VIBRAÉ energy you can feel Cart

PRIVACY POLICY And GDPR

1. Administrator danych

The controller of your personal data is VIBRAE Sp. z o.o., Wioska 6, 56-215 Niechlów, NIP 5010087927, REGON 545448170, KRS 0001259740.

Contact regarding personal data matters: info@vibrae.pl, tel. +48 883 145 803.

2. What data we process, for what purpose and on what basis

  • Orders in the shop — first name and surname, delivery and billing address, e-mail, phone number, company name and NIP (tax ID) (if you want a company invoice), ordered products. Purpose: concluding and performing the contract, delivery, payment, invoice. Basis: Art. 6(1)(b) GDPR (contract) and (c) GDPR (tax and accounting obligations).
  • Konto klienta („Moje konto”) — e-mail, password (stored in encrypted form), order history, registered equipment (serial number, purchase date, warranty period), service requests and complaints. Purpose: handling the account, warranty, service and complaints. Basis: Art. 6(1)(b) and (c) GDPR.
  • Aplikacje Vibraé — after you purchase a set, we create an account for you in the app included with the set (first name, e-mail) and grant you access. Purpose: performance of the contract. Basis: Art. 6(1)(b) GDPR. Data within the app itself is described in its own privacy policy.
  • Post-purchase messages — e-mail and order language. Purpose: instructions and help getting started with the set. Basis: Art. 6(1)(f) GDPR (legitimate interest). You can unsubscribe from these messages via the link in each of them.
  • Nutrition plan from the form on the website — first name, e-mail, age, height, weight, dietary exclusions. Purpose: preparing the plan you request. Basis: Art. 6(1)(b) GDPR. We use data on age, height and weight solely to put together the plan.
  • Enquiries, B2B cooperation, contact (form, e-mail, phone, WhatsApp) — contact details, company details, message content. Purpose: replying, preparing an offer and a contract. Basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and (f) GDPR.
  • Informacje marketingowe — e-mail, first name. We send them only with your consent. Basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time.
  • Analytics and advertising — data on your use of the website (subpages visited, device, approximate location based on IP address, cookie identifiers), events in the shop (e.g. viewing a product, adding to cart, purchase). We activate them only after you click “Accept” in the banner. Basis: Art. 6(1)(a) GDPR (consent).
  • Establishing and defending claims — data from orders and correspondence. Basis: Art. 6(1)(f) GDPR.

3. Komu przekazujemy dane

We share data only to the extent needed for the given purpose:

  • Hostinger International Ltd. — website and e-mail hosting,
  • PayU S.A. and Stripe Payments Europe Ltd. — processing of payments and instalments,
  • Furgonetka and courier companies (DPD, InPost, DHL) — delivery of orders,
  • Google Ireland Ltd. — Google Analytics (after consent), YouTube videos embedded on the website, Google Fonts typefaces,
  • Meta Platforms Ireland Ltd. — Meta Pixel and Conversions API (after consent), WhatsApp, if you write to us,
  • Microsoft Ireland Operations Ltd. — Microsoft Clarity on the Home Edition page (after consent),
  • Supabase Inc. and Netlify Inc. — accounts and operation of the Vibraé apps, preparation of the nutrition plan,
  • Automattic Inc. — WordPress technical services (Jetpack),
  • accounting offices, law firms and IT companies acting on our behalf,
  • public authorities — where required by law.

4. Przekazywanie danych poza Europejski Obszar Gospodarczy

Google, Meta, Microsoft, Stripe, Supabase, Netlify and Automattic may process data in the USA. This takes place on the basis of a European Commission decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

5. How long we store data

  • orders and invoices — for the period required by tax law (5 years from the end of the year in which the tax liability arose),
  • customer account — until it is deleted; equipment data and service requests — for the warranty period and until claims become time-barred,
  • enquiries and correspondence — until the matter is closed, and if it leads to a contract — as for contract data,
  • marketing and data processed on the basis of consent — until consent is withdrawn,
  • analytics data — for the period set in the given tool, no longer than 2 years.

6. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal). Write to us at info@vibrae.pl.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office, UODO (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

7. Pliki cookie

  • Necessary — always active: cart and order, login, selected language, remembering your choice in the banner.
  • Analytics and marketing — Google Analytics, Meta Pixel, Microsoft Clarity — only after you click “Accept”.

You can change your decision by deleting the cookies for vibrae.pl in your browser — the banner will appear again.

8. Voluntary provision of data and automated decisions

Providing your data is voluntary, but without the data needed for an order we will not be able to fulfil it. We do not make decisions about you based solely on automated processing that produce legal effects. Payment operators may automatically assess the risk of fraud during payment.

9. Zmiany polityki

The current version is always available on this page. Version of 14 September 2026.