Privacy policy

Data controller

The controller of your personal data is B1X sp. z o.o., pl. Wolności 13/2, 35-073 Rzeszów, Poland, KRS 0000779434, e-mail: b1x.gate@gmail.com.

What data and why

Orders: name, delivery address, e-mail, phone number and payment data processed by Stripe. Basis: performance of a contract (art. 6(1)(b) GDPR) and tax obligations (art. 6(1)(c)).

Newsletter: e-mail address. Basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time.

Online game: user account and gameplay data processed in Google Firebase services under the game’s terms.

Recipients

Stripe Payments Europe, Ltd. (payments), Google Ireland Ltd. (Firebase: hosting, database, authentication; Google Analytics, only with your consent), courier companies (delivery). Data may be transferred outside the EEA only under standard contractual clauses.

Retention

Order data is kept for the period required by tax law (5 years from the end of the year the order was placed). Newsletter data until consent is withdrawn.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to lodge a complaint with the Polish Data Protection Authority (UODO).

Cookies

The site uses strictly necessary storage (cart saved in your browser, your consent choice, admin sign-in session) and, only with your consent, Google Analytics 4 (Google Ireland Ltd.) for visit statistics: pages viewed, clicks, video plays, add-to-cart and purchases. IP addresses are anonymised, data is not used for advertising, and identifiers are kept for up to 14 months. Without consent the Google Analytics script is not loaded at all.

You can give or withdraw consent at any time via “Cookie settings” in the page footer. Embedded YouTube videos load only after you click, in privacy-enhanced mode.