Privacy Policy (GDPR)
Bawialnia Kropka ("we") collects and processes personal data in accordance with the GDPR and the Polish Personal Data Protection Act. Below you can find what data we collect, for what purposes, and what rights you have — including in connection with your account, event registrations, the loyalty program, and passes.
Document version: privacy-2026-07-v2
Effective from: 23 July 2026
1. Data controller
The controller of your personal data is Oleksandra Tailer-Melyn, conducting business under the firm name Oleksandra Tailer-Melyn, NIP: 6772533001, REGON: 543183649, under the Bawialnia Kropka brand, address: ul. Wrocławska 53M lok. LU3, 30-011 Kraków. Contact: bawialniakropka@gmail.com, tel. +48 600 644 269.
2. What data we collect
We may process, among other things: full name, e-mail address, phone number, user account data, names and dates of birth of children linked to the account, event registration data, loyalty program data, pass reservation and purchase data (pass type, price, preferred visit time, named children on a morning pass, order/reservation status, acceptance of terms and document versions), and playroom entry/visit data (e.g. entry confirmation, visit duration). Data is collected via website forms, the user account, the application, and when you are served at the premises.
3. Purpose and legal basis of processing
Data is processed to: create and operate the account, provide playroom services, register visits, handle event sign-ups, run the loyalty program, reserve, purchase and activate passes, confirm entries, contact you about visit timing or customer service, and — with consent — send marketing communications. Legal basis: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR), the controller’s legitimate interest such as security, accounting, service improvement and defending claims (Art. 6(1)(f) GDPR), legal obligations (Art. 6(1)(c) GDPR), and your consent (Art. 6(1)(a) GDPR), where required.
4. Recipients of data
Data may be entrusted to processors that support our operations (e.g. hosting and service maintenance, e-mail provider, the Przelewy24 online payment operator when online payment is available), only to the extent necessary to provide the services. Data is not sold. Recipients may also include public authorities where required by law.
5. Children’s data
We process children’s data (e.g. name, date of birth, naming a child on a pass) in connection with playroom services and passes, based on actions by the parent/guardian or a contract concluded with the guardian. Please provide only data necessary to deliver the service.
7. Data retention
Data is stored for the period necessary to perform the contract and legal obligations (including accounting and tax), handle complaints, and until consent is withdrawn where consent is the legal basis. Reservation and pass data may also be kept for the period needed to operate the account, settle accounts and handle possible claims.
8. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, and the right to object. You may withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You may also lodge a complaint with the supervisory authority (in Poland: the President of UODO). To exercise your rights, contact us using the details above.