Privacy Policy of Brandbusters.pl
Last updated: 24 September 2026
1. Data controller
The controller of personal data is BRANDBUSTERS Andrzej Dalkowski, ul. Hoża 86 lok. 410, 00-682 Warsaw, Poland, NIP (tax ID) 5342241809, REGON 527484932, hereinafter the “Controller”.
For matters relating to privacy and data processing, you can contact us:
- by email: kontakt@brandbusters.pl,
- by phone: +48 503 604 405,
- by post: ul. Hoża 86 lok. 410, 00-682 Warsaw, Poland.
2. What data may be processed
Depending on how you use the website, we may process:
- name and surname,
- company or organisation name,
- email address,
- phone number,
- the selected topic of conversation,
- the content of your message,
- your preferred way of being contacted,
- information provided while using the growth diagnostic, such as revenue range, the user's role and answers to questions,
- technical data, such as IP address, date and time of connection, device and browser type, requested URL and information recorded in server logs,
- other data provided voluntarily in correspondence or conversation.
We do not ask for special categories of personal data, such as information about health, beliefs, origin or private life. Please do not include such information in the forms.
3. Purposes and legal bases of processing
Data may be processed for the following purposes:
Handling enquiries and contact
We process data from the contact form, emails or phone calls in order to respond to an enquiry and continue the communication.
The legal basis is:
- Article 6(1)(b) GDPR — where the contact concerns taking steps prior to entering into a contract or performing a contract,
- Article 6(1)(f) GDPR — where the basis is the Controller's legitimate interest in communicating, responding to enquiries and building business relationships.
Growth diagnostic
Answers given in the diagnostic are used to prepare an indicative result and recommendations. If the user asks for the result to be sent to the email address provided, we process the data to fulfil that request.
The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, depending on the nature of the request.
Security and proper operation of the website
Technical data and logs may be processed to ensure security, detect abuse, diagnose errors and keep the website working properly.
The legal basis is Article 6(1)(f) GDPR — the Controller's legitimate interest in protecting the website, its users and infrastructure.
Establishing, pursuing or defending claims
Data relating to correspondence or cooperation may be retained where necessary to establish, pursue or defend claims.
The legal basis is Article 6(1)(f) GDPR.
Marketing requiring consent
If in future the website allows users to subscribe to a newsletter or consent to marketing communication, data will be processed only on the basis of separate, voluntary consent. Consent can be withdrawn at any time without affecting the lawfulness of earlier processing.
The current contact form does not automatically subscribe the user to a newsletter.
4. Growth diagnostic and automated calculation of the result
The diagnostic result may be calculated automatically on the basis of the selected answers. It is informative and indicative. It is not a decision producing legal effects or similarly significantly affecting the user.
If the user does not provide an email address and does not ask for the result to be sent, the answers should be processed locally in the browser and should not be attributed to a specific person.
The Controller does not make decisions about users based solely on automated processing that would produce legal effects or similarly significantly affect them.
5. Partner application form
The form at /en/partners is used for applications from experts, advisers, freelancers, agencies and providers interested in working with Brandbusters.
- Data collected: name, company or brand, email, phone, website or LinkedIn, city and country, markets and working languages, partner type, areas of expertise, description of experience and projects, portfolio links, preferred collaboration models, availability and any additional information provided by the applicant.
- Purpose: assessing the possibility of a partnership and contacting the applicant about the current application (Article 6(1)(b) and (f) GDPR).
- Data from the current application is kept for as long as needed to review it and reply, and thereafter for the limitation period for any claims.
- Optionally, on the basis of separate consent (Article 6(1)(a) GDPR), the application may be kept for 24 months so that I can get in touch about future projects. This consent can be withdrawn at any time by writing to kontakt@brandbusters.pl; withdrawal does not affect the lawfulness of processing before it.
- Technical recipients: the website hosting and infrastructure provider, the email delivery provider, the mailbox provider and Cloudflare (bot protection for the form).
- The form does not accept file uploads. Data from the partner form is not used for any newsletter.
6. Recipients of data
Data may be entrusted to entities supporting the Controller in running the website and the business, in particular:
- hosting and IT infrastructure providers,
- email and form-handling system providers,
- entities providing security, maintenance and development of the website,
- communication tool providers,
- legal, accounting or other professional advisers, where necessary.
Entities processing data on behalf of the Controller do so under appropriate agreements and solely in accordance with the Controller's instructions.
The Controller does not sell personal data.
7. Transfers of data outside the European Economic Area
Some technology providers may use infrastructure located outside the European Economic Area.
Where such a transfer takes place, it is based on mechanisms permitted by the GDPR, in particular a European Commission adequacy decision or standard contractual clauses.
Information about the safeguards applied can be obtained by writing to kontakt@brandbusters.pl.
8. Data retention period
We keep data no longer than necessary for the purpose for which it was collected:
- enquiry data — for the duration of the correspondence, and then for a maximum of 3 years if needed to demonstrate its course or to protect against claims,
- data related to cooperation — for the duration of the cooperation, and then for the period required by law or the limitation period for claims,
- an email address provided solely to receive the diagnostic result — for the time needed to send the result, and then for a maximum of 12 months, unless the conversation leads to further cooperation,
- technical data and logs — as a rule no longer than 12 months, unless longer retention is needed to investigate a security incident,
- data processed on the basis of consent — until consent is withdrawn or the purpose for which it was given ceases.
9. User rights
To the extent provided for by the GDPR, the user may request:
- access to their data,
- rectification of data,
- erasure of data,
- restriction of processing,
- data portability,
- to object to processing based on legitimate interest,
- to withdraw consent, where processing is based on consent.
To exercise your rights, write to kontakt@brandbusters.pl.
The user also has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, www.uodo.gov.pl.
10. Voluntary provision of data
Providing data is voluntary. Fields marked as required are, however, needed to respond to an enquiry or send the diagnostic result.
Failure to provide the required data may make it impossible to use the selected function.
12. External links
The website may contain links to external websites, in particular LinkedIn. After moving to an external website, data is processed in accordance with the rules of its operator. The Controller is not responsible for the privacy policies of external websites.
13. Changes to this policy
The policy may be updated, in particular due to changes in the law, website functions or the providers used.
The current version will always be available at:
https://brandbusters.pl/en/privacy-policy