Privacy Policy

Privacy Policy of the GrillBastards Online Shop grillbastards.pl

Last updated: 9 September 2026

This Privacy Policy explains how we collect, use, store and protect your personal data when you use the GrillBastards online shop available at www.grillbastards.pl (the “Shop”).

1. Data Controller

The controller of your personal data is:Kacper Leon Czechowski-Salzman trading under the business name SALZMAN MUSIC KACPER CZECHOWSKI-SALZMAN entered in the Central Register and Information on Economic Activity (CEIDG) maintained by the minister responsible for the economy, NIP: 1230527912 REGON: 142168666 Address: ul. Wiejska 54C, 05-509 Józefosław, Poland

If you have any questions about the processing of your personal data, please contact us by email at: grillbastards@gmail.com (mailto:grillbastards@gmail.com)

2. What personal data do we process?

We may process the following categories of personal data:

identification data (name, surname), contact data (email address, telephone number, delivery address), order and transaction data (order history, payment details – we do not store full card numbers), data necessary for accounting and tax purposes, technical data (IP address, browser type, device information, cookies – see section 8), any other data you voluntarily provide when contacting us.

3. Purposes and legal bases for processing

We process your personal data for the following purposes and on the following legal bases (Article 6 GDPR):Purpose Legal basis Conclusion and performance of a sales contract (order processing, delivery, payment handling) Art. 6(1)(b) GDPR – performance of a contract Fulfilment of legal obligations (accounting, tax, consumer rights) Art. 6(1)(c) GDPR – legal obligation Handling complaints, returns and withdrawal from the contract Art. 6(1)(b) and (c) GDPR Establishing, exercising or defending legal claims Art. 6(1)(f) GDPR – legitimate interest Responding to your enquiries and correspondence Art. 6(1)(b) or (f) GDPR Analytical and statistical purposes related to the functioning of the Shop Art. 6(1)(f) GDPR – legitimate interest Marketing communication (if you have given consent) Art. 6(1)(a) GDPR – consent

4. Recipients of your data

Your personal data may be disclosed to the following categories of recipients:

payment service providers (e.g. PayU, Przelewy24, PayPal, Blue Media / Shoper Payments, etc.),

delivery and courier companies (e.g. InPost),

accounting and bookkeeping service providers,

IT and hosting providers,

legal and advisory service providers (when necessary), public authorities when required by law.

We only transfer data to entities that provide sufficient guarantees of data protection.

5. Data retention periods

We retain your personal data for no longer than is necessary:for the duration of the contract and the period required to handle any claims (generally up to 6 years from the end of the year in which the contract was performed), for the period required by accounting and tax law (usually 5 years), until you withdraw consent (where processing is based on consent), until you successfully object to processing based on legitimate interest, until the relevant limitation periods expire. After these periods the data is permanently deleted or anonymised.

6. Your rights

Under the GDPR you have the following rights:

Right of access – to obtain confirmation whether we process your data and to receive a copy of it,

Right to rectification – to correct inaccurate or incomplete data,

Right to erasure (“right to be forgotten”),

Right to restriction of processing,

Right to data portability,

Right to object to processing based on legitimate interest (Art. 6(1)(f) GDPR),

Right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

To exercise any of these rights, please contact us at: grillbastards@gmail.com 

You also have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO) ul. Stawki 2, 00-193 Warsaw, Poland https://uodo.gov.pl7.

Voluntary nature of providing dataProviding personal data is voluntary, but necessary to conclude and perform a contract in the Shop. Failure to provide the required data will make it impossible to place and fulfil an order.

8.Cookies and similar technologies

The Shop uses cookies and similar technologies. Detailed information about the cookies we use, their purposes and how you can manage them can be found in our separate Cookie Policy (or in the cookie banner on the website).

9. Transfers of data outside the European Economic Area

As a rule, we do not transfer your personal data outside the European Economic Area. If such a transfer becomes necessary (e.g. through certain payment or analytical service providers), it will take place only on the basis of appropriate safeguards required by the GDPR (e.g. Standard Contractual Clauses).

10. Automated decision-making and profilingWe do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on the Shop’s website. Significant changes will be communicated in an appropriate manner (e.g. by email or a notice in the Shop).If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at: grillbastards@gmail.com