Wesoła Immersive — documents
Privacy policy
Find out how we process personal data and how to exercise your rights.
I. Data controller
The personal data controller is IMMERSIO ARTE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (a limited liability company), with its registered office at ul. Stoczniowców 5, 30-709 Kraków, NIP (Tax Identification Number): 6793319477, e-mail: [email protected].
II. Purposes and legal bases
We process your personal data for the following purposes:
Ticket Sales – for the purpose of concluding and performing a contract (Article 6(1)(b) of the GDPR).
Sending the Newsletter – based on your consent (Article 6(1)(a) of the GDPR).
Image Recording (video surveillance and photos/videos from events) – based on the legitimate interest of the controller, which is to ensure security and to market our activities (Article 6(1)(f) of the GDPR).
III. Data we process
Depending on the circumstances, we may process the following data:
Full name,
E-mail address,
Your image (recorded on the premises of Wesoła Immersive – New Media Art Center),
Technical data related to your use of the website (cookies – as described below).
IV. Who receives your data
Data may be shared with entities that process it on our behalf (e.g., providers of IT, hosting, and newsletter dispatch services), solely on the basis of data processing agreements and in accordance with applicable laws.
V. How long we keep your data
Data related to ticket purchases: We store this for the period necessary to fulfill the contract and meet accounting obligations (typically 5 years).
Data processed based on consent (newsletter): This is stored until you withdraw your consent.
Video surveillance recordings: These are stored for up to 30 days from the date of recording, unless a recording constitutes evidence in legal proceedings.
Promotional materials containing personal images: These are stored for an indefinite period or until a valid objection is raised.
VI. Your rights
Subject to the conditions set out in the GDPR, you have the right to:
Access your data,
Rectify your data,
Erase your data (if applicable),
Restrict the processing of your data,
Request data portability,
Withdraw consent at any time when processing is based on it, without affecting the lawfulness of earlier processing,
Object to processing (e.g., regarding your image),
Lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).
VII. Providing your data
Providing your data is voluntary. However:
It is necessary to purchase a ticket online (without this data, the contract cannot be fulfilled).
Consenting to the newsletter is voluntary and does not affect other services.
Your presence on the premises of Wesoła Immersive may result in your image being recorded.
VIII. Video surveillance and images of visitors
A video surveillance system is in operation on the premises of Wesoła Immersive. A notice regarding its presence is located at the entrance. We may also capture photos and video recordings from cultural and educational events, which may be published in our promotional materials (website, social media). If you do not wish for your image to be recorded and used, please inform a staff member or submit an objection by e-mail to [email protected].
IX. Cookies
Necessary cookies enable the website and ticket purchases. Optional Google Analytics, Google Ads performance measurement and separate ChatGPT Ads measurement (OpenAI) are disabled by default. The popup lets you accept all categories, choose them separately or reject them; you can buy tickets without optional measurement. You can change or withdraw your choices at any time using “Privacy settings” in the footer. With your consent to Google Ads measurement, we link an ad click identifier to a paid Pretix order. Our Firebase/Google Cloud integration sends Google Ads the click identifier, a pseudonymous transaction identifier, payment time, amount, currency and consent status. Purchase measurement does not send Google your name, email, phone number, card details or order access key. Ad personalisation is disabled. Consent choices are valid for up to 180 days and click identifiers for up to 30 days. In our integration, detailed order and attribution data are deleted or minimised after 90 days; minimal audit and deduplication records are retained for up to 400 days, and rate-limit counters for up to 2 days. Withdrawal stops subsequent transfers and does not undo data already sent. Information about Google data processing is available through “How Google uses data” in cookie settings. You can also manage cookies in your browser. With separate consent to ChatGPT Ads measurement, our Firebase/Google Cloud integration sends OpenAI the oppref ad click identifier (when available), a pseudonymous transaction identifier, payment time, amount, currency and the general checkout page URL. We do not send OpenAI your name, email, phone number, IP address, card details or order access key. We send an actual purchase event only after Pretix confirms full payment. Unpaid orders are not sent as purchases. OpenAI receiving an event does not automatically mean the purchase is attributed to an ad. We do not run an OpenAI browser pixel. Consent to Google Ads does not include OpenAI; each consent can be withdrawn separately. Information about OpenAI data processing: https://openai.com/policies/privacy-policy/.
X. Table reservations and company events
Use these forms to enquire about a table, a company event or a group visit. Submitting an enquiry does not confirm a reservation. Our team will contact you by email to discuss the details and confirm the date.
We process your first and last name, email address, phone number, start date and time, group size, and any optional end date, end time and notes. For company events, we also process the company name, event type, and any optional budget and selected requirements. For group visits, we also process the group type and any optional school or organiser name, participants’ age or school year, and number of accompanying adults. The submission also includes the enquiry type and form language.
Framer processes the form and sends the submission as an email notification to [email protected], or [email protected] for group visits. Our email is handled by Zoho Mail. Submissions are accessible to the authorised Wesoła Immersive team. Further correspondence takes place by email.
Data storage by Framer and email retention in Zoho Mail are separate processes. For questions about how your data is processed or your rights, contact [email protected]. Information about the data controller and your rights is provided in the other sections of this policy.
Fields marked with an asterisk are necessary to handle your enquiry through this form. To discuss details, change the date or cancel, email [email protected], or [email protected] for group visits.
XI. Meta measurement — Facebook and Instagram
Optional consent for Meta only. You can buy a ticket without it. Your other privacy settings remain independent.
After consent, we read an available ad click reference or Meta cookie identifiers and may link it to a confirmed purchase. Data includes a purchase identifier, amount, currency, payment time and browser information. Meta measurement does not store your name, email address or phone number.
Meta delivery is disabled at this stage. Data is used to verify consent and purchase association; automatic order polling is paused. Linking a checkout performs a point read of the Pretix order.
Your choice is kept for up to 180 days. You can withdraw consent at any time in Meta settings on the website or in checkout. Withdrawal clears identifiers from the active measurement context; consent and audit records may remain. Measurement identifiers are kept for up to 30 days, technical details for 90 days, and minimal consent and deduplication records for 400 days.