Find out how we protect your personal data.
Last updated: 31 December 2025
This Privacy Policy describes the rules for processing personal data by Indoor Play Concept in connection with its business activities covering the delivery, installation, and servicing of indoor playgrounds across Europe, as well as in connection with the use of the website, telephone and email contact, and commercial cooperation.
The controller of your personal data is:
Indoor Play Concept
Aleje Jana Pawła II 13/220A, 37-450 Stalowa Wola, Polska
VAT ID: PL8672111678
tel.: +48 663 960 969
e-mail: hello@indoorplayconcept.com
Contact hours: Mon–Fri 8:00–16:00
Depending on the relationship and purpose, we may process in particular:
identification and contact data (for example, first name, last name, job title, company name, email, phone number),
billing data (for example, address, tax/VAT number, invoicing details),
data relating to service delivery (for example, installation location, design and service arrangements, correspondence),
data from correspondence and conversations (content of enquiries, arrangements),
technical data related to the use of the website (for example, IP address, cookie identifiers, server logs), if you use the Website.
Providing data is voluntary, but it may be necessary to enter into or perform a contract, prepare an offer, handle an enquiry, or comply with legal obligations.
We process data for the following purposes and on the following legal bases:
Contact and handling enquiries (telephone, email, form, correspondence)
Legal basis: Article 6(1)(f) GDPR (the controller’s legitimate interest in communicating and handling enquiries) or Article 6(1)(b) GDPR when actions are taken to enter into a contract.
Preparing an offer, entering into and performing a contract (delivery, installation, service)
Legal basis: Article 6(1)(b) GDPR (contract or steps prior to entering into a contract).
Settlements, accounting, taxes (issuing invoices, keeping records)
Legal basis: Article 6(1)(c) GDPR (legal obligation).
Pursuing claims and defending against claims (for example, disputes, complaints)
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the controller).
Marketing of our own services (for example, sending commercial information to customers who provided data in connection with cooperation)
Legal basis: Article 6(1)(f) GDPR (legitimate interest) or Article 6(1)(a) GDPR (consent) if required, as well as provisions on electronic communications (if applicable).
Operating and securing the Website (statistics, security, preventing abuse)
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Data may be shared with entities supporting us in conducting our business, only to the extent necessary, in particular:
IT and hosting providers,
email and communication tool providers,
accounting firms and advisers,
subcontractors and partners providing services (for example, installation, service, transport), if necessary to perform the contract,
courier and transport companies,
authorised public authorities, where required by law.
Where required, we enter into data processing agreements with entities processing data on our behalf.
As a rule, we process data within the EEA. If, due to the tools we use (for example, email, hosting, analytics), data is transferred outside the EEA, we will ensure appropriate safeguards required by the GDPR, in particular standard contractual clauses.
We retain data for a period depending on the purpose:
data relating to contracts and service delivery: for the duration of the contract and thereafter for the limitation period for claims,
correspondence data: for as long as necessary to conduct communication and archive arrangements, no longer than until the limitation period for claims expires,
data processed on the basis of consent: until it is withdrawn or the purpose is achieved.
You have the right to:
access your data,
rectify your data,
erase your data,
restrict processing,
data portability,
object to processing (where the legal basis is legitimate interest),
withdraw consent at any time (where processing is based on consent), without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, contact us at: hello@indoorplayconcept.com.
If you believe we process data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
We implement appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration, or disclosure.
We may update this Privacy Policy in the event of changes in legislation, technology, or our operating methods. The current version is published on the Website.
