PRIVACY POLICY - SALES AND SERVICING OF EQUIPMENT
PRIVACY POLICY — SALES AND SERVICING OF LASER TAG EQUIPMENT
What does this policy cover?
This policy applies to the sales, distribution and servicing of laser tag equipment carried on by Olivier Śmigielski, including the subpage lasertagpoznan.pl/sprzedaz-sprzetu (English version: lasertagpoznan.pl/en/equipment-sales/) together with its subpages and the contact form.
This subpage is a separate part of the lasertagpoznan.pl website. The remaining parts of the website, concerning the organisation of games, are operated by Vanguard Arsenal sp. z o.o. (a Polish limited liability company); the rules for using them, and for the processing of data collected through them, are set out in that company’s documents.
From 1 October 2026, laser tag games at Fort Va are organised by another company, Vanguard Arsenal sp. z o.o. If your matter concerns bookings, games, photos or recordings from games, or scores, that company is the controller of your data; its privacy policy is available at privacy policy. Exception: photos and recordings from games held before 1 October 2026, of which we also retain a copy (see section “Data of game customers from before 1 October 2026”); you may withdraw your consent to the use of your image by notifying either us or that company. (Information on the transfer of game customers’ data: https://lasertagpoznan.pl/zmiana-operatora/.)
With regard to the Laser Tag Poznań brand profiles (Facebook, Instagram, YouTube, Google Business Profile), we are joint controllers with Vanguard Arsenal sp. z o.o.; that company handles data subject requests and provides information on the joint controllership arrangement: Privacy policy.
Who is the controller of your data?
Olivier Śmigielski, operating as a sole trader under the business name LASER TAG Olivier Śmigielski, ul. Stobnicka 53, 60-480 Poznań, NIP 7811882078, REGON 302300085.
Contact for personal data matters (via these channels only):
- e-mail: [email protected]
- post: ul. Stobnicka 53, 60-480 Poznań
General contact for sales and servicing matters: telephone +48 570 931 931 (Mon–Sat, 10:00–18:00); telephone support is provided on our behalf by another entity (see “Who do we share your data with?”).
The information below is provided in accordance with Articles 13 and 14 GDPR (Regulation (EU) 2016/679).
What data do we process, for what purpose and for how long?
| Purpose | Data | Legal basis | How long |
| replying to a message sent via the form, by e-mail or by telephone | first name and surname, company, e-mail, telephone, message content | Art. 6(1)(b) GDPR, with regard to the Contact Form service (§ 4 of the Terms); Art. 6(1)(f) GDPR, our legitimate interest: communication in matters relating to our business, including contact by e-mail and by telephone | until you object, and in any event no longer than 6 years from the end of the year in which the last contact took place (a single retention period for all business correspondence, matching the limitation periods for claims) |
| conclusion and performance of a sales or servicing contract (offer, order, delivery, repair) | first name and surname, company, NIP, address, e-mail, telephone, order and service request details | Art. 6(1)(b) GDPR; for contact persons of our business customers: Art. 6(1)(f) GDPR (contact on the customer’s behalf) | until the expiry of the limitation period for claims under the contract (up to 6 years) |
| billing, taxes and accounting | data from invoices and accounting documents | Art. 6(1)(c) GDPR: legal obligation | 5 years from the end of the calendar year in which the tax payment deadline expired |
| establishment, exercise and defence of claims | the data from the categories above that is necessary for the case in question | Art. 6(1)(f) GDPR, our legitimate interest: defence against claims and pursuit of our own claims | until the expiry of the limitation periods (up to 6 years) |
| security and maintenance of the website | server access logs relating to visits to the equipment sales and servicing subpage (IP address, technical browser data) | Art. 6(1)(f) GDPR, our legitimate interest: security and proper functioning of the website | up to 30 days |
| use of the archive of photos and recordings from games (from before 1 October 2026) in our business communications and materials, including those relating to equipment sales and servicing | images of game participants (photos and recordings) | Art. 6(1)(f) GDPR, our legitimate interest, in connection with a separate consent to the dissemination of your image (Art. 81 of the Polish Act on Copyright and Related Rights, ustawa o prawie autorskim i prawach pokrewnych), a consent you may withdraw at any time | until consent is withdrawn |
We receive the data of contact persons of our business customers from the customer on whose behalf they act, or from public sources (the customer’s own website, CEIDG, the National Court Register (KRS)).
Providing data is voluntary, but without it we will not reply to your message or fulfil your order. We do not make automated decisions or carry out profiling. We do not send a newsletter.
Who do we share your data with?
Only to entities that support our business, and only to the extent necessary for the purpose concerned:
- IT service providers, on the basis of data processing agreements: website hosting (LH.pl sp. z o.o.); DNS and network traffic services (Cloudflare, Inc.); e-mail, office tools and backups (Google Ireland Limited); the contact form provider (Web3Forms); the provider of the platform for our service request handling system (Lovable), once that system is launched, and the person who develops and maintains it; and the person who carries out server and technical work on the website;
- Vanguard Arsenal sp. z o.o., which provides customer service on our behalf, including telephone contact, on the basis of a data processing agreement;
- carriers and courier companies, when shipping equipment;
- our accounting service provider.
Some of our providers may process data outside the European Economic Area (including Cloudflare, Inc., established in the USA; Google Ireland Limited, which may transfer data to Google LLC in the USA; Web3Forms, whose servers are located in the USA). Transfers take place on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) — where the provider is listed as a participant in the Framework — or on the basis of standard contractual clauses approved by the European Commission. On request sent to [email protected], we will provide a copy of the information on the safeguards applied.
Your rights
You have the right to request: access to your data and a copy of it, rectification, erasure, restriction of processing and data portability. Send your request to [email protected]; we will reply within one month at the latest (in complex cases we may extend this period by two months, and we will notify you of this in advance). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, uodo.gov.pl).
Right to object. You may object at any time to processing based on our legitimate interest (contact, defence of claims, website security) — on grounds relating to your particular situation. Send your objection to [email protected].
Data of game customers from before 1 October 2026
If you took part in games at Fort Va before 1 October 2026, some of your data remains with us:
- billing records, for billing purposes and any customer complaints, for the periods indicated in the table above;
- previous e-mail correspondence and booking calendar entries from before 1 October 2026, stored solely for the purposes of billing, customer complaints and the establishment, exercise and defence of claims (Art. 6(1)(c) and (f) GDPR), for the periods indicated in the table above;
- the archive of photos and recordings covered by consents to the use of one’s image, which we may use in our business communications and materials (including equipment sales and servicing), within the scope of the consent given; you may withdraw your consent at any time by writing to [email protected].
We do not use this data to contact you. Current matters concerning games, bookings, photos and recordings are handled by Vanguard Arsenal sp. z o.o. Information on the transfer of data: https://lasertagpoznan.pl/zmiana-operatora/.
Cookies
Only technical cookies necessary to display this subpage may be used on it; these do not require your consent. The contact form is operated by an external provider (Web3Forms); spam protection is handled on the provider’s side, without a captcha and without additional cookies. As at the date of publication of this policy, we do not use our own analytics or marketing tools on this subpage; should this change, we will say so in this policy before any such tools are launched. Cookie consents for the entire lasertagpoznan.pl domain are managed by Vanguard Arsenal sp. z o.o., the operator of the remaining parts of the website, by means of a cookie banner; the banner and the list of tools shown in it relate to that operator’s tools. You can also manage cookies in your browser settings.
This English version is provided for information purposes only. The Polish version is binding; in the event of any discrepancy between the two versions of this Privacy Policy, the Polish version prevails.
Last updated: 1 October 2026
