§ 1 General Information

§ 2 Personal data administrator

§ 3 Data collection and the purpose of their processing

§ 4 Categories of personal data

§ 5 Recipients of personal data

§ 6 Archiving of personal data

§ 7 Permissions, accessing and updating personal data, complaints

§ 8 Data processing in an automated manner, cookies policy

§ 9 Changes to the Privacy Policy


  1. The Website's privacy policy does not constitute a source of obligations for the Visitor (including the Guest) and the Customer of the Website. It is informative, it is not a contract or regulation.

  1. All expressions and words written with a capital letter (eg Website, Website, Customer, etc.) should be understood in accordance with the Regulations.

  1. In the event of any discrepancies between this Privacy Policy and consents to the processing of personal data provided by a natural person, the legal basis for determining the scope of the Administrator's activities are voluntarily expressed consents or legal provisions that apply to a given factual situation.


  1. The administrator of your personal data is Kacper Marczak, operating under the company 3D Render Kacper Marczak, NIP: 9532672650, Regon: 364589090, address: ul. Krańcowa 62, office 28, 61-036 Poznań, (hereinafter: the Administrator).

  1. In all matters related to the protection of personal data, please contact us at the address indicated above or via the e-mail address: contact@grabbed.eu.

  1. You can also send a request to the provided address to provide information about what personal data we have about you and for what purposes we process it.

  1. The administrator informs that he stores correspondence for statistical purposes and to improve the help system in the field of GDPR, as well as in the field of complaint settlements. Addresses and data collected in this way will not be used for communication for purposes other than the implementation of the application, in particular they will not be used for marketing purposes and transferred to third parties.

  1. In the event of contact with the Administrator in order to perform specific actions (e.g. filing a complaint, withdrawal from the Agreement), the Administrator may again request the person to provide data, including personal data, e.g. in the form of name, surname, e-mail address. in order to confirm its identity and enable return contact in a given case and perform the requested action. Providing this data is not obligatory, but it may be necessary to perform activities or obtain information that is of interest to a given person.

  1. If you have given additional consent to our use of cookies, our trusted partners may also be the data controllers obtained on the basis of your activity on the Internet.


  1. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, ( hereinafter: GDPR) and other currently applicable provisions of the law on the protection of personal data, at the time of processing certain data.

  1. Pursuant to the content of the aforementioned legal acts, personal data is considered information about an identified or identifiable natural person. An identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific physical, physiological, genetic, mental factors, the economic, cultural or social identity of a natural person.

  1. We ensure that the data obtained from you is confidential, secure and processed only when it is necessary. We process data in accordance with the law, in a fair and transparent manner for the data subject. We process only such data and only with such content that is necessary due to the legitimate purpose, i.e. the reason for processing. Personal data is collected with due diligence and properly protected against access by unauthorized persons. We use appropriate and adequate security measures and the state of technical knowledge to protect personal data against accidental loss and unauthorized access, use, alteration or disclosure. We store personal data in a way that enables the identification of the data subject for no longer than it is necessary for the purposes for which the data is processed.

  1. The administrator obtains information about personal data in the following way:
  1. by making a purchase on the Website by the Customer;
  2. by registering a Customer Account;
  3. by voluntarily subscribing to the newsletter service;
  4. through voluntarily entered information in an e-mail or in the contact form;
  5. by sending a complaint, application, inquiry or letter of a different nature;
  6. through voluntarily entered information in an e-mail sent in connection with the desire to establish cooperation;
  7. through cookies, pixels or similar internet technologies.

  1. Please be advised that the purpose and scope of the data processed by the Administrator results from the consent of the Visitor to the Website or the Customer or the law, and in selected cases is further specified as a result of actions taken by these persons on the Website or as part of other communication channels.

  1. Providing personal data by the Visitor or the Website Customer is voluntary, but necessary in order to use certain functionalities of the Website (e.g. placing an Order by the Customer and its settlement, registration of a Customer Account or use of contact forms).

  1. Each time, the scope of the required data to conclude an appropriate contract is previously indicated on the Website (we mark the data the provision of which is necessary to conclude a contract / use a specific functionality), as part of other communication channels with the Visitor or Customer or in the Regulations. The consequence of not providing personal data may be the inability to effectively use the functionality of the Website, e.g. the inability to place an order.

  1. Your personal data is obtained by the Administrator for the following purpose:

Purpose of processing

Legal basis

A legitimate purpose, if any

Keeping statistics.

art. 6 ust. 1 lit. f RODO.

Having information about the statistics of our activities, which allows us to improve our business activities.

Conducting marketing activities of own products and services without the use of electronic communication means.

art. 6 ust. 1 lit. f RODO.

Conducting marketing activities promoting the conducted activity.

Conducting marketing activities of own products and services using electronic means of communication, including profiling.

art. 6 sec. 1 lit. f GDPR, but these activities due to other applicable provisions,

in particular, the Telecommunications Law and the Act on the provision of electronic services, are carried out only on the basis of the consents (Article 6 (1) (a) of the GDPR).

Conducting marketing activities promoting the conducted activity with the use of e-mail addresses. Presenting advertisements, adjusting discounts and promotions.

Handling of notifications sent using the contact form, e-mail messages, complaints and other requests.

art. 6 ust. 1 lit. a RODO;

art. 6 ust. 1 lit. c RODO.

Providing answers to requests and inquiries sent using the contact form or in another form, including storing sensitive requests and answers provided to maintain the principle of accountability. Handling applications, answering consumer complaints. Pursuing claims, including from third parties, defense by them.

Customer Account Service.

art. 6 ust. 1 lit. a RODO.

Conclusion and implementation of the Agreement for the Provision of Services (Account) or taking action at the request of the future Customer before its conclusion.

Conclusion and implementation of the Sales Agreement.

art. 6 ust. 1 lit. b RODO.

Conclusion and performance of the Agreement or taking action at the request of a future Client prior to its conclusion.

Archiving of sales documents.

art. 6 ust. 1 lit. c RODO.

Fulfilling legal obligations resulting from regulations, e.g. tax and accounting, especially in the case of paid contracts.

  1. In the case of an adult Customer or an adult Visitor of the Website, with his additional consent, Personal Data may also be processed for the purpose of presenting, creating, granting, and implementing advertisements, offers or promotions (discounts) dedicated to a given Customer regarding the Administrator's products or services and his partners, tailored to their preferences as much as possible (profiling), as a result of automated decision-making, which may have legal effects on them or similarly significantly affect them, e.g. through a short-term discount dedicated exclusively to such a person on a specific product, which recently browsed on our Website (option not available to people who are underage or are of legal age, but have not consented to such action).

  1. Newsletter. If you want to subscribe to our newsletter, you must provide us with your e-mail address via the newsletter subscription form. Providing data is voluntary, but necessary to use the newsletter service. Subscribing to the newsletter is also possible at the stage of creating a Customer Account.

The data provided to us when subscribing to the newsletter is used to send you a newsletter in which we inform you about the company's activities, the current collection, promotions and discounts. The legal basis for processing in this situation is your voluntary consent when subscribing to the newsletter.

In this case, your data is processed for the purpose of cyclical sending of the newsletter, and the basis for processing is art. 6 sec. 1 lit. a GDPR, i.e. your consent resulting from the willingness to receive the service.

The data will be processed for the duration of the newsletter, unless you unsubscribe earlier, which will permanently delete your data from the database. In addition, you can correct your data stored in the newsletter database at any time, as well as request their removal by resigning from receiving the newsletter. You also have the right to transfer the data contained in art. 20 GDPR.

The newsletter database is properly secured by the Administrator. In sent e-mails. There are links to hidden images (the so-called tracking pixel). In addition to its basic function, which is counting email openings, it is optionally also used to identify the customer and conduct marketing activities.

  1. E-mail contact. By contacting us via e-mail, you provide us with your e-mail address as the sender's address. In addition, you can also include other personal data in the text of the message. Providing data is voluntary, but necessary to contact us.

In this case, your data is processed in order to contact you, and the basis for processing is art. 6 sec. 1 lit. a GDPR, i.e. your consent resulting from your willingness to contact us. The legal basis for processing after the end of contact is the justified purpose of archiving correspondence for internal purposes (Article 6 (1) (c) of the GDPR).

The content of the correspondence may be archived and we are not able to clearly determine when it will be deleted, however, it will not be longer than 5 years. You have the right to request a history of correspondence with us (if it was subject to archiving), as well as request its removal, unless its archiving is justified due to our overriding interests.

  1. Customer account. By creating a Customer Account on our Website, you provide us with your e-mail address, name and surname. It is voluntary, but necessary for the successful registration of a Customer Account.

In this case, your data is processed in order to maintain a Customer Account, and the basis for processing is art. 6 sec. 1 lit. a GDPR, i.e. your consent resulting from the will to establish it.

The data will be processed as long as you have a Customer Account, unless you ask for its deletion in advance, which will delete your data from the database.

You can rectify your data assigned to the Customer Account at any time, as well as request their removal. You also have the right to transfer the data contained in art. 20 GDPR.

As part of creating a Customer Account, you can - but you do not have to - agree to subscribe to the newsletter service.


  1. The personal data administrator may process the following categories of personal data:
  1. personal data provided in the form when registering a Customer Account, placing Orders on the Website, in particular: name and surname, e-mail address;
  2. personal data supplemented by the user when using the Customer Account, in particular: name and surname; e-mail adress; home address [street, house number, apartment number, postal code, city, country], and in the case of non-consumer customers, additionally the company name and tax identification number [NIP];
  3. personal data necessary to place an order, in particular: name and surname; e-mail adress; home address [street, house number, apartment number, postal code, city, country], and in the case of non-consumer customers, additionally the company name and tax identification number [NIP];
  4. personal data provided in order to use the newsletter, provided when using the contact form, sent via e-mail; whether provided when submitting complaints, complaints or requests, in particular: name and surname; e-mail adress; contact telephone number; address [street, house number, apartment number, zip code, city, country], bank account number;
  5. personal data provided in order to participate in competitions / promotional campaigns: name and surname; e-mail adress; contact telephone number; address of residence [street, house number, apartment number, zip code, city, country];
  6. other data, in particular obtained based on the Customer's activity on the Internet, including those obtained through the Website or other communication channels with the Customer, using cookies and similar technologies.


  1. Your personal data may be processed by our partners and subcontractors, i.e. entities whose services we use to process data and provide services to you. To the best of our knowledge, all entities entrusted with the processing of personal data guarantee the application of appropriate measures for the protection and security of personal data required by law.

  1. state authorities or other entities authorized under the law, in order to perform our obligations;
  2. The Administrator's partners may participate in the processing of personal data to a limited extent, in particular who technically help to efficiently run the Online Store (e.g. they support us in sending e-mails, and in the case of advertising activities - also in marketing campaigns), hosting service providers or services ICT, entities handling electronic payments or payment by credit card on the Website, companies that service the software, support the Administrator in marketing campaigns, as well as providers of legal and advisory services and external accounting;
  3. in addition, we may share fully anonymised data (such that cannot identify you) with entities with whom we cooperate.

  1. As part of marketing (advertising) activities, the Administrator uses the services of third parties that use cookies, pixels or marketing functions similar to cookies on the Website. The catalog of these entities is indicated in detail in § 8 of this Policy.

  1. Our suppliers are based mainly in Poland or other countries of the European Economic Area (EEA), and, for example, in the case of Google Analytics, they are based outside the EEA. Due to the judgment of the CJEU Schrems II (C-311/18), we have enabled the anonymization of your IP numbers - we do not transfer this data to the USA. The other data sent to Google does not have the characteristics of personal data, i.e. it is not possible to identify a specific natural person on its basis.


  1. The administrator will only store your personal data for as long as it is necessary for the purposes set out in this Privacy Policy and / or to meet legal and regulatory requirements. After this period, the Administrator will safely delete your personal data.

  1. We store the data for the periods indicated below:

Data related to the sales procedure.

5 years.

Data for marketing purposes.

In the case of data processing on the basis of consent - until its withdrawal.

In the case of data processing on the basis of a legitimate purpose - until an objection is raised.

Data provided using the contact form, e-mail.

For a period of 3 years in order to comply with the principle of accountability.

Personal data related to cookies and similar functions.

Until these files are deleted using the website / browser / device settings (while deleting files is not always the same as deleting Personal Data obtained through these files - then personal data will be deleted until an objection is raised).

Data provided during the complaint procedure and other procedures related to the Customer's claims.

5 years.

The remaining data category (with the exception of cookie data, more about that in our Cookie Policy).

5 years.

  1. In each case, personal data will also be stored when the law (e.g. accounting or tax regulations) obliges the Administrator to process them; we will store personal data longer in the event that the Customer has any claims against the Administrator, in order to pursue claims by the Administrator, or to assert or defend against claims of third parties, for the period of limitation specified by law, in particular the Civil Code.

  1. Depending on the scope of personal data and the purposes of their processing, they may therefore be stored for a different period. In each case, the longer period of storage of personal data is decisive.


Pursuant to Art. 15 GDPR, you have the right to obtain information from the Personal Data Administrator as to whether your personal data is being processed.

If the Administrator processes your personal data, then you have the right to:

  1. access to personal data;
  2. obtain information about the purposes of processing, categories of personal data being processed, about the recipients or categories of recipients of this data, the planned period of storage of your data or about the criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint with the supervisory authority, about the source of these data data, about automated decision-making, including profiling, and about the security measures used in connection with the transfer of such data outside the European Union;
  3. obtain a copy of your personal data.

In addition, you can ask for the rectification of personal data (Article 16 of the GDPR), the deletion of personal data (Article 17 of the GDPR), object to the processing of personal data (Article 21 of the GDPR) and, if technically feasible, request personal data of another organization (Article 20 of the GDPR).

In connection with the right to be forgotten, the Administrator will update or delete your data, unless it has a legal obligation to keep it for the purposes of conducting business or complying with the law. In some cases, you have the right to request the restriction of the processing of your personal data (Article 18 of the GDPR). You can also contact the Administrator if you have any reservations about the method of collecting, storing or using your personal data.

The administrator tries to immediately consider all requests regarding the above-mentioned operations on your personal data, but no later than within 30 days from the receipt of the request. Due to the complex nature of the request, the Administrator has the right to consider your requests within 30 days, of which he will inform the User in advance.

The controller endeavors to finally investigate the complaints, but if you are still dissatisfied with the response received, you can lodge a complaint with the data protection supervisory authority of the local data protection authority. In Poland, the supervisory body within the meaning of the GDPR is the President of the Personal Data Protection Office.



  1. Our Website, like almost all other websites, uses cookies. The cookie policy applies to both Website Customers and Visitors to the Online Store, i.e. users who browse the Store's content but do not make purchases.
  2. The cookie policy is a document that is an integral part of this Privacy Policy. The content of the Cookies Policy is available here.
  3. The website also uses functionalities similar to cookies. Therefore, individual provisions of the Cookie Policy should also be applied accordingly to these technologies.
  4. The selected cookies process your personal data. The processing of personal data from cookies or similar technologies on our Website is carried out for the purposes of ensuring the functioning of the Website, adapting the Website to the preferences of the Visitor and the Customer, or for analytical purposes. Processing is based on our legitimate interest. The legal basis for the processing of personal data for advertising purposes and connecting with social media will be your additional consent, expressed by making a selection and checking the checkbox during the process of consenting to cookies.
  5. When a Visitor uses the Website, cookies are used to identify their browser or device - cookies collect various types of information, which, as a rule, does not constitute personal data. Some information, depending on their content and method of use, may, however, be associated with a specific person - assigning certain behaviors to a specific Visitor or Customer, e.g. by linking them to the data provided when registering an Account on the Website, or a specific e-mail address - and thus be considered personal data.
  6. In relation to information collected by cookies that may be associated with a specific person, the provisions of the Website's Privacy Policy relating to personal data, in particular regarding the rights of the data subject, apply.


  1. These principles of the Privacy Policy 1.0. valid from 01/06/2022.
  2. The Administrator declares that he has the right to amend this document for important reasons, including:
  1. changes in applicable regulations, in particular in the field of GDPR, telecommunications law, services provided electronically and regulating consumer rights, affecting the rights and obligations of the Administrator or the rights and obligations of the data subject;
  2. development of electronic functionalities or services caused by the advancement of internet technology, including the implementation of new IT, technological or technical solutions on the Website, affecting the scope of this Privacy Policy.

  1. The Administrator undertakes to inform the Users about any changes in advance, allowing them to read the content of the changed document, e.g. by placing the consolidated text of the Privacy Policy on the home page of the Website.

  1. In the case of users using the newsletter function, if the Administrator makes fundamental changes to the content of the Privacy Policy, then he will inform Users about them via e-mail. In the event of any objections to the amendment of this document, the person subscribed to the newsletter has the right to stop using the newsletter by sending a request to unsubscribe from the newsletter or by requesting the removal of his personal data.

Download Private Policy PDF version

Download Cookies PDF version PL

Download Cookies PDF version ENGLISH