Legal

Privacy Notice

Version 1.0 — effective 27 August 2026 · GDPR / Art. 13

1Controller

2What we collect and why

• Contact form / e-mail inquiries — name, company, e-mail, message: to answer your inquiry and prepare an offer (Art. 6(1)(b) and (f) GDPR). Kept up to 24 months after last contact.
• Contract performance — contact and company data of partner representatives: to perform B2B agreements and meet accounting duties (Art. 6(1)(b), (c)). Kept for the contract term + statutory retention (up to 5–10 years for tax records).
• Server logs — IP address, timestamps, user agent: security and abuse prevention (Art. 6(1)(f)). Kept up to 30 days.

We do not use tracking cookies or advertising networks. No decisions are made by automated profiling with legal effect.

3Recipients

Data may be shared with: hosting and e-mail providers (EU), logistics and customs partners (as needed to ship your goods), and accountants — each bound by data-processing agreements.

4Transfers outside the EEA

Where cooperation requires sharing data with a manufacturer outside the EEA (e.g. China), we rely on GDPR Art. 46 instruments (standard contractual clauses) or another valid transfer mechanism.

5Your rights

• Access, rectification, erasure, restriction, portability, objection — write to info@brillobulido.pl;
• Complaint to the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw;
• You are not obliged to provide data, but without an e-mail address we cannot reply.

6AI-assisted communication

First-line replies may be drafted or handled by AI agents under our supervision. Messages you send are used solely to answer them — not to train external models.