Last updated: 6 September 2026
This policy explains what personal data we collect on scrumtale.com, why we collect it, who we share it with and what you can do about it.
Who is responsible for your data
The controller of personal data collected through this website and its online shop is Gienia Creative Eugenia Okła, ul. Wzgórze Bernadowo 109, 81-583 Gdynia, Poland, VAT UE PL9570855157.
The ScrumTale game and the content of this website belong to Przemysław Witka and Lech Wypychowski.
In any matter concerning your data, write to hello@scrumtale.com.
What we collect and why
When you place an order
We collect your name, e-mail address, postal address, phone number and, for business buyers, company name and tax number. We need this to process the order, deliver it, issue an invoice and handle any complaint.
Legal basis: performance of a contract (Article 6(1)(b) GDPR) and our legal obligations in accounting and tax law (Article 6(1)(c) GDPR).
When you subscribe to the newsletter
We collect your e-mail address. You always confirm the subscription by clicking a link in a message we send you, and every newsletter carries an unsubscribe link.
Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
When you write to us through a form
The workshop sign-up form collects your name, e-mail address and message, and sends them to our inbox. We use them only to answer you.
Legal basis: our legitimate interest in replying to enquiries (Article 6(1)(f) GDPR).
When you browse the site
Our server records standard technical data: IP address, browser type, pages requested and time of the request. This keeps the site secure and available.
Analytics cookies load only after you agree in the cookie banner. Until then no analytics identifiers are stored on your device. You can change your choice at any time through the cookie settings link in the banner. Details are in our Cookie Policy.
Legal basis: our legitimate interest in a secure website (Article 6(1)(f) GDPR) for server logs, and your consent (Article 6(1)(a) GDPR) for analytics.
Who else sees your data
We do not sell personal data and we do not share it for anyone else’s marketing. We do use service providers who process data on our behalf:
- Stripe – card payments. Card details are entered on Stripe’s side and we never see or store them.
- Intuit Mailchimp – sending the newsletter.
- Google – website analytics, only after you consent.
- CookieYes – recording your cookie choice.
- Hostinger – hosting the website and our e-mail.
- Courier companies – delivering physical orders.
- Our accountant – as required by tax law.
Some of these providers are based outside the European Economic Area. Where that happens, transfers rely on the European Commission’s standard contractual clauses.
How long we keep it
- Order and invoice data: five years from the end of the tax year in which the sale took place, as accounting law requires.
- Newsletter address: until you unsubscribe or ask us to delete it.
- Enquiries sent through forms: up to twelve months after we finish the conversation.
- Server logs: up to twelve months.
- Cookie choice: as stated in the Cookie Policy.
Your rights
You have the right to:
- ask what data we hold about you and get a copy of it,
- have inaccurate data corrected,
- have your data deleted, where we have no further legal ground to keep it,
- restrict or object to how we process it,
- receive the data you gave us in a portable format,
- withdraw consent at any time, which does not affect what we did before you withdrew it.
Write to hello@scrumtale.com and we will answer within one month.
If you believe we handle your data unlawfully, you may complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Is providing data required?
Giving us your data is voluntary, but without order details we cannot complete a purchase, and without your e-mail address we cannot send the newsletter or answer your message. We do not make any decisions about you by automated means and we do not profile you.
Changes to this policy
If we change how we handle personal data, we update this page and the date at the top. The current version always applies.