Privacy Policy

1. Data controller

The data controller is Nexios, s.r.o., company ID 24506397, with registered office at Za Humny 653, 250 70 Odolena Voda, operator of Gladiators Laser Game.

2. Data we process

Contact forms

• name, email, optional phone number, level of playing experience and message content.

Bookings and event registrations

• name, email and phone number,
• booking date, time and duration, number of players and non-playing companions,
• booking type, note for staff and booking status,
• IP address and a pseudonymous device identifier used to protect the booking system against misuse.

Player account and membership

• identification and contact details, date of birth, address and nickname,
• chip numbers, LaserForce registration number and membership details,
• securely hashed password and technical data related to signing in or password recovery,
• credit transactions, vouchers and data required to display player statistics.

3. Purposes and legal bases

• Handling contact enquiries and interest in the sports club: steps prior to entering into a contract or a legitimate interest in communicating with a prospective customer.
• Handling bookings and registrations and managing the player account: taking steps prior to entering into a contract and performance of the contract.
• Recording payments, credit and vouchers: performance of the contract and compliance with the controller's legal obligations.
• Service security, prevention of fraudulent bookings and protection of legal claims: the controller's legitimate interest in protecting the service, customers and property.
• Technical form verification: legitimate interest in protecting the website from automated misuse.

We need the data marked as required in the form to provide the requested service. A booking or player account cannot be created without it. Confirming that you have read this policy is not consent to marketing.

4. Recipients and external services

Authorised employees and providers of hosting, technical support and email services may access the data to the extent necessary. Forms are protected by Cloudflare Turnstile. When loading global player statistics, the member area communicates with LaserForce using the supplied LF registration number.

External providers process data under their own terms and applicable data protection safeguards. Further details can also be found in Cloudflare's Privacy Policy.

5. Retention period

• We retain contact form data while handling the enquiry and subsequent communication and, where applicable, for the period necessary to protect legal claims.
• We retain booking data for the time required to handle the booking and subsequently for the period necessary to protect legal claims.
• We retain player account data for the lifetime of the account; after cancellation, only to the extent and for the period required by law or necessary to protect legal claims.
• We retain accounting and tax documents for the period required by law.
• We retain security and technical data only for the time necessary to prevent and address misuse of the service.
• We retain a password reset token until it is used or expires.

6. Your rights

Subject to the conditions laid down in the GDPR, you have the right to access, rectify or erase your data, restrict processing, receive your data in a portable format and object to processing based on a legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

You can exercise your rights by emailing info@gladiatorslasergame.cz. You also have the right to lodge a complaint with the Office for Personal Data Protection.

7. Visitor statistics

For public pages and the customer area, we record a page view: the page identifier without URL parameters, calendar day and a random view number. This counter does not store IP addresses, emails, account identifiers, browser information or referring addresses.

Only with your voluntary consent do we use the analytics cookie gladiators_analytics_id for 90 days. It contains a random browser identifier; we store only its hash, the time and version of consent, and the expiry time in the database. This allows us to distinguish repeat visits. We do not link this pseudonymous data to a player account or share it with an external analytics service. The legal basis is your consent under Article 6(1)(a) GDPR.

We remember your allow or decline choice in the essential cookie gladiators_analytics_choice for 180 days. Without consent, we do not store an analytics identifier; the services remain fully available. You can change or withdraw your consent at any time using the Statistics settingsbutton. When you withdraw consent, we delete the identifier and remove its link from existing visit records in the database.

We retain page-view records for the last 90 calendar days. Consents and identifiers are deleted when their 90-day validity expires; the data is accessible only to authorised staff in an aggregate report. Unique counts represent consenting browsers, not specific individuals.

8. Security and policy changes

We take appropriate technical and organisational measures to protect data against unauthorised access, loss or misuse. We may update this policy, particularly when services or legal requirements change.

Last updated: 9. 9. 2026