From May 25, 2018, the new General Data Protection Regulation (GDPR) has been in force across the European Union. In this document, we describe the services we provide and explain how we protect your privacy. We also inform you about how you can exercise your rights regarding the data we have collected.


  1. Data Controller

PW Brat Piotr Barlik with its registered office in Bydgoszcz, postal code: 85-461, ul. Ołowiana 10, entered into the National Court Register kept by the District Court in Bydgoszcz, which has NIP: 5540159793 and REGON: 090276350. The Administrator processes data based on Art. 26, sec. 1 of the GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC - General Data Protection Regulation.


  1. General principles of personal data processing

We store your personal data within the European Economic Area (EEA). They may also be transferred outside this area and processed there. Whenever we transfer data, we do so in accordance with applicable law. If we transfer data outside the EEA, we apply Standard Contractual Clauses and Privacy Shield to protect this data outside the EEA. Only entities managing your data have access to it. This means that we never share your data for marketing purposes, sell it, or use it to exchange data with other external entities. We transfer your data to selected external entities only when providing services we have defined, and only to the extent that we can entrust them with processing based on agreements signed by us. You can find detailed information about these external entities below. We process your personal data based on a contract. Its template can be found in the General Terms and Conditions. We process your data only to the extent necessary to properly provide the service we offer you. Sometimes, for example, to tailor the service to your needs, we may ask you for additional data. Your consent to this is, of course, voluntary. You can withdraw any consent you give us.

Whenever we update the Privacy Policy, we will post the latest version on our website in the Privacy Policy section.


  1. Your rights under GDPR

Right of access to data At any time, you have the right to check which of your personal data we store. To do this, you can write to us at abi@brat.com.pl or call us at 607508189. We will provide you with this information in an email message.

Right to data portability When we process your personal data based on your consent or a contract with you in an automated way, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format. We can send this copy to you or to another entity that will subsequently process this data. Remember that this only applies to personal data that we have from you.

Right to rectify data You have the right to correct or supplement your personal data by contacting the administrator by phone or email at abi@brat.com.pl or 607508189.

Right to erasure of data You have the right to delete your personal data that we process at any time.

Right to object to processing based on legitimate interest You also have the right to object to the processing of your data to the extent that we do so, when we and other data controllers have a legitimate interest. We will then stop processing your personal data. We will not do this if, in accordance with the law, your interest or rights are invalidated, or if legal claims are made against you. In such a situation, we will inform you about it.

Right to refuse consent to direct marketing You have the right to refuse to receive direct marketing materials by email.

To opt out of receiving direct marketing materials, simply contact the administrator at abi@brat.com.pl or 607508189

Right to restrict the processing of personal data You have the right to request that we restrict the processing of your personal data when: you do not agree for us to process data based on a legitimate interest of the entities jointly managing your data. We will limit the processing of data after checking if there is such a legitimate interest; you report that your personal data is incorrect. We will limit the processing of data until we check their correctness; processing of data is unlawful. Then you can refuse to delete personal data and instead demand that we restrict the use of your personal data; we no longer need your personal data, but they are required to submit or defend a claim.

Right to lodge a complaint with a supervisory authority If you believe that we are processing your personal data incorrectly, please contact us. You also have the right to lodge a complaint with the supervisory authority.

How can you exercise your rights? If you want to learn more about how we ensure the security of your personal data and how you can exercise your rights, write to us at abi@brat.com.pl or call 607508189.

Data Protection Officer To ensure faithful, transparent, and lawful processing of your personal data, we have appointed a Data Protection Officer. To contact him, send an email to: ado@brat.com.pl.


  1. Use of data in the purchasing process

We use your personal data to manage online purchases made at brat.com.pl. We need this data to process your orders and returns, send you notifications about the status of product delivery, and resolve any related issues. We also use your personal data when managing your payments and processing complaints and warranty claims regarding products ordered by you. With the help of personal data, we obtain information necessary to finalize the purchasing process. Based on them, we can identify you and determine the delivery address.

What personal data do we process? We will process the following personal data: name, address, email address, phone number, VAT ID.

Who has access to your personal data? We transfer your personal data to external entities only to manage online purchases made by you. They are received only by: companies processing your address; communication agencies sending order confirmations; warehouses and courier companies delivering orders; companies processing payments. What is the purpose of processing your personal data? We process your data to provide you with services and deliver your orders.

How long do we keep your data? We will keep your data for the purposes of direct marketing until you withdraw your consent. We will send you commercial information by email until we consider you an inactive customer. We will do this if you have not opened any emails from us for three years. Then we will delete your personal data from our database.


  1. Use of data in marketing

We use your personal data to provide you with information and marketing offers: by email; by SMS; by phone; using PUSH notifications; by traditional mail.

We process the following personal data: contact details: email address, phone number, and postal code; demographic data; information about the services you use and products you add to or remove from your shopping cart. If you have an account in our online store or B2B platform, we will also process your personal data provided to us in connection with this account, including: name and surname; address; demographic data; purchase history; navigation method on the site and clicked elements.

Who has access to your personal data? 

Qualified employees of PW Brat Piotr Barlik who have detailed knowledge in this area to carry out marketing activities have access to your personal data. We never share your personal data for marketing purposes, sell them, or use them to exchange data with other external entities.

On what legal basis do we process your personal data?

We process your personal data based on your consent to receive marketing information. We send you this type of information when we have a legitimate interest in it. An exception is materials that we send by traditional mail, such as catalogs.

Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data and receiving marketing information at any time. When you do so, we will immediately stop processing your data for marketing purposes and sending you any marketing offers.

To opt out of receiving marketing information, simply contact the administrator by email or phone at abi@brat.com.pl or 607508189.

How long do we keep your data?

We will keep your data for direct marketing purposes until you withdraw your consent. We will send you commercial information by email until we consider you an inactive customer. We will do this if you have not opened any emails from us for three years. Then we will delete your personal data from our database.