This Privacy Policy describes:

what personal data we collect,
how we use it,
the legal basis for processing,
how long we retain data,
who we may share it with,
what technologies we use (video surveillance, call recording),
how parental consent is obtained,
visitor rights and how to exercise them.

We collect the following categories of data:

• Full name for participant identification

• Age for age verification

• Phone and email for booking confirmation, contact and instructions

• Photographs and videos part of the gaming experience and for marketing (with consent)

• Call recording for service quality and agreement records

• Video surveillance (video and audio) for security, investigations and equipment protection

Data is collected through:

• Website and Resova online booking system

• Consent forms via Buzzshot

• Contact by phone, email, social media and in-person at reception

• Video surveillance and call recording systems

We process data based on legal grounds:

• Contract execution (e.g., booking management)

• Legal obligations (e.g., tax document retention)

• Legitimate interest (security, service improvement, defending our rights)

• Consent (e.g., marketing, publishing photographs)

• Parental responsibility for minors

• CRM data retained indefinitely until deletion request

• Tax documents 10 years

• Forms and liability terms (Buzzshot) up to 20 years

• Marketing contacts 2 years after last interaction

• Video surveillance images 30 days

• Call recordings up to 90 days

Upon deletion request, data is erased unless legally required to retain.

We do not sell or share data with third parties for advertising purposes.

Only the following have access:

• Internal VR ARENA team (limited access)

• Data processing subcontractors

• IT and data storage providers

• Payment providers (Stripe, etc.)

• Public entities only by legal order

All subcontractors have signed confidentiality agreements and comply with GDPR.

• Installed in all common areas (including the game arena)

• Records video and audio

• Purposes: security, conflict resolution, quality control, damage records

• Storage: 30 days, then automatically deleted

• Restricted access to authorized personnel

• All calls may be recorded with notice at the beginning

• Purpose: quality control and booking records

• Storage: up to 90 days

• Restricted access

• Participation of minors under 18 only with written parental consent

• Parents sign via Buzzshot and: authorize participation, consent to data processing, assume responsibility for behavior and damages

Without consent, minor participation is not permitted. Consent can be revoked at any time with possible data deletion.

Visitors may:

• Request access to their data

• Correct incorrect data

• Delete data (unless legally required to retain)

• Restrict processing

• Refuse marketing communications

• Revoke consents

All requests are free and responded to within 30 days.

This policy may be updated. The latest version is always available at: