Privacy policy
Informational translation; the Polish version is authoritative
Data processing in Banubo, including domestic and international delivery.
This translation is informational. The Polish version of the document is authoritative.
§ 1. Embedded YouTube content
Offers may contain a YouTube player or thumbnails. When the browser loads these resources, it connects to Google/YouTube services, which may receive the IP address, device data and request information and use their own storage or access technologies. Processing by the provider is also subject to its privacy policy and applicable legal bases; including a video does not constitute the user’s consent to optional tracking. Consent requirements for technologies other than those strictly necessary continue to apply.
§ 2. Controller and purposes
The controller for platform services is Wróblewski Multimedia, ul. Ligocka 51, 44-105 Gliwice, Polska, NIP/VAT UE PL6311794620. We process account, contact, delivery, transaction, support, security, seller verification, tax, DAC7 and payout data to perform contracts, comply with law, prevent fraud and establish claims; optional analytics or marketing uses consent where required. Stripe, not Banubo, handles complete card details. Seller data also includes staff details.
§ 3. Data for international delivery
To fulfil the selected delivery, the relevant seller and operators actually involved in carriage or clearance may receive necessary recipient data, particularly the name, delivery address and contact details required for the service. Sharing is limited to what is needed to perform the contract, comply with a legal obligation or rely on another appropriate legal basis, without collecting excessive data. For seller-arranged delivery, the seller arranges disclosure to the chosen operator; configuring a carrier in Banubo does not itself activate an integration or automatically disclose order data to that carrier.
The seller’s and operator’s data-protection roles follow their actual processing purposes and means and applicable law; a carrier does not become Banubo’s processor merely by appearing in an offer. Norway is within the European Economic Area, while the United Kingdom is outside it. Where delivery requires a transfer outside that area, a currently valid adequacy decision within its scope, or another legally required safeguard or permitted transfer basis, applies. A European delivery address alone does not determine the location of all processing operations.
§ 4. Recipients, retention and rights
Necessary data is shared with the seller, Stripe, the postal operator or carrier fulfilling the selected delivery (e.g. InPost, DHL, DPD or FedEx) and contracted hosting, mail, backup, security and advisory providers. Transfers outside the EEA use a valid safeguard. Data is kept for the service, claims and statutory accounting/DAC7 periods; security logs normally for up to 24 months. You may request access, correction, deletion, restriction, portability or object, and complain to the Polish UODO. Contact: [email protected]. Withdrawal of consent does not affect earlier lawful processing; an incident may justify retaining necessary security records longer.
§ 5. AI tools and security
When optional AI tools are used, data submitted for content assistance, including product descriptions or images, may be sent to the Google Gemini service provider as necessary to process the request. Do not submit third-party personal data unless necessary and lawful. Automated security signals may refer an account or content for review. Explanations and human review of account restrictions may be requested at [email protected].