1. Data controller
Developer and controller of personal data provided in correspondence:
designLab mgr inż. Barbara Sekulska-Dulul. Piłsudskiego 3
39-400 Tarnobrzeg, Polska
NIP: 8672127886
The entity above is also the controller of data provided during playtest registration. For personal data enquiries, use the contact form (topic: “Privacy / withdraw consent”) or write to the postal address shown above.
2. What we collect and why
- Playtest registration: your email address, chosen platform, consent record, accepted document version and submission time. We use these to organise recruitment, invite you to playtests and communicate about participation. Legal basis: consent under Article 6(1)(a) of the GDPR.
- Correspondence: your name, email address, topic and message. We use these to respond to and handle your enquiry. Legal basis: the controller's legitimate interest in handling correspondence under Article 6(1)(f) of the GDPR. Enquiries about entering into a contract may instead be processed under Article 6(1)(b).
- Security: the server and services essential to the website may process technical information, including IP address, request time and browser details. The purpose is availability and protection against abuse under Article 6(1)(f) of the GDPR. The scope of logs depends on the hosting configuration.
Providing data is voluntary. Without an email address, you cannot register for playtests or receive a reply. The forms are not intended for sensitive personal information.
3. How long we keep data
We keep playtest registration data until consent is withdrawn or recruitment ends, for no longer than 12 months from registration. We then delete it or request separate consent if a new purpose arises.
We keep correspondence for 6 months after receiving your message; longer retention applies only where necessary to establish, exercise or defend legal claims or meet a legal obligation.
4. Recipients and data sharing
Data can be accessed by authorised project staff and the hosting provider maintaining the website's server and database.
The forms store registrations and messages in the website's database. They do not automatically forward them to marketing tools or external mailing systems.
We do not sell personal data. Providing an email for playtests does not automatically subscribe you to a general newsletter or permit advertising for other products.
5. Your rights and withdrawing consent
Within the limits of the GDPR, you have the right to access and obtain a copy of your data, rectify it, request erasure or restriction, receive portable data and object to processing based on legitimate interests.
You can withdraw consent to playtest communications at any time. Use the contact form with the topic “Privacy / withdraw consent”, or write to the controller. Withdrawal does not affect the lawfulness of earlier processing. We may request necessary identity verification when handling your request to protect against unauthorised access.
You may lodge a complaint with the President of the Polish Personal Data Protection Office. Information: uodo.gov.pl.
7. Automated decisions and policy changes
The forms do not make decisions with legal effects or carry out profiling. Technical anti-spam filters may limit submissions. Registering does not automatically grant playtest access.
We publish changes to these rules on this page with a date and version number. Any new purpose requiring consent will not automatically be covered by an earlier consent.
