DB Nutrition Shop Privacy Policy
www.dbnutritions.com
Date: 14 May 2026
Licence number: fd4973d8-f9b9-4bc7-b430-c0f91d2e43e3
Dear User!
We care about your privacy and want you to feel comfortable when using our services. That is why we have set out below the key information regarding how we process your personal data and the cookies used by our Shop. This information has been prepared in accordance with the GDPR, the General Data Protection Regulation.
DATA CONTROLLER
UNIVERSE GLOBAL INVESTMENT Limited Liability Company, with its registered office at 5/7 Joachima Chreptowicza Street, 16-300 Augustów, entered in the National Court Register – Register of Entrepreneurs by the District Court in Białystok, 12th Commercial Division of the National Court Register, under KRS No. 0000768697, Tax Identification Number (NIP) 8461666675, REGON number 382524543, share capital PLN 5,000.00.
If you wish to contact us regarding the processing of your personal data, please email us at: contact@dbnutritions.com.
YOUR RIGHTS
You have the right to request:
- access to your personal data, including the right to obtain a copy of your data (Article 15 of the GDPR or, where applicable, Article 13(1)(f) of the GDPR),
- their rectification (Article 16 of the GDPR),
- deletion (Article 17 of the GDPR),
- restrictions on processing (Article 18 of the GDPR),
- the right to data portability (Article 20 of the GDPR).
And also the law:
- to object at any time to the processing of your data on grounds relating to your particular situation – specifically, to the processing of your personal data based on Article 6(1)(f) of the GDPR (i.e. our legitimate interests), including profiling (Article 21(1) of the GDPR);
- where personal data are processed for the purposes of direct marketing, including profiling, to the extent that the processing is related to such direct marketing (Article 21(2) of the GDPR).
Furthermore, you may withdraw your consent to the processing of your personal data at any time, without this affecting the lawfulness of any processing carried out prior to the withdrawal of consent.
Please contact us if you wish to exercise your rights. You can object to our use of cookies, in particular by adjusting your browser settings.
If you believe that your data is being processed unlawfully, you may lodge a complaint with the President of the Office for Personal Data Protection.
PERSONAL DATA AND PRIVACY
Below you will find detailed information about how your data is processed depending on the actions you take.
1. Placing an order in the Shop – Part 1
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| processing of your order | contract for the sale of goods (Article 6(1)(b) of the GDPR); a legal obligation, relating in particular to accounting, product safety and compliance with legal requirements (Article 6(1)(c) of the GDPR) | for the duration of the contract, until our legal obligations have expired; furthermore, until the expiry of the period during which claims may be brought | you will not be able to place an order |
| where you voluntarily provide health-related data necessary for the fulfilment of your order – your explicit consent (Article 9(2)(a) of the GDPR). | until you withdraw your consent, but for no longer than the period specified above. |
2. Placing an order in the Shop – Part 2
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| improving the quality of our services through feedback provided by users via our customer satisfaction survey | our legitimate interest (Article 6(1)(f) of the GDPR) | if you do not submit a review – 15 days from the date of purchase or until your objection is upheld; if you do submit a review – until it is removed or your objection is upheld; furthermore, until the expiry of the limitation period | we will not take your feedback on our services into account when working on their further development |
3. Creating an account in the Shop
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| performance of the contract for the provision of account management services in the Shop | contract for the provision of services (Article 6(1)(b) of the GDPR) | for the duration of the contract; furthermore, until the expiry of the period within which claims may be brought | you will not be able to create an account or use its features, such as viewing your order history or checking the status of an order |
4. Contacting us
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| handling your enquiries or requests | a contract or actions taken at your request (Article 6(1)(b) of the GDPR) – where the enquiry relates to a contract; our legitimate interests (Article 6(1)(f) of the GDPR) – where the enquiry is not related to a contract | for the duration of the contract or until the limitation period for bringing a claim expires (or until the objection is upheld) | we will not be able to respond to your enquiry or request (in whole or in part) |
| where you voluntarily provide health-related data – your explicit consent (Article 9(2)(a) of the GDPR) | until you withdraw your consent, but for no longer than the period specified above. |
5. Browser settings that allow marketing activities
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| direct marketing, which involves displaying personalised adverts | our legitimate interest (Article 6(1)(f) of the GDPR) | until the expiry or deletion of cookies used for marketing purposes | you will not receive suggestions for products or services that you may be interested in |
6. Browser settings that allow analytics
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| analysis of how users interact with and navigate the Shop’s website, with a view to improving its functionality | our legitimate interest (Article 6(1)(f) of the GDPR) | until the expiry or deletion of cookies used for analytical purposes | we will not take into account how the Shop website is used when working on its development |
7. Consent to receive marketing communications
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| sending marketing communications, particularly special offers; analysing the effectiveness of the messages sent | Your consent to marketing activities (Article 6(1)(a) of the GDPR); our legitimate interest (Article 6(1)(f) of the GDPR) | until consent is withdrawn or an objection is upheld; furthermore, until the limitation period for bringing a claim expires | you will not receive our marketing materials, including information about special offers |
8. Conclusion of a contract for the provision of a free newsletter and bonus
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| fulfilment of the agreement to provide a free newsletter and a bonus in the form of digital content; analysis of the effectiveness of the mailing | Agreement for the provision of a newsletter and a bonus (Article 6(1)(b) of the GDPR); our legitimate interest (Article 6(1)(f) of the GDPR) | for the duration of the contract or until the objection is upheld; furthermore, until the limitation period for bringing a claim has expired | you will not receive information about the Shop and our services; nor will you receive a bonus in the form of free digital content |
9. Use of other services offered by the Shop
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| performance of the contract concluded between us | contract for the provision of services (Article 6(1)(b) of the GDPR) | for the duration of the contract; furthermore, until the expiry of the limitation period | you will not be able to use the features that require data processing |
10. Actions that may give rise to claims
| What is the purpose of this? | On what grounds? | How long? | What happens if you don’t provide your details? |
| the establishment, pursuit or defence of any claims | our legitimate interest (Article 6(1)(f) of the GDPR) | until the limitation period for claims expires or until the objection is upheld | the inability to establish, pursue or defend claims |
HEALTH DATA
To a limited extent, we may process health-related data on the basis of your voluntary, explicit, specific and informed consent if this is necessary to fulfil an order or respond to your enquiry.
Providing health-related information is entirely voluntary.
The controller recommends that you do not provide any health-related data beyond what is necessary to process or fulfil your order.
PROFILING
We carry out profiling within the Shop – this will apply to you if you consent to such activities. Profiling involves automatically assessing which products or services you may be interested in, using information about the content you view. This means that advertisements for products or services displayed within the online services you use will be better tailored to you and your needs. Profiling will not include any health-related data you have provided.
The profiling we carry out does not result in decisions that have legal consequences for you or affect you in a similarly significant way.
ANALYTICAL ACTIVITIES
We carry out analytical activities on the Shop’s website with the aim of making it more intuitive and user-friendly – this will apply to you if you consent to such activities.
As part of our analysis, we will be looking at how you navigate the Shop – for example, how much time you spend on a particular page, or which areas of the Shop you click on. This will enable us to optimise the Shop’s layout, design and content as we work on its development, thereby improving its functionality.
Furthermore, if you agree to receive marketing messages or our newsletter from us, as well as a bonus in the form of free digital content, we may analyse the effectiveness of our mailings. For example, we may check whether and how they have affected activity on our Shop.
DATA SECURITY
When processing your personal data, we implement organisational and technical measures in accordance with the relevant legal provisions, including the use of SSL/TLS certificate encryption for the connection.
In the case of health data, we implement additional security measures, in particular restricting access to the data to authorised personnel only, access controls, encryption measures and regular reviews of the scope of data processed.
COOKIES
Like most websites, our shop uses cookies. These files:
- are stored in the memory of your device (computer, phone, etc.);
- do not affect your device’s settings.
This website uses cookies for the following purposes:
- statistical
- marketing
To find out how to manage cookies, including how to disable them in your browser, please refer to your browser’s help file. You can access this information by pressing the F1 key in your browser. You can also find relevant guidance on the websites of the following browsers: Google Chrome, Opera, Safari, Mozilla Firefox and Microsoft Edge.
Below you will find information about the functions of the cookies we use and their expiry dates:
| Cookie name | Validity period | The purpose of the cookie |
| ga | session duration | Tracking website traffic for statistical purposes |
By using the relevant options in your browser, you can at any time:
- delete cookies,
- block the use of cookies in future.
In such cases, we will no longer process them.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of third parties who assist us in running our business. We entrust them with the processing of your data – these third parties process the data solely on our documented instructions.
Below is a list of the recipients of your data:
| Function | Recipients of the data | Transfer of data outside the EU |
| any action relating to the Shop | a provider of technical/IT support; individuals working on a contract basis; a supplier of sales management software | there is no room |
| visiting the marketing settings page | a marketing services provider | yes – the USA, the UK, Switzerland, Canada, New Zealand |
| viewing the analytics settings page | an entity facilitating analytical activities | there is no room |
| placing an order | payment provider; product supplier; accounting software provider; office software provider; accountancy firm | Payment provider and product supplier: yes – USA, UK, Switzerland, Canada, New Zealand |
| subscribe to the newsletter / consent to marketing | the entity responsible for sending the newsletter or marketing messages | yes – the USA, the UK, Switzerland, Canada, New Zealand |
| use the online chat | an online chat provider | there is no room |
| taking part in a satisfaction survey | platforms that allow users to post reviews of the Shop or its products | yes – the USA, the UK, Switzerland, Canada, New Zealand |
| making contact | a provider of standard office software (including email) | there is no room |
In addition: the relevant public authorities, to the extent that we are required to disclose data to them.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
Consequently, your personal data may also be processed by entities outside the European Union. An adequate level of protection for your data, including through the use of appropriate safeguards, is ensured by:
Commission Implementing Decision 2013/65/EU on the adequate protection of personal data in New Zealand
the participation of these entities in the so-called Data Privacy Framework, i.e. a programme established by an implementing decision of the European Commission as a set of rules guaranteeing adequate protection of your privacy – in the case of entities from the United States of America
Commission Implementing Decision of 28 June 2021, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, on the adequate protection of personal data in the United Kingdom
European Commission Decision 2000/518/EC on the adequate protection of personal data in Switzerland
European Commission Decision 2002/2/EC on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act
