§1 Who is the Administrator of your personal data?

The Administrator of your data is LarpVenture sp. z o.o., based in Jagatow, NIP 6040236290, REGON 524240750, entered into the National Court Register kept by the District Court for Gdańsk-North in Gdańsk, VII Economic Division of the National Court Register (NCR), under the number 0001013808, share capital: PLN 200,000.00, hereinafter referred to as the Administrator. You can contact us by writing to the e-mail address: contact@larpventure.com.

§2 For what purpose do we collect your data and how long do we keep it?

We may process your data for the following purposes:

1. Communicating with you, including answering your questions submitted via the contact form, email, etc.

Your data will be processed based on the Administrator's legitimate interest in the form of communication with the Website Users (Article 6(1)(f) of the GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary, but necessary for communication with you. Data may also be processed for archiving purposes for internal purposes based on the Administrator's legitimate interest (Article 6(1)(f) of the GDPR) until you object or the business purpose ceases.

2. Concluding a contract and its execution (placing an order).

3. Establishing, defending and pursuing claims.

Fulfillment of legal obligations incumbent on the Administrator (including tax and archiving obligations).

The data necessary for the conclusion and performance of the contract will be processed for the duration of the contract, including the duration of the exercising the rights arsing from the contract such as the right of complaint under the warranty (Article 6(1)(b) and (f) of the GDPR). Providing this data is voluntary, but necessary for the conclusion and execution of the contract.

Additional data provided for the purpose of, among other things, facilitating the performance of the contract will be processed no longer than until you raise an objection or the business purpose ceases based on the legitimate interest of serving customers (Article 6(1)(f) of the GDPR). After this period, the data will be processed for the period of the statute of limitations on claims based on the Administrator's legitimate interest in defending against claims, as well as for the purpose of establishing and asserting claims (Article 6(1)(f)of the GDPR). If the data is necessary for the fulfillment of legal obligations incumbent on the Administrator(such as issuing and storing invoices) - the data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents), unless a longer period is required by law (Article 6(1)(c)of the GDPR). The data may also be archived for internal and statistical purposes until you object or the business purpose ceases based on the Administrator's legitimate interest (Article 6(1)(f)of the GDPR).

5. Providing marketing information (including newsletter mailing and information about services, products, promotions, free content).

Your data will be processed based on the Administrator’s legitimate interest in marketing of the Administrator's products and services (Article 6(1)(f) of theGDPR ). Your data will be processed no longer than until you object or the business purpose ceases - whichever comes first. Providing data is voluntary, but necessary to receive marketing/trade information.

For commercial communications and telephone communications I need your consent in accordance with Article 10 of the Electronic Services Act. You can withdraw it at any time by clicking on the link in the footer of the email or by writing to me at the address given above.

6. Administration and management of the site and groups on social media platforms (including Facebook (Meta), Discord, WhatsApp) when processing data on social media platforms, including communicating with you, targeting you with marketing content.

The data will only be processed if you choose to like the page / join the group / select the "Follow/Observe" option or otherwise leave your data on the platform managed by me, such as posting or commenting The data will be processed for the period of existence of the site/group or until you object, which may be done by un-clicking the "Like" or "Follow/Observe" option, deleting the comment/entry or by other means provided for within the platform/website or by contacting us. Please be advised that the rules relating to the page/fanpage/group are set by the Administrator, while the rules for the use of the social networking sites on which the page/fanpage/group is placed are set by the entity managing these portals.

7. Analytical and statistical.

Data processing for analytical and statistical purposes consisting, in particular, in the analysis of data obtained automatically when using the Website, including cookies, are processed based on the legitimate interest of the Administrator in the form of adapting the content of the Website to the User's preferences and optimizing the use of the Website; creating statistics that help to understand how Users use the Website, which allows to improve its structure and content (Article 6(1)(f) of the GDPR). The data may also be archived for internal and statistical purposes until you object or the business purpose ceases based on the Administrator's legitimate interest (Article 6(1)(f) of the GDPR).

8. Recovering rejectedcarts.

In a situation where you do not complete your order, you will receive a reminder about the started but not finalized order. The data will be processed based on the Administrator's legitimate interest in serving potential customers (Article 6(1)(f) of theGDPR). The data will be processed for the time necessary to fulfill business purposes oruntil an objection is raised.

9. Posting comments.

With respect to the data you see on our Site when you post a comment, this data is processed by us for the purpose of administering and operating the Site and communicating with you based on the Administrator's legitimate interest (Article 6(1)(f)) for the time necessary to fulfill business purposes or until an objection is raised.

10. Promotion and Marketing.

If you provide us with your data, in particular in the form of an opinion regarding a product or service, the data will be processed based on the Administrator's legitimate interest in the form of marketing the Administrator's services and products as well as improving their quality. The data will be processed for the time necessary to fulfill business purposes or until an objection is raised. Provisiding data is voluntary.

§3 Who may we share your data with?

We will transfer your data to other entities only if this is necessary for the purposes of the processing referred to in §2, and only to the extent necessary to achieve this purpose. As a rule, we only collect and process the data that you yourself have provided to us, subject to the data collected automatically (cookies). More about cookies can be found in §7.

If necessary, your data may be transferred to entities with which we cooperate in the implementation of the above purposes, in particular a hosting company, an IT company/website management company, a company providing accounting and bookkeeping services, a company providing invoicing software, a company providing newsletter services, a company providing cloud services, entities providing marketing services, couriers or postal operators, a social media platform, a platform for customer service, entities through which purchases are made (among others.e.g. on the basis of cooperation with the Marketplace), other entities that support the Administrator in achieving the purposes of processing. The data may also be shared with a payment intermediary that supports us in the ordering process.

As a general rule, data will not be transferred outside the EEA, except as described below. In other cases, where data will be transferred outside the EEA, this will be based on your consent, standard contractual clauses, or based on other safeguards under the GDPRafter compliance with, among other things, information obligations. The services provided by Google or Facebook (META) are generally provided by entities based in the European Union. However, due to the global nature of the operation of these entities, your data may be transferred to the US in connection with their storage on US servers (in whole or in part). Regardless, Google and Facebook have implemented safeguards under the DPA to protect your personal data as required by the DPA through the use of standard contractual clauses. For more information on the data processing policies of the above providers, please refer to the Privacy Policies of each entity.

§4 What rights do you have?

In connection withthe GDPR, you are entitled to:

If you believe that your personal data is being processed in violation of applicable law, you have the right to logde a complaint with the President of the Office for Personal Data Protection. In such a case, however, I encourage you to contact us in advance to clarify your concerns.

§5 Is your data profiled?

The Administrator analyzes personal data by automated means using tools provided by software providers (e.g. by means of statistics, history) only to the extent that it has no legal effect on you or similarly significantly affects your situation, including your rights or freedom. The purpose of data processing by automated means is to learn about the Users' preferences (more on analysis is indicated in the Cookie Policy section).

§6 Laws applicable to personal data

In matters not regulated, the relevant provisions of law, including European law (including GDPR) shall apply.

§7 Cookie Policy

The site does not automatically collect any information, except for the information contained in cookie file. This data is collected in a way that prevents the identification of the User, the so-called Anonymous Data. Cookie files (so-called "cookies") are IT data, in particular text files, which are stored on the Website User's terminal equipment and are intended for using on the Website. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.

Cookies are used to adapt the content of the Site to the User's preferences and to optimize the use of the Site; as well as to create statistics that help to understand how Users use the Site, which allows to improve its structure and content.

You can make your own changes to your cookie settings. In many cases, your web browser allows cookies to be stored on your end device by default. Detailed information about the possibility and methods of handling cookies is available in the settings of your software (web browser). Failure to consent to cookies may limit the operation of certain functionalities on the Site.

The Administrator uses technologies that observe the actions taken by the User on the Site:

§8 Social plug-ins

The Site uses plugins, widgets and other social tools provided by portals such as: Facebook (Meta), Instagram, Pinterest. The rules regarding the processing of personal data are described directly on the websites of the aforementioned Service Providers.

§9 Co-administration

Intuit Technology Services Private Limited

The data processed for the purposes of the Newsletter is co-managed by the Administrator and Intuit Technology Services Private Limited, with its registered office at Campus 4A, Belandur Village, Varthur Hobli, Bangalore East Taluk, Bangalore - 560 103, India, hereinafter referred to as the Co-Administrator. The detailed rules of data co-management, including information on your rights, are described on the Privacy Policy page. The Administrator processes data based on the Administrator's legitimate interest in conducting analyses of Users' activities, as well as their preferences, in order to improve the functionalities used and services provided. Both the Administrator and the Co-Administrator may be contacted regarding personal data issues.

Meta Platforms Ireland Limited

The data processed for the purposes of statistics collected on the Facebook platform (Meta) is co-managed by the Administrator and Meta Platforms Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Co-Administrator. The detailed rules of data co-management, including information on your rights, are described on the Privacy Policy page. The Administrator processes data based on the Administrator's legitimate interest in conducting analyses of Users' activities, as well as their preferences, in order to improve the functionalities used and services provided. Both the Administrator and the Co-Administrator may be contacted regarding personal data issues.

Trusted Shops

The data administered for the purpose of marketing our offer by enabling secure online shopping processed within the Trusted Shops system is co-administered by the Administrator and Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany. This is due to the fact that Trusted Shops widgets are integrated into our website to display Trusted Shops services (e.g. trustmark, rating system) and Trusted Shops services available to buyers after an order has been placed.

The above serves in accordance with Article 6(1)(f) of the DPA to fulfill our legitimate interest in optimally marketing our offerings by enabling secure online shopping. Trustbadge is put at the disposal of the US-based content provider CDN (Content-Delivery-Network) as part of the co-management under a data entrustment agreement. An adequate level of data protection is provided by standard data protection clauses and additional contractual agreements. Further information on data protection by Trusted Shops GmbH can be found at: https://www.trustedshops.co.uk/imprint/. When Trustbadge is called, the web server automatically saves a so-called log file (server logs), which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting operator (access data) and documents the call. The IP address is anonymized as soon as it is downloaded, so that the recorded data cannot be attributed to a specific person. The anonymized data is used in particular for statistical purposes and error analysis.

After you place an order in the store, your email address, encrypted with a cryptologic one-way function, will be forwarded to Trusted Shops GmbH. The legal basis for the processing is Article 6(1)(1)(f) of the DPA. This is done for the purpose of verifying that you are already registered with Trusted Shops GmbH and is necessary for the realization of the overriding legitimate interests - both ours and Trusted Shops' - of being able to provide buyer protection in connection with a specific order and to provide transaction evaluation services. If you have already registered for Trusted Shops' services, then in that case further data processing takes place in accordance with the contract between you and Trusted Shops.

Those who have not registered will be given the opportunity to register for the first time. Further data processing after registration also depends on the type of contract you have with Trusted Shops GmbH. If you do not register to use Trusted Shops services, all data submitted will be automatically deleted by Trusted Shops GmbH, and it will not be possible to link them to a specific person.

Trusted Shops uses external service providers for hosting, monitoring and logging. The above serves to ensure trouble-free operation of the systems, the legal basis for this is Article 6(1)(f) of the GDPR. Data processing may take place in third countries (USA and Israel). In the case of the US, an adequate level of data protection is ensured by contractual stipulation of the validity of standard data protection clauses and further contractual measures, and in the case of Israel by the existence of a decision establishing an adequate level of data protection.

If you have any questions about the processing of data co-administered by us and Trusted Shops GmbH or to assert your rights, please contact Trusted Shops. You can find contact details in the Trusted Shops privacy policy indicated above. Regardless of this, you can always turn to the co-administrator of your choice. Your inquiry or request will then be forwarded to the other co-administrator for processing/response, if necessary.