul. Stawki 2, 00-193 Warszawa https://uodo.gov.pl/

IX. RECIPIENTS OF PERSONAL DATA

  1. The Service Provider shares your personal data only with those employees and contractors who need access to it to ensure high-quality service.

  2. Your personal data may be transferred to the following categories of data processors acting on behalf of the Service Provider:

    • Payment Operator: Krajowy Integrator Platnosci S.A. (Tpay), Poznan, Poland - for processing electronic payments
    • POS Software Provider: GGCircuit LLC (GGLeap), United States - for managing user accounts, bookings, and Station management
    • Website Hosting: Vercel Inc., United States - for maintaining and serving the Website
    • Email Services: Resend Inc., United States - for sending emails (booking confirmations, access codes, communications)
    • Analytical and Marketing Tools: Google LLC (Google Analytics, Google Tag Manager), Meta Platforms Inc. (Facebook/Instagram Pixel), TikTok Inc. (TikTok Pixel) - for website traffic analysis and marketing activities
    • Accounting, legal, and IT services provided by entities cooperating with the Service Provider

  3. The Service Provider does not share your data with external entities for their own use - only for the provision of Services by the Service Provider. All entities processing your data ensure their security and fulfill GDPR obligations.

  4. If necessary, the Service Provider may transfer your personal data to public authorities, including law enforcement agencies.

X. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

  1. In connection with the use of services of entities based outside the European Economic Area (EEA), your personal data may be transferred to third countries, in particular to the United States, in connection with:

    • GGCircuit LLC (GGLeap) - user account management and booking system
    • Vercel Inc. - Website hosting
    • Resend Inc. - email delivery
    • Google LLC - analytical services (Google Analytics, Google Tag Manager)
    • Meta Platforms Inc. - marketing tools (Facebook/Instagram Pixel)
    • TikTok Inc. - marketing tools (TikTok Pixel)

  2. Data transfer outside the EEA is based on appropriate safeguards provided for in the GDPR, in particular:

    • European Commission adequacy decisions (Article 45 GDPR) - including under the EU-US Data Privacy Framework, or
    • Standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR)

  3. You have the right to obtain a copy of the safeguards applied - please contact kontakt@pvplayer.com.

XI. AUTOMATED PROCESSING OF PERSONAL DATA

  1. Your personal data will be processed in an automated manner (including profiling), but this will not produce any legal effects concerning you or similarly significantly affect your situation.

  2. Profiling involves processing your data (also in an automated manner), using it in particular to analyze or predict personal preferences and interests - in order to tailor marketing content and the Service Provider’s offer.

XII. COOKIES AND ANALYTICAL TOOLS

What are cookies?

  1. Cookies are small text files saved by the web browser on the User’s device when using the Website. They are used to ensure the proper functioning of the Website, traffic analysis, and marketing activities.

Types of cookies used on the Website

  1. Necessary cookies - required for the proper functioning of the Website (e.g., session management, cookie preferences). They do not require User consent.

  2. Analytical cookies - used to collect information about how the Website is used (visited pages, visit duration, traffic source). They require User consent. The following analytical tools are used on the Website:

    • Google Analytics (GA4) - a web analytics service provided by Google LLC. It collects data about website traffic, User behavior, traffic sources, and conversions. Data may be transferred to Google servers in the United States. Google Privacy Policy: https://policies.google.com/privacy

    • Google Tag Manager - a tag management tool for the website, enabling the implementation and control of analytical and marketing tools. Google Tag Manager itself does not collect personal data but enables the operation of other tools listed in this section.

  3. Marketing cookies - used to track User activity in order to display personalized ads. They require User consent. The following marketing tools are used on the Website:

    • Meta Pixel (Facebook/Instagram Pixel) - a tool provided by Meta Platforms Inc. It collects data about User activity on the website for measuring ad effectiveness and creating target audiences on Facebook and Instagram platforms. Data may be transferred to Meta servers in the United States. Meta Privacy Policy: https://www.facebook.com/privacy/policy/

    • TikTok Pixel - a tool provided by TikTok Inc. It collects data about User activity on the website for measuring ad effectiveness and creating target audiences on the TikTok platform. Data may be transferred to TikTok servers in the United States or Singapore. TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy

Managing cookies

  1. On the first visit to the Website, an information banner about cookies is displayed, allowing you to give or refuse consent for individual cookie categories (analytical, marketing).

  2. You can change your cookie settings at any time:

  3. Blocking analytical and marketing cookies does not affect the ability to use the Website. Blocking necessary cookies may cause some Website functions to work incorrectly.

Automatically collected data

  1. When using the Website, the following technical data is automatically collected:
    • IP address (in abbreviated / anonymized form in Google Analytics)
    • Browser type and version
    • Operating system
    • Screen resolution
    • Browser language
    • Referring page (referrer)
    • Date and time of visit
    • Visited pages and time spent on each

XIII. VIDEO SURVEILLANCE

  1. PvPlayer Venues are equipped with video surveillance capable of recording image and sound.

  2. Surveillance is used for:

    • Ensuring the safety of persons at the Venues
    • Protecting the Service Provider’s property
    • Preventing damage and establishing liability
    • Enforcing the rules set out in the Terms of Service

  3. The legal basis for processing surveillance data is the Service Provider’s legitimate interest (Article 6(1)(f) GDPR) in ensuring the safety of persons and property.

  4. Surveillance recordings are stored for a maximum of 30 days. After this period, recordings are automatically overwritten, unless a recording has been secured as evidence in legal proceedings.

  5. Access to surveillance recordings is limited to authorized employees and contractors. Recordings are not shared with external entities, except as required by law.

  6. Entering the Venue constitutes consent to image recording. The Venues are marked with information about video surveillance.

XIV. SOCIAL MEDIA

  1. The Service Provider maintains profiles on social media platforms:

    • Instagram: @pvplayer
    • Facebook: PvPlayer
    • TikTok: @pvplayer
    • YouTube: PvPlayer (in preparation)

  2. When you visit the Service Provider’s social media profiles, the operators of those platforms may collect your personal data according to their own privacy policies.

  3. The Service Provider may process data of persons interacting with the profiles (comments, reactions, private messages) for handling inquiries, communication, and marketing activities.

  4. Detailed information about data processing by social media platforms is available in their privacy policies:

XV. FINAL PROVISIONS

  1. The Service Provider reserves the right to amend this Privacy Policy, in particular to adapt it to changes in legislation, technological changes, or changes in the scope of Services provided.

  2. The Service Provider will inform Users of any changes to the Privacy Policy by publishing an updated version on the Website.

  3. This Privacy Policy is effective from February 2, 2026.

Back to homepage