Skip to content

The privacy of the online store


The owner of the personal data collected through the online store is B&W SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, registered with the Registrar of Companies at the DISTRICT COURT FOR KRAKOW ŚRÓDMIEŚCIE IN KRAKOW, XII ECONOMIC DEPARTMENT OF THE NATIONAL BUSINESS REGISTER under the number KRS:

0000772290. Share capital: 280 000.00 ZŁ. Registered office and address for communications: ul. Słowackiego 4D/2, 34-120 Andrychów, NIP: 5512638820, REGON: 382600445, email address:, phone number: +48 506 175 899, hereinafter referred to as “Holder” and simultaneously as “Service Provider.”

Personal data collected by the Owner through the website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR. Any terms or expressions written in this Privacy Policy in capital letters should be interpreted in accordance with their definition in the Regulations of the online store


PURPOSE OF PROCESSING AND LEGAL BASIS. The Holder processes personal data of the Users of the store In case of: registration of the Account in the Shop to create an individual account and manage such Account on the basis of Article 6, Paragraph 1, letter b) of the GDPR (execution of a contract for the provision of services by means of electronic communication in accordance with the Rules of the Shop), submission of an Order in the Shop to execute a Contract of Sale on the basis of Article 6, paragraph 1(b) of the GDPR (execution of a Contract of Sale), use of the Opinion System to enable the Customer to express his/her opinion on the Product purchased in the Shop and the Contract of Sale concluded with the Seller on the basis of Article 6(1)(f) of the GDPR (legitimate interest of the entrepreneur).

TYPE OF PERSONAL DATA PROCESSED. The User provides in case of: Account: email address, Orders: full name, address, PIN, email address, phone number, Opinion System: full name, email address.

STORAGE PERIOD OF PERSONAL DATA. Users’ personal data are stored by the Owner:

in case the legal basis of data processing is the performance of a contract, for as long as necessary for the performance of the contract, and thereafter for a period corresponding to the period of prescription of rights. If a special provision does not provide otherwise, the limitation period is six years, and for rights to periodic benefits and rights related to the conduct of business-three years,

in case the legal basis for data processing is consent, until consent is withdrawn, and thereafter after consent is withdrawn for a period corresponding to the period of prescription of the rights that the Controller can assert and that can be asserted against it. If a special provision does not provide otherwise, the limitation period is six years, and for rights to periodic benefits and rights related to the conduct of business-three years.

During the use of the Store, additional information may be collected, in particular: the IP address assigned to the User’s computer or the Internet service provider’s external IP address, domain name, browser type, access time, operating system type.

After giving separate consent on the basis of Article 6(1)(a) of the GDPR, the data may also be processed to send commercial information by e-mail or make telephone calls for direct marketing – respectively in relation to Article 10(2) of the Law of July 18, 2002 on Information Society Services or Article 172(1) of the Law of July 16, 2004 – Telecommunications Law, including those sent as a result of profiling, if the User has given consent.

Users may also be subject to the collection of browsing data, including information about links and links they choose to click on or other actions taken in the Store. The legal basis for this type of activity is the legitimate interest of the Owner (Article 6(1)(f) of the GDPR), which is to facilitate the use of electronically rendered services and improve their functionality. The provision of personal data by the User is optional.

The Controller pays special attention to the protection of the interests of the data subjects and in particular ensures that the data collected by him are:

legally treated,

collected for specific, legitimate purposes and not further processed in a manner incompatible with those purposes,

correct and appropriate for the purposes for which they are processed and kept in a form which permits the identification of the persons to whom they relate, no longer than is necessary to achieve the purposes of the processing.


Users’ personal data are disclosed to service providers that the Owner uses to operate the Store, specifically to:

Parties who make delivery of the Products,

Payment system providers,

Providers of opinion survey systems,

accounting office,

hosting provider,

provider of business management software,

entities that provide mail systems,

Provider of software for the operation of the online store.

Service providers (referred to in item 1 of this paragraph), to whom personal data are disclosed, according to contractual agreements and circumstances, are subject to the orders of the Controller regarding the purpose and manner of processing of such data (controller subjects) or independently determine the purpose and manner of processing (administrators).

Users’ personal data are stored exclusively in the European Economic Area (EEA), except for § 5 point 5 and § 6 of the Privacy Policy.


The data subject has the right to access his or her personal data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object, and the right to withdraw consent at any time without prejudice to the lawfulness of processing based on consent before its withdrawal.

The legal basis of User requests:

data access – Article 15 of the GDPR,

rectification of data – Article 16 of the GDPR,

Deletion of data (right to be forgotten) – Article 17 of the GDPR,

limitation of processing – Article 18 of the GDPR,

Data portability – Article 20 of the GDPR,

opposition – Article 21 of the GDPR,

Revocation of consent – Article 7(3) of the GDPR.

To exercise your rights under 2, you can send an appropriate email to: In the event of the User’s exercise of a right arising from the above-mentioned rights, the Owner shall comply with the request or refuse to comply with it immediately, but no later than one month after its receipt. However, if – due to the complex nature of the request or the number of requests – the Owner cannot fulfill the request within one month, it will fulfill the request within the next two months, informing the User in advance within one month of receiving the request – of the intention to extend the deadline and its reasons. If the data subject finds that the processing of personal data violates the provisions of the GDPR, he or she has the right to file a complaint with the President of the Office for Personal Data Protection.


The Owner’s website uses cookies.

The installation of cookies is necessary to properly provide the services on the Shop website. Cookies contain information necessary for the proper functioning of the site, as well as the ability to develop general statistics about visits to the website.

Two types of cookies are used in the context of the website: “session” and “persistent”.

“Session” cookies are temporary files stored in the User’s terminal device until the User logs out (leaves the site),

“Persistent” cookies are files stored in the User’s terminal device for the time specified in the cookie parameters or until they are deleted by the User.

The Owner uses its own cookies to better understand Users’ interaction with site content. Cookies collect information about Users’ use of the website, the type of site from which the User was redirected, and the number of visits and time spent by the User on the website. This information does not record specific personal data about the User, but is used to develop statistics about the use of the site.

The Owner also uses external cookies to collect general and anonymous statistical data through the analytical tools of Google Analytics (external cookie provider: Google LLC. based in the United States).

Cookies may also be used by advertising networks (particularly the Google network) to show advertisements in line with the way the User uses the Store. To this end, they may store information about the User’s navigation path or time spent on a particular page.

You have the right to decide on access to cookies on your computer by:

selecting the types of cookies you agree to collect shortly after you log in to the Store and the cookie message appears,

by changing the settings in your browser window. Detailed information on the possibilities and methods of cookie management is also available in the software settings (web browser).


So-called social media plug-ins (“plug-ins”) from social networks are used in the Store. By viewing the website, which contains such a plug-in, the User’s browser will establish a direct connection to the servers of Facebook, Instagram, Twitter and YouTube.

Plug-in content is transmitted directly from the service provider to the User’s browser and integrated into the site. Through this integration, service providers receive information about whether the User’s browser has viewed the website, even if the User does not have a profile with the service provider or is not currently connected to it. This information (along with the User’s IP address) is transmitted directly from the browser to the service provider’s servers (some of which are located in the United States) and stored there.

If the User accesses one of the above services while visiting the Store or already has an account with one of them, the service provider may associate the visit to the Store with his/her account with the service provider. If the User interacts with plug-ins, such as by clicking the “Like” button or leaving a comment, relevant information is transmitted directly from the User’s browser to the service provider’s servers and stored there. Detailed information on the scope and type of personal data processing carried out by service providers, as well as the rights and options available to protect Users’ privacy in this area are contained in the privacy policies of individual service providers.

To enhance the interaction between the Store and the User, the Store uses Local Storage technology, which consists of local storage of HTML5 data in the User’s browser. The Local Storage feature allows you to store session data and customize the website to your individual needs.

The Shop also uses the functionality of the Google Maps plug-in to display interactive maps directly on the website. By using this feature, the User’s browser will establish a direct connection to Google’s servers.

Using such services involves transmitting your IP address to the service provider. In addition, the service provider may set its own cookies on the User’s device. The Owner has no influence on the data collection practices of these service providers.


This Privacy Policy is subject to change. Any changes in the privacy policy will be communicated to Users by updating the Privacy Policy posted in the Shop

The Privacy Policy will go into effect on 01.01.2024.