Privacy Policy

Last updated: July 1, 2026

This is a translation provided for convenience only and without any guarantee of accuracy. The Polish-language version of this Privacy Policy is the sole legally binding version; in the event of any discrepancy, the Polish version prevails.

1. Data controller

The controller of your personal data is REZONE GROUP sp. z o.o., ul. Żelazna 51/53, 00-841 Warsaw, Poland (KRS 0001174687, NIP 9492276473, REGON 541807867). The service operates under the iBeer brand as BeerBase. Contact: contact@ibeer.pl.

2. Purposes and legal bases

We process personal data to: maintain your user account (Art. 6(1)(b) GDPR — contract/terms); publish your public ratings, reviews and photos (user-generated content) (Art. 6(1)(b) / consent); ensure security and keep logs including session IP address (Art. 6(1)(f) — legitimate interest); produce statistics/analytics and use analytics cookies (Art. 6(1)(a) — consent).

3. Categories of data

E-mail address, username, user-generated content (ratings/reviews/photos), IP address (stored in authentication sessions), approximate location from GeoIP (country level, for statistics), and cookie consent preferences.

4. Recipients / processors

Data may be entrusted to processors: our hosting/infrastructure provider, the transactional mail server (mailcow / transactional e-mail), and the GeoIP database provider. A full list of processors is available on request.

5. Transfers outside the EEA

Data is processed within the EU/EEA. Any transfer outside the EEA would only take place with appropriate safeguards under Art. 46 GDPR.

6. Retention

Account data — until you delete your account; logs/IP — 12 months, after which they are deleted or anonymized; cookie preferences — for the validity period of your consent (180 days).

7. Your rights

You have the right of access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, and to withdraw consent at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO).

8. Voluntariness

Providing data is voluntary but necessary to use an account.

9. Cookies

We use necessary cookies (login/session/security) and, only with your consent, analytics cookies. See the consent banner for details. Consents are versioned and logged.

10. Profiling

We do not carry out automated decision-making, including profiling, that produces legal effects concerning you.

11. Changes to this policy

We may update this policy; material changes will be communicated through the Service.