Privacy policy

1. Data controller

The controller of your personal data is Picos Piotr Fabiś, running a business under the BRICO WIPER BLADES brand, Głębokie 84, 33-350 Piwniczna-Zdrój, Poland, VAT ID (NIP) 6421366428, REGON 240360971 (the „Controller”). Contact for data protection matters: biuro@bricowipers.pl, phone +48 600 852 066.

2. What data we process and why

• Contact form, e-mail, phone, WhatsApp – name, e-mail address, phone number and message content – to answer your enquiry (Art. 6(1)(f) GDPR – legitimate interest) or take steps before entering into a contract (Art. 6(1)(b) GDPR).
• Business partners (wholesalers, shops, workshops) – company data and data of its representatives and employees designated for contact (name, position, e-mail, phone) – to conclude and perform the cooperation agreement (Art. 6(1)(b) GDPR) and maintain ongoing business contact (Art. 6(1)(f) GDPR).
• B2B Panel and access requests – company and contact person data (name, VAT ID, address, e-mail, phone, login), order history and invoices – to set up and maintain the partner account and fulfil orders (Art. 6(1)(b) GDPR). The Panel also records account activity (logins, orders, downloaded invoices and materials) for security and accountability (Art. 6(1)(f) GDPR).
• Order fulfilment and shipping, including to EU countries – recipient data, delivery address, phone and, for own collection, the details of the person or driver collecting the goods and the vehicle registration number, entered in transport documents and intra-EU delivery confirmations (Art. 6(1)(b) and (c) GDPR).
• Settlements, invoices and accounting documents – to the extent required by tax and accounting law (Art. 6(1)(c) GDPR).
• Complaints and statutory warranty – data needed to handle the claim (Art. 6(1)(b) and (c) GDPR).
• Social media profiles (Facebook, Instagram, TikTok, YouTube) – when you follow, comment on or message our profile – to run the profile and reply to messages (Art. 6(1)(f) GDPR). For Facebook and Instagram page insights we are joint controllers with Meta Platforms Ireland Ltd.; see Meta’s privacy policy for details.
• Website statistics (Google Analytics) – only after you consent in the cookie banner (Art. 6(1)(a) GDPR).
• Advertising and ad measurement (Meta Pixel and Meta Conversions API) – only after you click „Accept all” in the cookie banner (Art. 6(1)(a) GDPR). The pixel records viewed product pages, add-to-cart and purchase. On purchase we also send Meta your e-mail, phone, first and last name, city, postcode and country as a hash (SHA-256), plus IP address and browser data, so Meta can match the purchase to an ad. You can withdraw consent at any time in the cookie settings.
• Establishing or defending legal claims (Art. 6(1)(f) GDPR).

Customer reviews shown on the site come from Allegro’s public rating system – we show only ratings and review text, without buyers’ personal data. We do not send newsletters, use CCTV or make automated decisions about you (including profiling).

3. Data recipients

Data may be shared with entities that support our business: our hosting provider (OVH), e-mail provider, Brevo (France) – sending e-mails from the shop and B2B Panel, PayPro SA, Poznań (Przelewy24) – online payments, accounting office, courier and freight companies and Poczta Polska (when shipping orders), Google Ireland Ltd. (Google Analytics – only with consent; Google reCAPTCHA – spam protection for the contact form, loaded only on pages with a form, based on our legitimate interest) and Meta Platforms Ireland Ltd. (WhatsApp – when you start a conversation with us; Meta Pixel and Conversions API – only with consent). Data may also be disclosed to public authorities where the law requires it (e.g. the tax office).

Purchases on Allegro – when you buy our products on Allegro.pl, your data is also processed by Allegro.pl sp. z o.o. as a separate controller, under Allegro’s terms and privacy policy. We receive from Allegro only the data needed to fulfil the order.

Some providers (e.g. Google, Meta) may process data outside the European Economic Area, including in the USA – based on a European Commission decision (EU-US Data Privacy Framework) or standard contractual clauses.

4. How long we keep data

• enquiries via the form, e-mail, phone and WhatsApp – until the matter is closed, then up to 1 year (longer if the enquiry led to an order);
• partner data and B2B Panel accounts – for the duration of the partnership and then for the limitation period for claims (up to 6 years);
• B2B Panel activity history – up to 2 years;
• invoices, transport and accounting documents – 5 years from the end of the year in which the tax liability arose;
• complaints – for the warranty and guarantee period and the limitation period for claims;
• Google Analytics data – until consent is withdrawn, no longer than 14 months.

5. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You may also lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland). Providing data is voluntary, but without it we cannot answer your enquiry or fulfil an order.

6. Cookies

This site uses cookies (small files stored in your browser):

• essential – to run the site, log in to the B2B Panel and remember your cookie banner choice;
• analytics (Google Analytics) – only after you click „Accept all”; they help us understand how you use the site;
• marketing (Meta Pixel – Facebook, Instagram) – only after you click „Accept all”; they let us measure ad performance and show you ads for products you viewed.

You can change your decision at any time: cookie settings. You can also delete or block cookies in your browser settings.

7. Changes to this policy

This policy may be updated, e.g. when laws or site features change. The current version is always available on this page. The Polish version is binding. Last updated: 05.11.2026.