Privacy Policy
Effective from: 14 November 2026
1. Who is the controller
The controller of your personal data is BZB UAS sp. z o.o., registered in Wrocław, Poland:
- address: ul. Międzyleska 84, 50-514 Wrocław, Poland;
- entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0000661419 by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the KRS;
- tax ID (NIP) 8943095656, REGON 366484052.
We refer to it below as "BZB UAS" or "we".
This policy covers data processed when you use www.bzbuas.com, including the online shop, contact forms and customer account.
2. How to contact us about personal data
- e-mail: sales@bzbuas.com
- phone: +48 507 265 115
- postal address: as above
3. What data we process, why and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating and maintaining a customer account | e-mail, name, password (encrypted), address details, phone | Art. 6(1)(b) – contract for the account service |
| Accepting and fulfilling orders, delivery, complaints and returns | name, company name and VAT number (business customers), delivery and billing address, e-mail, phone, order details | Art. 6(1)(b) – sales contract |
| Payments | order details and data needed by the payment operator | Art. 6(1)(b) |
| Invoicing, accounting and tax obligations | data on invoices and sales documents | Art. 6(1)(c) – legal obligation |
| Answering enquiries, preparing quotes and arranging meetings (forms, e-mail, phone) | data provided in the enquiry | Art. 6(1)(b) (steps prior to a contract) or (f) (legitimate interest: responding to your enquiry) |
| Newsletter | Art. 6(1)(a) – consent | |
| Information about our products and services for existing customers | e-mail, order history | Art. 6(1)(f) – marketing of our own products; e-mails only with consent where required by law |
| Security of the website and forms, protection against spam and abuse | IP address, device and browser data, server logs | Art. 6(1)(f) |
| Website usage statistics | cookie identifiers, information about pages visited and device | Art. 6(1)(a) – consent (statistics cookies) |
| Advertising and measuring ad performance | cookie and advertising identifiers, information about visits and purchases | Art. 6(1)(a) – consent (marketing cookies) |
| Establishing, exercising or defending legal claims | data needed in the given case | Art. 6(1)(f) |
Providing data is voluntary. Without the data marked as required in our forms, we cannot create an account, fulfil an order or answer an enquiry.
We do not make decisions based solely on automated processing that produce legal effects for you. If you consent to marketing cookies, our advertising partners may tailor the ads you see to your interests.
4. Cookies and similar technologies
We use cookies and similar technologies, such as browser storage. We group them into categories:
- Essential: needed for the website and shop to work, e.g. session, cart, login, selected language, record of your consent choices, form protection. They do not require consent.
- Functional: remember your settings and make the site easier to use, e.g. recently viewed products.
- Statistics: Google Analytics 4 and Microsoft Clarity. They help us understand how the website is used.
- Marketing: Google Ads (conversion measurement and remarketing). It is used to show and measure ads, including on other websites.
We use functional, statistics and marketing cookies only with your consent. You give consent in the banner on your first visit. You can change or withdraw it at any time using the cookie settings icon in the bottom-left corner of the page. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. The full list of cookies, with retention periods, is available in the banner settings.
Google Consent Mode. If you do not consent, Google tools do not set cookies, but they may send Google signals without cookie identifiers, e.g. that a page was viewed and that consent was not given. Google uses them in aggregated form to estimate statistics.
Google Ads enhanced conversions. We do not currently use them (switched off on 14 November 2026). If we turn them on again, we will update this policy before they start.
Consents are collected and recorded by GetTerms. It stores the consent ID, the chosen categories and the date of your choice, so that we can demonstrate that consent was obtained.
5. Content embedded from other services
Some pages include content embedded from other services: YouTube videos, LinkedIn posts, Sketchfab 3D models and Google Maps. When such content is displayed, its provider may set cookies and process data, such as your IP address, under its own privacy policy.
6. Who receives your data
Your data may be received by:
- service providers processing data on our behalf:
- Odoo S.A. – sales system and website hosting;
- Cloudflare – security and form protection;
- GetTerms – consent management;
- Google and Microsoft (Clarity) – for statistics and marketing tools;
- PRONICOM, Rawicz – data storage on servers;
- Biuro Rachunkowe Małgorzata Szczeszek Mizgała, Wrocław – accounting services;
- e-mail and IT service providers;
- courier companies delivering orders: DHL, InPost, UPS;
- payment operators: mBank S.A. (Paynow), PayU S.A.;
- entities acting partly as separate controllers: Google Ireland Limited, LinkedIn Ireland Unlimited Company, Microsoft Ireland Operations Limited and providers of embedded content;
- public authorities, where required by law;
- legal and tax advisers, to the extent necessary.
7. Transfers outside the European Economic Area
Some providers may process data outside the EEA:
- Google, Microsoft, LinkedIn and Cloudflare – including in the United States;
- GetTerms – in Australia and Singapore (records of your consent choices).
Such transfers are based on the European Commission's adequacy decision (EU-US Data Privacy Framework) for certified companies, or on standard contractual clauses approved by the European Commission. You can request a copy of these safeguards at sales@bzbuas.com.
8. How long we keep data
- Customer account: until it is deleted, then for the limitation period for claims.
- Orders: for the duration of the contract, then until the limitation periods for claims expire.
- Accounting documents: 5 years from the end of the calendar year in which the tax payment deadline passed.
- Enquiries and correspondence: up to 12 months from the last contact, unless a contract is concluded.
- Data processed on the basis of consent: until consent is withdrawn.
- Statistics in Google Analytics 4: 14 months.
- Cookies: for the periods shown in the banner settings.
9. Your rights
You have the right to:
- access your data and receive a copy;
- have your data rectified;
- have your data erased;
- restrict processing;
- data portability;
- object to processing based on legitimate interest, including at any time to direct marketing;
- withdraw consent at any time.
To exercise your rights, write to sales@bzbuas.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
10. Changes to this policy
We may update this policy, e.g. when our tools or the law change. The current version, with its effective date, is always available on this page.