Privacy Policy
1. Data Controller
In accordance with Article 13(1) and (2) of the GDPR, we hereby inform you about the rules governing the processing of your personal data and your rights.
The controller of your personal data is Marcin Chołodowski (Zu-CityGames.com), with its registered address at ul. Augustyna Szamarzewskiego 21/2, 61-514 Poznań, Poland, Tax Identification Number (NIP): 7671640925, REGON: 385454553.
For matters concerning the processing of personal data, you can contact us at: info@zu-citygames.com.
2. What data do we collect?
Depending on how you use our services, we may process the following data:
Data provided by the user:
- first and last name;
- e-mail address;
- address details provided in connection with an order or invoice;
- telephone number, if provided;
- information concerning orders, including purchased products and generated access codes;
- content submitted through forms, including enquiries and reviews.
Technical data:
- IP address;
- information about the device and browser;
- technical and diagnostic information necessary for the operation of the website and application;
- information related to cookies in accordance with the user’s preferences.
Game data:
When using the Zu-CityGames application, we process selected information concerning the course of the game, including in particular:
- team name;
- game identifier and name;
- game status;
- game start and end time;
- game duration;
- number of hints used;
- game result.
This information is used to provide game functionality and to create and display rankings.
The team name is entered by the user. We recommend that users do not include personal data of third parties, in particular their full names, in team names.
Zu-CityGames Event data:
For Zu-CityGames Events, we additionally process information related to the organisation of the Event, including in particular:
- Event name;
- Event date;
- number of teams;
- codes assigned to teams;
- Event and team statuses;
- information concerning team results;
- information necessary for the operation of the organiser panel and Event ranking.
Location data:
The application may use the device’s location when this is necessary to perform a task requiring verification that the device is in a particular location.
Location data is used to provide such game functionality. It is not displayed in rankings or in the Zu-CityGames Events organiser panel.
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under this age. If we become aware that such data has been provided to us, we will take appropriate steps to delete it.
Providing data required when making a purchase is voluntary, but failure to provide it may make it impossible to process the order.
3. Purposes of processing
We process data, in particular, for the following purposes:
- processing orders and providing purchased digital content and services;
- generating and managing access codes;
- enabling games to be played in the application;
- recording results and creating and displaying game rankings;
- creating and managing Zu-CityGames Events, including the organiser panel and Event ranking;
- processing payments and accounting documents;
- handling communications concerning orders, complaints, technical support and enquiries;
- ensuring the security of services and preventing abuse;
- carrying out technical and statistical analyses aimed at improving our services;
- complying with legal obligations;
- conducting marketing communications where the user has given the appropriate consent;
- publishing and verifying reviews submitted by users.
If a user submits a review of a product or game, we may process the provided nickname, the content of the review and the e-mail address for the purposes of publishing and verifying the review. The e-mail address is not published.
4. Legal bases for processing
Depending on the purpose, we process personal data on the basis of:
- Article 6(1)(b) GDPR – performance of a contract – where processing is necessary to process an order and provide the purchased service;
- Article 6(1)(c) GDPR – legal obligation – in particular in relation to tax and accounting obligations;
- Article 6(1)(f) GDPR – legitimate interests of the Controller – in particular to ensure the security of services, prevent abuse, carry out necessary analyses and establish, pursue or defend legal claims;
- Article 6(1)(a) GDPR – consent – where processing is based on voluntarily given consent, for example for certain marketing activities or publication of reviews.
5. Rankings and Zu-CityGames Events
The Zu-CityGames application enables game rankings to be displayed.
A ranking may contain, in particular, the team name and information concerning the game result, such as completion time and the number of hints used.
For a Zu-CityGames Events, the Event ranking is accessible via a unique link. The Organiser may share this link with Event participants or other persons.
The Zu-CityGames Events organiser panel is accessible via a separate unique link intended for the Organiser and may contain a broader range of information concerning the Event.
Access to the Zu-CityGames Events organiser panel and Event ranking is blocked 6 months after the Event has ended.
6. Who do we share data with?
Data may be disclosed or entrusted to entities supporting us in providing our services, in particular:
- payment service providers;
- providers operating our IT systems and hosting infrastructure;
- providers of technical services necessary for the operation of the website and application;
- accounting service providers;
- competent public authorities where disclosure is required by law.
Online payments may be processed, among others, by PayPro S.A., providing services under the Przelewy24 brand, and Autopay S.A.
We do not sell users’ personal data.
7. Data retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected and for periods required by applicable law.
In particular:
- data related to orders and accounting documentation is retained for the period required by tax and accounting regulations;
- technical and analytical data is retained for as long as necessary for the purpose for which it is processed;
- marketing data processed on the basis of consent is retained until the consent is withdrawn or the purpose of processing ceases to exist;
- data relating to reviews is retained for the period during which the review is published or until it is removed;
- data concerning games and rankings is retained for the period during which the rankings operate and for as long as necessary to provide service functionality, maintain statistics, ensure system security or pursue other legitimate interests of the Controller.
User access to the Zu-CityGames Events organiser panel and Event ranking expires 6 months after the Event has ended. Blocking access to the panel or ranking does not automatically result in the deletion of Event data from the Controller’s systems.
Data that is no longer necessary for the purposes for which it was collected and for which there is no further legal basis for retention is deleted or anonymised.
8. Your rights
In the circumstances provided for by the GDPR, you have the right to:
- access your personal data and obtain a copy of it;
- rectify your data;
- have your data erased;
- restrict processing;
- data portability;
- object to processing based on legitimate interests;
- withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
To exercise your rights, contact us at: info@zu-citygames.com.
If you believe that your data is being processed in breach of applicable law, you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
9. Cookies
Our website uses cookies and similar technologies to ensure its proper operation and, depending on the consents given, for traffic analysis and marketing activities.
During the first visit to the website, users can manage their preferences using our consent management mechanism.
Cookie preferences can subsequently be changed using the consent management mechanism available on the website.
Detailed information about the cookies we use is available in our Cookie Policy.
10. Zu-CityGames mobile application
The Zu-CityGames mobile application does not require an individual user account to be created.
The application may use the device’s location to perform tasks requiring verification that the user is in a particular location.
In order to provide the application’s functionality, selected game data is transmitted to Zu-CityGames systems. This may include, in particular, the team name, game identifier, game status, game start and end time and the number of hints used.
Game data may be used to display results and rankings.
For Zu-CityGames Events, game data is also used to operate the organiser panel and Event ranking.
Device location data is not displayed in rankings or in the Zu-CityGames Events organiser panel.
Deleting the application or clearing its data deletes information stored locally on the device, but does not automatically delete game data that has previously been transmitted to Zu-CityGames systems.
For matters concerning data related to the application, please contact: info@zu-citygames.com.
11. Changes to this Privacy Policy
This Privacy Policy may be updated in the event of legal, technical or organisational changes, in particular in connection with the development of the website and application functionality.
The current version of the Privacy Policy is published on Zu-CityGames.com.
12. Contact
If you have any questions regarding this Privacy Policy or the processing of personal data, please contact us at:
Effective from: 29.09.2026