Logo of the Funzy website, located in the header of the page
Gradient located in the background of the form

Funzy.app Privacy policy

Welcome to Funzy.app. This Privacy Policy describes how we collect, use, and protect your personal data while using our application. Please familiarize yourself with the information below.

  1. Basic Information

    1. This funzy.app Privacy Policy (the 'Privacy Policy') explains how we process data, including the personal data of individuals using the Service referred to in the Terms of Use of the funzy.app application ('Terms of Use').

    2. The Privacy Policy fulfills the information obligation under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ('GDPR').

    3. The controller of your personal data is Funzy spółka z ograniczoną odpowiedzialnością, based in Warsaw, ul. Magnacka 2/60, 02-495 Warsaw, REGON 524554247, NIP 5273044453, registered in the register of entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register, KRS no. 0001021356, with a share capital of PLN 5,000.00 ('Controller').

    4. The Controller has appointed a Data Protection Officer. All matters related to the processing of personal data should be reported via email: [email protected] or to the correspondence address provided above.

    5. Other terms capitalized in the Privacy Policy, which are not defined in points 1.1-1.4 above, shall have the meaning ascribed to them in the Terms of Use. Whenever the Privacy Policy refers to a Partner, it means a Partner who is a natural person.

  2. Types of Processed Personal Data

    1. During registration: When creating an account in the Funzy.app application, we ask for personal data such as first name, last name, email address, and phone number. Users may also provide their gender. Additionally, due to the need to comply with the requirements of the Act of October 26, 1982, on upbringing in sobriety and counteracting alcoholism (Journal of Laws 2019, item 2277, as amended), particularly to confirm that the user is an adult as defined by Article 10 § 1 of the Civil Code Act of April 23, 1964 (Journal of Laws 2020, item 1740, as amended), the User may be asked to provide their date of birth.

    2. During the use of the Application: When making reservations at partner venues, we may collect data regarding preferences, reservation date, number of people, and other data related to the reservation. We also collect your reservation history.

    3. If you are a Partner, when adding a venue, we also collect your data in the following scope: venue category, name, location, and website address.

  3. Purpose and Legal Basis for Processing

    1. Personal data of the User collected by the Funzy.app Application is processed on the basis of: Article 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract) in connection with the conclusion of the contract for the use of the Application as specified in the Terms of Use for the purpose of enabling registration and logging into the application, making reservations at partner venues, providing notifications and information related to your reservations, and enabling the use of other functionalities of the Application, as well as handling complaints regarding the malfunction of the Application. The User's personal data may also be processed on the basis of Article 6(1)(a) GDPR (the data subject has given consent to the processing of their personal data for one or more specified purposes) in connection with publishing reviews by the User. Publishing a review is equivalent to giving consent for the processing of personal data for this purpose. Personal data may also be processed for the personalization of the Application (providing gender during registration constitutes an explicit affirmative action confirming the Participant's consent to process these personal data). If the User has voluntarily provided other personal data via the Application that is not mentioned in the Privacy Policy, this data will also be processed based on consent.

    2. Partner personal data is processed on the basis of: Article 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract) in connection with the conclusion of a contract for the use of the Application under the Terms of Use to enable the establishment of relationships and communication with Users and provide access to other functionalities of the Application. Partner personal data may also be processed on the basis of Article 6(1)(c) GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject) for the purpose of issuing invoices, maintaining accounting records, and tax documentation.

    3. Additionally, personal data of Users and Partners may be processed to establish, exercise, or defend legal claims and to ensure accountability (demonstrating compliance with legal obligations by the Controller), conduct statistics and analyses, including how the account is used, for the purpose of verifying the quality, optimizing, and expanding the range of services offered. The legal basis for processing personal data for these purposes is Article 6(1)(f) GDPR, i.e., the legitimate interest of the Controller, which is the introduction of solutions supporting business activities.

  4. Period of Storage of Personal Data

    1. Personal data will be processed until the account is deleted. Personal data that we process on the basis of consent is stored until the consent is withdrawn or the account is deleted, whichever occurs first.

    2. Partner personal data may additionally be processed for 5 years after the termination of the contract for the use of the Application. The 5-year period is counted from the beginning of the year following the year in which the contract was terminated.

    3. The period for storing personal data may be extended by the period of limitation for claims if the processing of personal data is necessary for the establishment or pursuit of potential claims or defense against such claims by the Controller.

  5. Sharing of Personal Data

    1. Personal data of Users, including first name, last name, email address, and phone number, is shared with Partners with whom you make reservations. Partners are separate controllers of the Users' personal data.

    2. Personal data may also be shared with entities authorized to do so under the law.

    3. We may share your data with other entities if necessary for the proper fulfillment of the Controller's obligations, including subcontractors, postal service providers, IT, accounting, legal services, and our suppliers.

    4. Your personal data will not be transferred by us outside the European Economic Area (EEA).

  6. Profiling:

    1. There will be no automated processing of your personal data, including profiling, in accordance with the GDPR when using the Application.

  7. Geolocation:

    1. The basis for data processing is the permission granted to the Application to use the location services of your terminal device. The permission can be withdrawn at any time by revoking the Application's access to location information.

  8. Your Rights:

    1. You have the right to access the content of your data, to rectify it, delete it, restrict its processing, as well as the right to data portability, the right to withdraw your consent at any time (withdrawal of consent does not affect the lawfulness of the data processing that took place prior to its withdrawal), and the right to object.

    2. You have the right to object to the processing of your personal data – for reasons related to your particular situation – when the processing is carried out in connection with the legitimate interests pursued by the Controller. In such a case, we will stop processing your data for these purposes unless we can demonstrate that there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or that the data is necessary for establishing, exercising, or defending legal claims.

    3. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Warsaw (00-193), ul. Stawki 2.

  9. Personal Data Security:

    1. The Controller takes care of the security of Users' and Partners' personal data by applying appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or alteration.

    2. To protect data, Users and Partners are required to keep their password confidential and not share it with others.

  10. Cookies:

    1. Cookies are defined as IT data, in particular text files, stored on end users' devices intended for the use of websites. These files allow the user's device to be recognized and the website to be displayed according to their individual preferences.

    2. The funzy.app application uses the following cookies: essential cookies that are necessary for the proper functioning of the website, particularly for remembering login sessions and storing information about the current application language.

    3. These cookies are always active, and the legal basis for processing data using them is Article 6(1)(f) GDPR, i.e., the Controller's legitimate interest, which is to ensure the proper use of the Application.

    4. The Application also uses analytical cookies, which enable the improvement of the application's performance. These cookies are processed based on Article 6(1)(a) GDPR, i.e., consent given through your browser settings.

  11. Changes to the Privacy Policy:

    1. We may make changes to the Privacy Policy. Any changes will be published on this site, and continued use of the funzy.app Application after the changes are made will be considered acceptance of the new policy