Privacy Policy
2 July 2026
This policy explains how PlayFull Escape SRL processes personal data when you use this website, book a game, buy a gift card or contact us — in line with the GDPR (EU 2016/679).
1. Data controller
PlayFull Escape SRL, Strada Revoluției 45, Târgu Mureș, Romania. Email for privacy matters: contact@playfull.ro.
2. What we collect and why
Bookings: name, email, phone, team size, game language, optional notes — to deliver the game you booked and contact you about it. Legal basis: performance of a contract.
Gift cards & payments: buyer name, email, billing details and, for company invoices, company identification data — to process the purchase and meet invoicing obligations. Legal bases: contract and legal obligation (fiscal law).
Inquiries & contact: the details you send us — to answer you. Legal basis: our legitimate interest in responding, or pre-contractual steps.
Website analytics (only if you consent via the cookie banner): aggregated usage data. Legal basis: consent.
3. What we do NOT collect
No card numbers (payments run entirely at the licensed payment provider), no marketing profiles, no sale of data to anyone, ever.
4. How long we keep data
Booking and contact data: up to 3 years after your last interaction (limitation period for claims). Invoicing data: 10 years, as required by Romanian fiscal law. Analytics data: per the analytics provider’s configuration, maximum 26 months.
5. Who we share data with
Only processors needed to run the service: our hosting/CDN provider, the email delivery service, the payment provider (when you pay online) and our accountant (invoice data). Each is bound by a data-processing agreement. Some providers may process data outside the EEA under EU standard contractual clauses.
6. Your rights
You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; where processing is based on consent, you can withdraw it at any time. Write to contact@playfull.ro — we answer within one month.
You can also lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro).
7. Security
Data is transmitted over TLS and stored with access limited to staff who need it. This website ships no third-party trackers by default.
8. Cookies
See the separate Cookie Policy for the full list of cookies and similar storage used by this site.