Privacy policy
Last updated: 11.08.2026
This policy describes how personal data is processed for people joining the launch notification list for BRUTA products via https://bruta.online. The Polish version of this policy is the binding one.
1. Data controller
The controller of your personal data is Bartosz Bednarczyk, a natural person running the BRUTA website at https://bruta.online.
Contact for matters concerning personal data: contact@bruta.online.
2. What data we process
In connection with joining the notification list (the “waitlist”) we process:
- email address,
- the fact and date of consent,
- which product or page the signup came from.
In connection with use of the site and analytics/advertising tools (the Meta pixel) we may process:
- IP address,
- device and browser information,
- activity on the site (pages visited, clicks),
- cookie identifiers.
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Sending notice of a launch or restock (notification list) | Consent - Art. 6(1)(a) GDPR |
| Marketing and measuring advertising performance (Meta pixel, cookies) | Consent - Art. 6(1)(a) GDPR |
Providing your data is voluntary, but necessary to join the notification list. Withdrawing consent at any time does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
4. Recipients of the data
We entrust your data to trusted service providers who process it on our behalf under data processing agreements:
- Brevo (Sendinblue SAS) - 106 boulevard Haussmann, 75008 Paris, France. Storage of the email list and delivery of messages.
- Meta Platforms Ireland Ltd. - 4 Grand Canal Square, Dublin, Ireland. Advertising and measurement tools (Meta pixel).
- Vercel Inc. - 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Website hosting.
5. Transfers outside the EEA
Data processed by Brevo stays within the European Economic Area (EEA).
Some providers (Meta, Vercel) may process data outside the EEA, including in the United States. Such transfers are made on the basis of a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses (SCCs), in line with Art. 46 GDPR.
6. Retention period
We process the data until consent is withdrawn or until the purpose it was collected for has been fulfilled (the notification list ending). Once consent is withdrawn, the email address is removed from the list.
7. Your rights
You have the right to:
- access your data,
- rectify your data,
- erase your data (the “right to be forgotten”),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time,
- lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise these rights, write to: contact@bruta.online.
8. Cookies
The site uses cookies, including third-party cookies (the Meta pixel), which load only after consent is given in the cookie banner. You can change or withdraw cookie consent at any time using the “Cookie settings” link in the footer.
9. Changes to this policy
We reserve the right to update this privacy policy. The current version is always available on this page, together with the date it was last updated.