Privacy Policy

This policy explains what personal data we collect on the BaseStack Łódź website and at our location, for what purpose, how long we retain it, and what rights you have. We comply with the provisions of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council).

1. Data Controller

The controller of your data is BaseStack…

Contact regarding personal data: lodz@basestack.gg or by mail to the following address: BaseStack Łódź, ul. Rewolucji 1905 roku 45, 90-215 Łódź.

2. What data do we collect and why?

Registration for events and tournaments

First name, last name, username, email address, phone number, date of birth, selected event and date, and payment information. We use this information to process your registration, organize the event, verify the participant’s age, contact you regarding your registration, process your payment, and issue a refund if necessary.

• Legal basis: performance of a contract (Article 6(1)(b) of the GDPR), and with regard to accounting—a legal obligation (Article 6(1)(c) of the GDPR, tax and accounting regulations).

Inquiries about birthdays, rentals, boot camps, and corporate events

The information provided in the form or in the message (name, contact information, date, number of people, details of the inquiry). We use this information to respond and prepare a quote.

• Legal basis: actions taken prior to entering into a contract at your request (Article 6(1)(b) of the GDPR) and our legitimate interest—responding to messages (Article 6(1)(f) of the GDPR).
• Term: until the conclusion of negotiations, and if an agreement is reached—for the duration of its performance and the statute of limitations on claims.

Statistics and Advertising (Cookies)

If you consent, we collect data about your use of the website (e.g., pages visited, approximate location, device type) via Google Analytics, and for advertising purposes, via Google and Meta tools. Legal basis: Your consent (Article 6(1)(a) of the GDPR). Details and how to withdraw consent: Cookie Policy and the “Cookie Settings” link in the website footer.

3. Who We Share Data With

We use the services of trusted companies that process data on our behalf and only to the extent necessary:

• Stripe (Stripe Payments Europe Ltd., Ireland) – online payments (credit/debit card, BLIK, Przelewy24). We do not see or store any card information.
• Pantheon (Pantheon Systems Inc., USA) – website hosting.
• Twilio SendGrid (U.S.) – sending confirmation emails.
• Google (Google Ireland Ltd.) – Google Tag Manager, Google Analytics (with consent), reCAPTCHA (form spam protection).
• Weglot (Weglot SAS, France) – translation of the website into English.
• ggCircuit – workstation reservation system (once you go to the reservation page, this site's policy applies).
• Accounting, law, and IT firms that work with us, as well as public authorities, if required by law.

Some of these providers are based in the U.S. Data transfers are made pursuant to a decision by the European Commission (the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the Commission.

4. Your Rights

• access your data and receive a copy of it,
• correction (amendment) of data,
• deletion of data (“the right to be forgotten”),
• restriction of processing,
• data transfer,
• objection to processing based on our legitimate interest,
• withdrawal of consent at any time (this does not affect the lawfulness of processing prior to such withdrawal),
• a complaint to the President of the Personal Data Protection Office (2 Stawki St., 00-193 Warsaw, uodo.gov.pl).

To exercise these rights, please email lodz@basestack.gg.

5. Do you need to provide your information?

Providing your information is voluntary, but without the information marked as required on the form, we cannot accept your registration or respond to your inquiry. We do not make decisions regarding you based solely on automated processing, including profiling, that would produce legal effects.

6. Minors

People under 16 may register for the event only with the consent of a parent or legal guardian. We collect the date of birth to verify that the participant meets the event’s age requirements.

7. Policy Changes

We may update this policy, for example, if our services or regulations change. The current version is always available on this page. Last updated: X