Privacy Policy

1.1. The confidentiality of your data matters to us. This Policy explains what personal data we collect, for what purposes, on what legal basis, with whom we share it, how long we keep it and what rights you have in relation to it.

1.2. The Policy applies to data processing carried out by Pixel Group Prime SRL as controller, in connection with the use of the website https://haipixel.md, the making of bookings and the provision of Hai Pixel services (game sessions, birthday parties, corporate events, gift cards).

1.3. Processing is carried out in accordance with the personal data protection legislation of the Republic of Moldova, in particular Law no. 133/2011 (currently in force) and Law no. 195/2024, which transposes Regulation (EU) 2016/679 (GDPR) and enters into force on 23 August 2026.

• •Personal data: any information relating to an identified or identifiable natural person (for example, name, phone, e-mail, IP address).
• •Processing: any operation performed on data (collection, storage, use, transfer, erasure, etc.).
• •Controller: Pixel Group Prime SRL, which determines the purposes and means of processing.
• •Processor: a third party that processes data on behalf of the Controller (for example, the hosting provider or payment processor).
• •Data subject: the natural person whose data is processed (the User, the Client).
• •CNPDCP: the National Center for Personal Data Protection, the supervisory authority of the Republic of Moldova.

Depending on how you interact with us, we may collect the following categories of data:

3.1. Identification and contact data: first and last name, phone number, e-mail address.

3.2. Booking data: the type of experience or package, date and time, duration, number of participants and other details needed to provide the service.

3.3. Payment data: the information needed to process the transaction. Card payments are processed by the payment service provider; we do not store full bank card data.

3.4. Gift card data: the recipient's and sender's details, when you purchase a gift card.

3.5. Technical and browsing data: IP address, device and browser type, pages visited, visit duration and other data collected through cookies and similar technologies (see the Cookie Policy).

3.6. Communications: the content of messages you send us through the contact form, e-mail or other channels.

3.7. Photo/video images: photographs and recordings may be taken during sessions and events, under the conditions described in section 9.

We process your data for the following purposes and on the following legal bases:

4.1. Managing bookings and providing services. Basis: performance of the contract to which you are a party.

4.2. Processing payments and issuing fiscal documents. Basis: performance of the contract and compliance with legal obligations.

4.3. Communicating with you (confirmations, changes, support, responses to requests). Basis: performance of the contract and the Operator's legitimate interest in providing a quality service.

4.4. Improving the site and services through statistical analysis. Basis: the Operator's legitimate interest and/or your consent, in the case of non-essential cookies.

4.5. Marketing and promotional communications (newsletter, offers). Basis: your consent, which you can withdraw at any time.

4.6. Compliance with legal obligations (fiscal, accounting, consumer protection). Basis: legal obligation.

4.7. Defending the Operator's rights (for example, dispute resolution). Basis: the Operator's legitimate interest.

5.1. The site uses cookies and similar technologies for essential, functional, analytical and marketing purposes. Non-essential cookies are used only with your consent, given through the cookie banner.

5.2. Detailed information is set out in the Cookie Policy, which forms an integral part of this Policy.

6.1. We do not sell your data. We may share it only with the following categories of recipients, to the extent necessary:

• •Payment service providers (for example, maib), for transaction processing;
• •Hosting and technical infrastructure providers, who store data on our behalf;
• •Analytics providers (for example, traffic analysis solutions), subject to the consent given;
• •Public authorities, where the law requires us to provide information;
• •Professional advisers (accountants, lawyers), to the extent necessary.

6.2. These recipients process data either as processors, under contractual confidentiality and security obligations, or as independent controllers, under their own privacy policies.

7.1. Some of our service providers (for example, hosting, cloud storage or analytics) may process data on servers located outside the Republic of Moldova.

7.2. In such cases, we ensure that the transfer takes place with adequate safeguards, in accordance with the applicable personal data protection legislation.

8.1. We keep personal data only for the period necessary to fulfil the purposes for which it was collected or for the period required by legal obligations (for example, accounting and fiscal retention periods).

8.2. Booking and payment data is kept for the duration needed to provide the service and afterwards within the legal archiving periods. Data processed on the basis of consent (for example, for marketing) is kept until the consent is withdrawn.

8.3. At the end of the retention period, data is deleted or anonymised.

9.1. During sessions and events, we may take photographs and video recordings, including for promotional purposes.

9.2. Their promotional use complies with data protection legislation and, where applicable, is based on the consent of the persons concerned (or, for minors, of the parent or legal guardian).

9.3. You may at any time ask not to be photographed or filmed, and may withdraw previously given consent, by contacting us through the channels listed in section 12.

10.1. We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure, including secure connections, access control and working with providers that meet adequate security standards.

10.2. No system can guarantee absolute security; we are, however, committed to promptly managing any security incident, in accordance with our legal obligations.

11.1. As a data subject, you have, under the law, the following rights:

• •The right of access to the processed data;
• •The right to rectification of inaccurate or incomplete data;
• •The right to erasure ("the right to be forgotten"), under the law;
• •The right to restriction of processing;
• •The right to object to certain processing;
• •The right to data portability;
• •The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• •The right to lodge a complaint with the National Center for Personal Data Protection (CNPDCP).

11.2. To exercise these rights, you can contact us through the channels listed in section 12. We will respond to requests within the periods provided by law.

11.3. We do not use automated decision-making that produces legal effects or significantly affects you.

Pixel Group Prime SRL (Hai Pixel) IDNO: 1025600067579 Registered office: 2/4 Constantin Negruzzi Blvd, Chișinău, Republic of Moldova Opening hours: daily, 10:00 - 22:00 E-mail: [email protected] Phone: +373 79 238 617 Website: https://haipixel.md Contact form: https://haipixel.md/contact

For any question about this Policy or the processing of your data, you can contact us through any of the channels above.

13.1. We may update this Policy periodically to reflect changes in our practices, the technologies used or legal requirements.

13.2. The applicable version is the one published on the site, and the date of the last update is indicated at the beginning of the document. We recommend checking this page periodically.