Privacy protection

The purposes and legal bases for the processing of personal data are as follows:

a) Registration: for registration purposes, the following personal data are processed: first and last name, or nickname, date of birth, email address. The legal basis for processing personal data for this purpose is a contract – Article 6/I(b) of the General Data Protection Regulation.

b) Visiting WOOP! premises or using services: when purchasing services or registering for summer holidays, the Academy, or a birthday celebration, in addition to personal data collected at registration, data on the service purchase are also processed. The legal basis for processing personal data for this purpose is the general terms and conditions or a contract – Article 6/I(b) of the General Data Protection Regulation. For services intended for children (particularly the Academy, summer camps, and birthday parties), we also process children’s personal data (first and last name, age, and any special needs or medical conditions voluntarily disclosed by a parent or legal guardian for the child’s safety, e.g., allergies). We process this data on the basis of a contract concluded between the child’s legal representative and WOOP! (Art. 6(1)(b) GDPR). Any data regarding health status (a special category of personal data under Art. 9 (1) of the GDPR) is processed exclusively on the basis of the explicit consent of the legal representative (Article 9(2)(a) of the GDPR) or to protect the vital interests of the child (Article 9(2)(c) of the GDPR). In accordance with Article 9 of the Personal Data Protection Act (ZVOP-2) in conjunction with Article 8 of the GDPR, children under the age of 15 cannot independently give valid consent to the processing of personal data in the context of information society services; in such a case, consent is given or approved by the legal representative.

c) Publication of photographs and videos: if you have given consent for the publication of your photographs and videos and your first and last name, or the same data for your children, these will be published on the website woop.fun, our social networks (Facebook, Instagram, YouTube, TikTok and Snapchat in LinkedIn). The legal basis is your consent – Article 6/I(a) of the General Data Protection Regulation.

d) Data analysis: analysis of data on the use of services is carried out on the basis of pseudonymised data, whereby the results are used for making strategic and tactical marketing decisions. The legal basis is legitimate interest – Article 6/I(f) of the General Data Protection Regulation.

e) Direct marketing: direct marketing is carried out to the email address you provided at registration. In this way, we send you notifications about promotions, news, and capacity availability. If you purchased or ordered our service online, we may carry out direct marketing to your email address on the basis of the Act on Electronic Communications – Electronic Communications Act (ZEKom-2, Official Gazette of the Republic of Slovenia, No. 130/22, as amended), Article 226. You may always object to such processing by following the instructions in the footer of each such message or by sending a message to dpo@woop.fun.

f) Targeted marketing: in preparing a personalised offer, we process your personal data from registration and your use of services at WOOP! premises. The legal basis is your consent – Article 6/I(a) of the General Data Protection Regulation.

g) Prize draws: when you participate in any of the prize draws organised by WOOP!, zabaviščni parki, d.o.o., you provide your personal data as part of your entry to participate. We process this data for the purpose of running the prize draw and for the award of prizes within the prize draw. The data collected are first and last name, address, email address, telephone number, year of birth, and tax number (only in the case of a prize being won). By participating in a prize draw, you accept the general terms and conditions of the prize draw. The legal basis for processing personal data for the purpose of running the prize draw is a contract – Article 6/I(b) of the General Data Protection Regulation. In the event that we wish to use your data for the purpose of direct marketing, we will do so solely on the basis of your consent – Article 6/I(a) of the General Data Protection Regulation.

h) Visiting the website: we also collect data on your use of our website through cookies and similar technologies. More information on how we use these technologies to collect information about you can be found in the Cookie Policy.

i) Video surveillance of business premises: We conduct video surveillance for the purposes of protecting property, ensuring the safety of visitors and employees, and determining the circumstances of any accidents or incidents on WOOP! premises. The legal basis is the controller’s legitimate interest—Article 6(1)(f) of the General Data Protection Regulation (GDPR) in conjunction with Articles 76–80 of the Personal Data Protection Act (ZVOP-2). More detailed information on video surveillance, including information provided before entering the monitored area and the retention periods for recordings, is available in a separate Video Surveillance Notice, accessible at webiste.

j) Recording of injuries, accidents, and complaints: For the purposes of ensuring safety, handling potential claims for damages, and mandatory cooperation with the insurance company, we maintain records of any injuries, accidents, and complaints from visitors. The legal basis is a legal obligation—Article 6(1)(c) of the GDPR (legislation regarding occupational health and safety and consumer protection) and the controller’s legitimate interest in defending against legal claims—Article 6(1)(f) of the GDPR. For any health data (a special category of personal data), the legal basis is Articles 9(2)(c) and 9(2)(f) of the GDPR.