GameOver Faro
//

Data protection

Privacy Policy

What we collect

For an escape room booking, we collect your name, email, phone, room, date, time, player count and email objection preference. The form records whether you objected, with its date, language and text version; an unchecked box is not explicit consent.

Why we use it

We use booking details to confirm and manage your session and contact you about it. Marketing about our own similar services is only possible where all legal conditions are met, including a genuine customer relationship and easy, free objection at collection and in every message. Other campaigns require a separate, valid explicit consent already held. All commercial campaigns remain disabled pending legal approval. We do not sell your data.

How long we keep it

We keep booking records for the time needed to provide and manage the service, resolve related requests and meet any applicable legal obligations. Marketing records are limited to what is necessary to establish eligibility and honour objections. We retain the minimum evidence needed to prevent an unwanted resubscription. The detailed retention schedule must be validated before campaigns are activated; no unlimited advertising permission follows from keeping a booking.

Event registrations

When you reserve seats for one of our events, we collect your name, phone number, email address and the number of seats. We use them only to manage your reservation, send your confirmation and a reminder on the day of the event, and welcome you at the door. We keep them until 12 months after the event, then they are anonymised. You can ask us to erase them earlier at any time.

Legal bases and preferences

We process booking details to perform your reservation (GDPR Article 6(1)(b)). Accepting the booking terms is not general consent to data processing. Broader marketing requires optional, specific consent. An unchecked objection box is not consent. Similar-service communications remain disabled pending legal review under Portuguese Law 41/2004, Article 13-A. Historical contacts remain unverified.

We record the date, language and text version of your choices. Object or withdraw consent free of charge using the unsubscribe link in marketing emails or by contacting us. Objections override prior permissions; a later booking never automatically resubscribes you. We retain the minimum suppression evidence needed to honour your choice.

Recipients and providers

Authorised GameOver staff access the data needed for their duties. The site uses Supabase (database and authentication), Vercel (hosting), Google Gmail (transactional emails) and Google Sheets / Apps Script (booking records). The protected database register is authoritative for marketing preferences; a row in Sheets is not advertising permission. Correction and erasure requests also cover operational copies, subject to legal obligations.

Before marketing activation, GameOver must confirm the controller’s full legal identity, provider regions, any international transfers and their safeguards, and the detailed retention schedule. You may complain to the Portuguese supervisory authority CNPD.

Your rights

You can request access, correction, erasure, restriction or portability where applicable, object to marketing, or withdraw any previous consent free of charge. Contact us at gameover.faro@gmail.com or +351 918 595 652.