Informații juridice

Privacy Policy

Last updated: August 2026

1. Data Controller

The controller of your personal data is Gala BBG Sp. z o.o., based in Poland.

Contact: sklep@galabbg.pl, phone +48 533 144 044.

2. Scope of Data Collected

We collect personal data only to the extent necessary to provide our services:

• Contact information (name, surname, email, phone) — in contact forms and orders

• Technical data (IP address, browser type) — automatically during website use

• Language preference data — "lang" cookie (strictly necessary)

3. Purposes of Data Processing

We process your data for the following purposes:

• Processing enquiries and orders

• Handling contact forms

• Ensuring proper functioning of the website

• Fulfilling legal obligations (e.g., maintaining accounting documentation)

4. Legal Basis for Processing

Data is processed based on:

• Art. 6(1)(a) GDPR — your consent

• Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures

• Art. 6(1)(c) GDPR — compliance with a legal obligation

• Art. 6(1)(f) GDPR — legitimate interest of the controller

5. Cookies

Our website uses only one cookie:

• "lang" cookie — remembers your selected language version (strictly necessary, SameSite=Lax)

We do not use analytical, advertising, or third-party cookies.

The website does not make any requests to external services — all resources (including the Inter font) are hosted locally.

6. Your Rights

You have the right to:

• Access your personal data

• Rectify inaccurate data

• Erase data ("right to be forgotten")

• Restrict processing

• Data portability

• Object to processing

• Withdraw consent at any time

• Lodge a complaint with the relevant supervisory authority

7. Data Retention Period

Personal data is stored for the period necessary to fulfil the purposes for which it was collected, and subsequently for the period required by law.

8. Data Security

We apply appropriate technical and organisational measures to ensure the security of processed personal data, including protection against unauthorised access, loss, or destruction.