Legal
Privacy policy
Last updated: 6 November 2026
1. Data controller
The controller of your personal data is PLACEMAKERS S.R.L., tax ID (CUI) 52562109, registration no. J2025072667001, registered office in Bucharest, Sector 1, Strada Avionului nr. 26, floor 1, apt. B. For any request concerning personal data you can write to us at contact@ludotech.ro.
2. What data we collect, why and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Message sent to a partner through the platform's messaging | the name shown in the conversation, the content of the messages, the activity or product concerned, the dates of the messages | delivering the message to the partner, the conversation with them on the platform and email notifications that you have a new message | performing your request (Art. 6(1)(b) GDPR) |
| User account | email, name, password (stored encrypted), preferences, favourite activities | creating and managing the account | performance of the platform's terms of use contract (Art. 6(1)(b)) |
| Partner account | contact details, company name and identification details, description of the offer, verification documents | verifying and publishing the profile, communicating with the partner | performance of the contract and our legitimate interest in verifying partners (Art. 6(1)(b) and (f)) |
| Newsletter | email address, date and page of subscription | sending news, recommendations and offers | your consent (Art. 6(1)(a)) |
| Usage statistics (Google Analytics, PostHog) | online identifiers, pages visited, device type, approximate location | understanding how the site is used and measuring campaigns | your consent, given through the cookie banner (Art. 6(1)(a)) |
| Security and abuse prevention | IP address, technical logs | protecting the platform, preventing spam and fraud | our legitimate interest (Art. 6(1)(f)) |
| Legal obligations | identification and accounting data, as applicable | meeting tax and accounting obligations | legal obligation (Art. 6(1)(c)) |
We do not ask for or encourage sending data about children in messages. Please do not include sensitive data in messages (for example about your child's health) and do not write email addresses or phone numbers; if the partner needs sensitive data, they will request it and process it themselves, in their own name.
3. Who we share data with
- The partner you contact receives your message and the name shown in the conversation, in their panel on the platform. Ludotech does not pass on your email address or phone number. The partner becomes an independent controller for the data you give them in the conversation and is responsible for how they use it.
- Catalog listings may also show contact details published by the partner (for example phone, email or WhatsApp). If you contact them directly through these, you communicate with the partner outside the platform, and they are responsible for the data they receive.
- Providers that help us operate the platform (hosting and database, sending emails, statistics), under contract, only for the purposes described here.
- Authorities, when the law requires us to.
We do not sell your personal data.
4. Transfers outside the European Economic Area
Some providers (for example Google for statistics) may process data outside the EEA. Transfers rely on the mechanisms provided by the GDPR, such as the European Commission's adequacy decision or standard contractual clauses.
5. How long we keep data
- Platform messages: 24 months from the last message in the conversation, then anonymised.
- Account: for as long as the account exists; when the account is deleted, the data is deleted or anonymised, except data the law requires us to keep.
- Newsletter: until you unsubscribe; we keep proof of subscription and unsubscription so we can show that your choice was respected.
- Statistics: according to the cookie durations in the Cookie policy.
- Accounting data: the periods required by law.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You can write to us at contact@ludotech.ro; we reply within one month at most. You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro), without losing the right to go to court.
7. Children
The platform is intended for parents and guardians, not children. Accounts can only be created by people aged at least 18. If we learn that we have received data from a minor without a parent's consent, we delete it.
8. Security
We use reasonable technical and organisational measures: encrypted connections, role-based access control, passwords stored encrypted and limited access to data. No method of transmission or storage is completely free of risk.
9. Changes
We may update this policy; the current version and the date of the last update appear on this page.
Alert for a new edition of an activity (“I'd like a new edition”)
What data we collect. When you ask to be notified about a new edition of an ended activity, we keep your email address (or, if you are signed in, the link to your account), the number of people interested (1–10) and the time of the request. To prevent abuse we keep an irreversible technical fingerprint of the IP address (not the IP address in clear). We do not collect names, phone numbers or messages.
Purpose. To send you a single email when the partner adds a new edition of the activity and to show the partner the total number of people interested. The partner does not receive your address or any other data about you.
Legal basis. Your consent (Art. 6(1)(a) of Regulation (EU) 2016/679), given by ticking the box and confirmed through the link in the email.
Retention period. Unconfirmed requests are deleted after 7 days. Confirmed requests are deleted after the alert is sent or, if no new edition appears, after 12 months. When you withdraw consent, the address is deleted immediately.
Withdrawing consent. At any time, through the “Withdraw consent” link in the confirmation email or, for signed-in users, from the activity page. Withdrawal does not affect the lawfulness of earlier processing.
Your rights. Access, rectification, erasure, restriction, portability, objection and a complaint to ANSPDCP, as set out in the “Your rights” section of this policy.
Newsletter and marketing communications
If you subscribe to the newsletter, we collect your email address, the time you gave your consent and the page you subscribed from. For this purpose we do not collect your IP address, device data or other tracking data.
Purpose of processing: to send you news, activity recommendations and Ludotech offers.
Legal basis: your explicit consent, given by ticking the dedicated newsletter box. Subscribing is voluntary, the box is not pre-ticked and it is not required to create an account or make a booking. Consent to the newsletter is separate from accepting the Terms and the Privacy policy.
Withdrawing consent: you can unsubscribe at any time, without signing in, using the “Unsubscribe” link in every email. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Data retention: after you unsubscribe, the address is marked as inactive and no longer receives communications. We keep the record (subscription date and unsubscription date) so we can show that your preference was respected. You can ask for complete deletion by writing to us through the contact page.
Your rights: you can ask for access to your data, rectification, erasure, restriction of processing, data portability, or you can withdraw your consent. You can contact us through the contact page.