1. Data controller
The controller of personal data is Polish Business Club Sp. z o.o., ul. Humańska 8, 00-789 Warsaw, Poland, KRS 0000448885, VAT ID PL7010366893, REGON 146515099 (the Controller). Data protection contact: e-mail bok@zlawendy.pl, postal address: ul. Diamentowa 71, 08-119 Purzec, Poland. The Controller has not appointed a Data Protection Officer.
2. Purposes and legal bases
- Concluding and performing the sales agreement (order handling, shipping, order communication, customer account) — Art. 6(1)(b) GDPR.
- Legal obligations (issuing and keeping sales documents, handling complaints and withdrawals, accounting) — Art. 6(1)(c) GDPR.
- Legitimate interests (establishing and defending claims, shop security, statistics) — Art. 6(1)(f) GDPR.
- Marketing and newsletter — only with consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
3. Recipients
Data is shared only as necessary:
- Ancient Wisdom s.r.o. (AW Dropship), CTPark Trnava, Prílohy 583/57, 919 26 Zavar, Slovakia — supplier and warehouse that ships orders (name, delivery address, phone, e-mail, order contents);
- carriers and logistics operators (Packeta and its partners; in Poland: InPost, Poczta Polska, DPD; in other countries — the carriers indicated for delivery);
- payment operators: Krajowy Integrator Płatności S.A., Poznań (Tpay) and mElements S.A., ul. Prosta 18, Warsaw (Paynow) — depending on the payment method chosen;
- hosting provider (LH.pl sp. z o.o.) and e-mail provider (LH.pl sp. z o.o.);
- invoicing system provider;
- analytics and marketing tools, — only with consent given in the cookie banner: Google Ireland Ltd. (Google Analytics, Google Ads);
- accounting and legal advisers — within the Controller’s obligations.
Data is not transferred outside the European Economic Area, except for services listed in the cookie banner, which rely on standard contractual clauses or European Commission decisions (Google — EU-U.S. Data Privacy Framework).
4. Retention
Order data — for the limitation period of claims and tax obligations (generally 5 years from the end of the tax year); customer account — until deleted; consent-based data — until consent is withdrawn; data processed on legitimate interests — until a successful objection.
5. Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability, object to processing based on legitimate interests and withdraw consent (without affecting prior lawful processing). You may lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) or the authority in your country of residence.
6. Voluntary provision
Providing data is voluntary but necessary to place and fulfil an order. Data is not used for automated decision-making, including profiling with legal effects.
7. Cookies
The Shop uses cookies necessary for its operation (cart, login, language choice) and — only with consent given in the banner — analytics and marketing cookies: Google Analytics 4 (Google Ireland Ltd.) — visit statistics and, once campaigns run, Google Ads (Google Ireland Ltd.) — ad performance measurement. We also use Matomo hosted on our own server (stat.brx24.pl) in cookieless mode for anonymous visit statistics. You can change your consent at any time in the cookie settings available on the site and in your browser settings.
This policy applies from 13 October 2026.