Privacy policy

The controller is Filip Ziółko GXDeal, Jednoosobowa działalność gospodarcza (CEIDG), Tax ID (NIP): 9482648482, REGON: 52951059100000, address: ul. Błędowska 61, 26-680 Wierzbica, Polska.

Privacy contact: kontaktgxdeal@gmail.com.

We process data to: fulfil orders and contracts; process payments; communicate about fulfilment (including Comfort Trade); operate a shop account (if created); handle complaints; secure the service; meet accounting and legal duties; and, where applicable, own marketing within legal limits.

Bases may include: contract performance (GDPR Art. 6(1)(b)); legal obligation (c); legitimate interests (f) — e.g. security, establishing/defending claims; consent (a) where required (e.g. certain cookies / marketing).

We apply the legal bases appropriate to each processing purpose, including contract performance, legal obligations, legitimate interests, and consent where required.

Depending on the process we may process: identity and contact data; order and payment data (as provided via operators); shop account data; technical data (logs, device IDs, cookies); data provided for Comfort Trade (including game-account access data — solely for fulfilment).

Providing data required for the contract is a condition of fulfilling the order.

Data may be entrusted or disclosed to: payment operators; hosting / infrastructure providers; email / messaging providers; analytics tools (if enabled); Trustpilot (when you use reviews); authorities where required by law.

Processors act under contracts that require appropriate data protection measures.

If personal data is transferred outside the European Economic Area, the controller will ensure an appropriate GDPR mechanism. Details depend on the current vendor list and the safeguards applied under the GDPR.

order and billing data — for periods required by tax/accounting rules and until claims prescribe; account data — until deletion or request; Comfort Trade data — for fulfilment and complaints handling, then deleted or restricted; logs / cookies — per cookie policy and system configuration.

After the period, data is deleted or anonymised unless law requires longer retention.

You may have rights of access, rectification, erasure, restriction, portability, objection and — where based on consent — withdrawal (without affecting prior lawful processing).

You may lodge a complaint with the Polish Data Protection Authority (UODO) or another competent supervisory authority.

Requests: kontaktgxdeal@gmail.com.

Cookie categories and consent are described in the Cookie policy. Read this privacy policy together with the cookie policy.

We apply organisational and technical measures appropriate to the risk (access control, encrypted transport where used, least privilege).

Sharing game-account access data involves elevated risk — please share it only via channels indicated by GXDeal and per order instructions.

This policy may be updated. Last updated: 2026-08-11. Material changes may be communicated in the shop or by email where appropriate.