Skip to content
DefendUTactical
PLENGreyman

DefendU / RODO

Privacy policy

1. Data controller

The controller of your personal data is Firma Handlowo Usługowa Bartosz Walkiewicz, ul. Hugona Kołłątaja 106, 61-421 Poznań, Poland, NIP (tax ID) 7831928665. For personal-data matters, write to igordefendu@gmail.com or call +48 513 078 956.

2. What data we collect and why

  • Website account — email, full name, password (stored only in encrypted form) or Google account data (email, name, profile picture) if you sign in with Google. Purpose: running your account, course sign-ups, attendance history. Legal basis: contract (Art. 6(1)(b) GDPR).
  • Course and class sign-ups — the data given in the application (name, email, phone, chosen date, notes). Purpose: organising the course and contacting you about it. Legal basis: contract (Art. 6(1)(b) GDPR).
  • Contact form and shop enquiries — name, email, phone, message content, list of selected products. Purpose: replying to your enquiry and preparing an offer. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) or steps prior to entering a contract (Art. 6(1)(b) GDPR).
  • Shop orders — full name, email, phone, delivery address or pickup point, invoice details (if you want an invoice), ordered products and payment status. Purpose: fulfilling the order, delivery, payment, complaints and returns. Legal basis: contract (Art. 6(1)(b) GDPR) and accounting and tax obligations (Art. 6(1)(c) GDPR).
  • Technical data — IP address and basic browser data in server logs, kept briefly. Purpose: security and operation of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Who we entrust data to

We use trusted providers who process data only on our instructions:
  • Cloudflare — hosting and delivery of the website,
  • Supabase — database and sign-in (servers in the European Union, Frankfurt),
  • Google — signing in with a Google account (only if you use it),
  • Resend — sending emails from the website (confirmations, replies),
  • PayPro S.A. (Przelewy24), ul. Pastelowa 8, 60-198 Poznań — online payment processing (a separate controller of payment data),
  • courier companies and pickup-point operators (InPost, DPD, DHL, ORLEN Paczka) — only the data needed to deliver the chosen parcel.
Some of these companies are based in the USA. Data transfers take place on the basis of the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. We do not sell data or share it for marketing purposes.

4. How long we keep data

  • account data — until the account is deleted,
  • course sign-ups and history — as long as needed for settlements (up to 5 years),
  • enquiries and messages — up to 2 years from the last contact,
  • orders and sales documents — for the period required by tax law (5 years from the end of the tax year) and until the complaint period ends,
  • technical logs — from a few days to a few weeks.

5. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, port it and object to processing based on legitimate interest. You can delete your account yourself in your account area or by asking us by email. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Providing data is voluntary, but without it you cannot create an account or sign up for a course.

6. Cookies and browser storage

We only use files essential to running the website: sign-in session cookies and browser storage (localStorage) to remember your shop basket and the last chosen Tactical / Greyman path. We do not use advertising cookies or tracking tools.

7. Changes to this policy

This policy may change as the website develops. The current version is always on this page. This is an English translation; in case of discrepancy the Polish version prevails. Last updated: 14 October 2026.