Privacy Policy

Effective Date: 05.08.2025
Data Controller: SIA Blackout Adventure, Reg. No. 40203662208
Address: Zālīša iela 5–36, Rīga, LV-10392, Latvia
Contact: +371 23000205, info@blackoutadventure.com

1. General Provisions

This Privacy Policy describes how SIA Blackout Adventure (hereafter “we”, “us”, “our”) collects, processes, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Personal Data Processing Law of Latvia.

By using our website, submitting data via our contact forms, or purchasing tickets, you agree to this Privacy Policy.

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact details: full name, email address, phone number

• Booking details: date, time, number of participants

• Billing information: when processed through third-party services such as Stripe or bank APIs

• Technical data: IP address, browser type, device information, language settings, access time

• Communication history: messages submitted via contact forms or email

3. Purpose of Data Processing

We process personal data to:

• Manage and confirm ticket bookings

• Send service-related notifications

• Respond to inquiries and provide support

• Issue invoices for legal entities upon request

• Ensure security and prevent fraud

• Send marketing emails (only with your explicit consent)

4. Legal Basis for Processing

Your personal data is processed on the basis of:

• Contractual necessity – to provide ticketing and customer services

• Legal obligation – for accounting, tax, and compliance purposes

• Consent – for marketing communications

• Legitimate interest – to improve our services and ensure security

5. Use of Cookies

We may use essential cookies to ensure proper website functionality and user experience. These cookies do not track your activity across websites.

We do not use third-party tracking services like Google Analytics.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law (e.g., accounting records for 5 years).

7. Sharing Data with Third Parties

We do not sell or rent your personal data.

We may share data only with:

• Payment processors (e.g., Stripe, bank partners)

• Service providers under contract (e.g., IT maintenance)

• Legal authorities, if required by law

All third parties are contractually obliged to ensure GDPR-compliant processing.

8. Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Withdraw consent (e.g., for marketing)

• Request data deletion (“right to be forgotten”)

• Request data portability

• File a complaint with Datu valsts inspekcija (Latvian Data Protection Authority)

To exercise your rights, contact: info@blackoutadventure.com

9. Direct Marketing

If you opt in, we may occasionally send you emails about new events, updates, or special offers. You can unsubscribe at any time by clicking the link in the email or contacting us directly.

10. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be published on this page with a new “Effective Date”.