Back to home

Privacy Policy

Last updated: October 26, 2026

1. Data controller

The controller of personal data is Łukasz Dawidowicz, conducting business as FSP Łukasz Dawidowicz, address: [ADDRESS – TO BE COMPLETED], NIP: [NIP – TO BE COMPLETED], REGON: [REGON – TO BE COMPLETED] (the “Controller”).

Data protection contact: [EMAIL – TO BE COMPLETED].

2. Scope

This Policy covers personal data processing related to the GuildBazaar informational landing page and the waitlist form.

When the full platform launches (accounts, profiles, offers, payments), this Policy will be updated with additional purposes, data categories and recipients.

3. What data we collect

Via the waitlist form we process:

  • full name
  • email address
  • role / interest profile (e.g. re-enactor, vendor, participant)
  • optional message
  • preferred language (locale) at signup

4. Purposes and legal bases

  • waitlist signup and contact about launch / beta — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest in building the product community),
  • responding to contact requests — Art. 6(1)(f) GDPR,
  • legal obligations of the Controller (e.g. accounting when payments appear) — Art. 6(1)(c) GDPR,
  • optional direct email marketing — only based on consent (Art. 6(1)(a) GDPR), if such consent is collected.

5. Recipients

Waitlist data is stored with our database infrastructure provider — Supabase.

The site may be hosted by a cloud provider (e.g. Vercel), which then processes technical data necessary to deliver the site.

Google Ads and Vercel Analytics scripts are not currently implemented. If we add them later, we will update this Policy and, if needed, the Cookie Policy.

6. Retention

We keep waitlist data until the platform launches and signed-up persons are informed, or until a valid erasure / objection request — no longer than needed for the signup purpose, and then for any period needed to establish, exercise or defend legal claims, if applicable.

7. Your rights

You have the right of access, rectification, erasure, restriction, data portability (as provided by the GDPR), objection to processing based on Art. 6(1)(f) GDPR, and the right to lodge a complaint with a supervisory authority (in Poland: the President of UODO).

To exercise your rights, email: [EMAIL – TO BE COMPLETED].

8. Voluntary provision

Providing waitlist data is voluntary but necessary to join the list. Without the data, signup is not possible.

9. Transfers outside the EEA

Some technical providers may process data outside the European Economic Area. Where required, we use GDPR transfer mechanisms (e.g. standard contractual clauses).

10. Changes

We may update this Policy. The new version applies from the publication date on this page.

If there is any conflict between the Polish and English versions, the Polish version prevails.