I.Personal data controller

1. The controller of your personal data provided in the registration form is Nova Beata Kozicka, conducting business under the name Nova Beata Kozicka, ul. Dębowa 4, Jazgarzewszczyzna, postal address 05-501 Piaseczno, NIP 123-036-22-56, REGON 017323721, hereinafter referred to as the Controller.

2. You can contact the Controller by writing to: NOVA Beata Kozicka, Wolska 34, 05-650 Chynów, by calling +48 22 100 40 19 or by email at sklep@brykacze.pl.

II.Purposes and legal bases for processing

1. Your personal data will be processed by the Controller in particular:

a. to take steps at the request of the data subject before entering into a contract or to perform a contract to which the data subject is a party (the data necessary to conclude the contract are indicated in the contact form) — (legal basis: Article 6(1)(c) of the GDPR);

b. to conclude a sales contract based on your interest in our offer (legal basis: Article 6(1)(b) of the GDPR);

c. for analytical purposes [better tailoring services to our customers’ needs, general optimisation of our products, optimisation of service processes, building knowledge about our customers, financial analysis of our company, etc.], in pursuit of our legitimate interests (legal basis: Article 6(1)(f) of the GDPR);

d. for archiving (evidential) purposes, in pursuit of our legitimate interest in preserving information in case of a legal need to demonstrate facts (Article 6(1)(f) of the GDPR);

e. to establish, pursue or defend against potential claims, in pursuit of our legitimate interests (legal basis: Article 6(1)(f) of the GDPR);

f. to survey customer satisfaction, in pursuit of our legitimate interest in assessing the quality of our service and our customers’ satisfaction with products and services (legal basis: Article 6(1)(f) of the GDPR);

g. to offer you our products and services directly (direct marketing), including tailoring them to your needs, i.e. profiling, in pursuit of our legitimate interests (legal basis: Article 6(1)(f) of the GDPR);

2. The legal basis for processing your data is the contract between you and the Controller, hereinafter the ‘Contract’, which is concluded upon acceptance of the Terms and Conditions and for the performance of which processing your data is necessary, or the separate ‘Consent’ you have given, for example to receive commercial information known as a newsletter or for us to carry out direct marketing.

3. Providing personal data when you wish to conclude a Contract is not mandatory. However, if you do not provide them, it will not be possible to conclude and perform the Contract.

III.Data retention period

1. Your personal data processed for the purpose of concluding or performing a contract will be retained for no longer than necessary, i.e. for the period required for:

a. after-sales customer service (e.g. handling complaints),

b. securing or pursuing any claims available to the Controller,

c. complying with the Controller’s legal obligations (e.g. those arising from accounting or tax provisions),

2. Your personal data processed for the marketing of the Controller’s own products on the basis of legitimate interests will be processed until the data subject objects.

3. Your personal data processed on the basis of separate consent will be processed until that consent is withdrawn.

IV.Right to object

1. You have the right to object at any time to the processing of your data described above. We will stop processing your data for these purposes unless we can demonstrate compelling legitimate grounds for processing your data which override your interests, rights and freedoms, or unless we need your data to establish, pursue or defend potential claims.

2. You have the right to object at any time to the processing of your data for direct marketing. If you exercise this right, we will stop processing the data for that purpose.

V.Recipients of data

1. Your personal data may be disclosed to our partners, meaning companies with which we cooperate by combining products or services, and entities that support us in providing services electronically, including those that provide payment or credit services, carry out audits, support the promotion of offers or cooperate in marketing campaigns.

2. Our subcontractors (processors) may also have access to your data, for example accounting, legal and IT firms, marketing agencies, banks, postal operators, carriers, business information bureaux and document archiving companies.

VI.Rights of data subjects:

1. Under the GDPR, you have:

a. the right to access your data and receive a copy of them;

b. the right to rectify (correct) your data;

c. the right to have your data erased or their processing restricted;

d. the right to object to the processing of your data;

e. the right to data portability;

f. the right to withdraw consent at any time;

g. the right to lodge a complaint with a supervisory authority.

VII.Automated decision-making

1. Your personal data will be processed by automated means (including profiling), but this will not produce legal effects concerning you or similarly significantly affect your situation.

2. Our profiling of personal data involves processing your data (including by automated means) by using them to assess certain information about you, in particular to analyse or predict personal preferences and interests.

VIII.Cookies

Cookie policy

This section explains how the brykacze.pl store uses cookies and similar technologies, including browser storage. The controller is the entity identified in section I of this policy.

What are cookies?

Cookies are small files stored on your device. Among other things, they keep your shopping cart available, keep you signed in, and remember your chosen settings. Browser local storage and session storage can serve similar purposes. Session cookies last for the browser session, while persistent cookies have a specified expiry date.

What do we use cookies for?

Essential cookies support shopping, sign-in and security, and remember your consent decision. The optional categories “Preferences”, “Analytics” and “Marketing” remain disabled until you make an explicit choice. You can accept all, reject optional cookies, or select individual categories. Rejecting them does not prevent you from shopping. Closing the panel, scrolling the page or continuing to use the store does not give consent.

Which cookies do we use?

The store uses Google Analytics in the “Analytics” category; the Google tag loads only after you consent to this category. Meta/Facebook and Google Ads integrations are also available in the “Marketing” category and remain blocked without the relevant consent. Enabling a new service or changing its purposes requires us to update the cookie information and obtain consent again. Accepting a category does not activate an unconfigured service.

Google describes, among other things, the _ga cookie with a default lifetime of 2 years, and _gcl_* and _gac_* cookies with a lifetime of 90 days. This is information about the provider’s services; it does not mean these cookies are currently stored by the store. The actual names and lifetimes depend on the service enabled and its configuration. Information from providers: Google and YouTube cookies, Google privacy policy, Meta/Facebook cookies and Meta privacy policy.

Legal bases for processing

Storing and reading essential cookies serves to provide a service you have explicitly requested or to ensure its security. We use optional cookies and similar technologies on the basis of prior consent. For personal data processed for optional purposes, the legal basis is Article 6(1)(a) of the GDPR. Your consent covers the categories you select and can be withdrawn at any time. A legitimate interest does not replace the consent required for optional cookies.

Do cookies contain personal data?

Browser identifiers, connection data and information about activity may constitute personal data. We therefore do not assume that all statistics are anonymous or that every cookie is encrypted. The other sections of this policy also explain how we process data and describe your rights.

How long do we process cookies?

We remember your choice for 180 days. After that period, or after a significant change to the purposes, providers or rules for using optional technologies, we will ask you to choose again. Saving a new choice starts a new 180-day period. The validity period of consent is separate from the individual cookie lifetimes listed above.

To demonstrate the choices made, we keep a limited record: a random confirmation identifier, the date, the version of the information provided, and the selected categories. This record does not contain your IP address, customer identifier or device data. We delete entries after 180 days. The record documents decisions and is not used for advertising or tracking activity.

Changing consent and deleting cookies

You will find the “Cookie settings” link in the footer, under “Your account”. Open the panel, change categories and select “Save selected settings”, or choose “Reject optional cookies” to withdraw all optional consents. Saving requires JavaScript and does not reload the page. Withdrawing consent stops further use of the disabled integrations; it does not affect the lawfulness of processing carried out before withdrawal.

After you reject or withdraw consent, the store deletes recognized optional cookies on its own domain, as well as your viewed product history if you disable preferences. You can delete cookies stored on Google, YouTube or Meta domains in your browser settings or manage them with the relevant provider. The store cannot delete cookies belonging to other domains.

You can also block or delete cookies and site data in your browser. Deleting the cookie containing your decision will display the choices again; optional technologies will remain disabled until you give new consent. Blocking essential cookies may make shopping and signing in more difficult.

What security measures do we use on our websites?

The Operator’s websites are equipped with security measures intended to protect data under our control from loss, misuse or alteration. We undertake to protect all information disclosed to us by Customers in accordance with security and confidentiality standards.

The website Operator offers Users the option to stop receiving advertising materials and newsletters they have subscribed to. The Operator provides Users with the option to have information about themselves removed from databases and to stop receiving information sent by email.