All your personal data is processed in accordance with Act no. 18/2018 Coll.,
on the Protection of Personal Data and on the Amendment of Certain Acts (hereinafter referred to as the “Act”) and pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council
of 27 April 2016 (GDPR).

And in this document, you’ll learn exactly how we protect your privacy – what data we collect, how we use it, who we share it with, how you can control processing, the measures we take to protect your data, and
about your processing rights.

We are the operator of the online store on the website www.barefu.com:

barefu s.r.o.
Severná 1408/18
97401 Banská Bystrica
Slovensko

IČO: 52195741
DIČ: 2120924894

The company is registered in the Commercial Register at the District Court of Banská Bystrica, odd. Sro, vl. č. 35897/S 

In addition, we have appointed a person responsible for personal data protection, which is Ing. Ján Mazanec. If you have questions about the use of your personal data or want to exercise your rights, you can contact our responsible person at privacy@barefu.com or in writing at our company address.

What data do we collect

Shopping

When making a purchase in our e-shop, we require the necessary data from you
for its implementation. It is your e-mail address so that we can communicate with you, your delivery address so that we can send you the ordered goods, your billing address, if different from the delivery address, and your telephone number so that the courier can contact you. delivery company.

We do not collect any information about your credit cards during your purchase. Your payment will be made on the website of the payment gateway, which will only send us information about its execution, and thus your order will be executed.

Sending news

You can subscribe to our news and business information by e-mail without creating your own account. Again, the only information stored is your email address. By creating an account, you are not subscribing to the newsletter.

Data obtained through the use of our services

When you use our services, we also obtain information about how you use them. This is information about your interactions with our services, such as when you browse our site or what you search for.

We also collect information about the devices and computers you use
to access our services, including IP addresses, browser settings, information about operating systems, or information about your mobile device, information from which website you access us, pages you visit, and information from cookies and similar tools.

How we work with data

We provide our services

We only require from you the information necessary to be able to provide our services in accordance with our Terms and Conditions. We use them
for the conclusion of a contract via the Internet and its performance, in particular for acceptance
and registration of the order, processing of the order, sending of the goods, issuance of the accounting document, solution of withdrawal from the contract and possible complaint.

We may also use your personal data by mutual agreement
to conclude a purchase contract outside the online store.

We communicate with you

We use your contact details to contact you in the event of a question or problem with your order. We usually use the form of e-mail and, in the case of acute matters, also the telephone number.

We also use your email address to send you business information
and newsletter.

We improve our services

We also use the data we store to improve and personalize our services, as well as for marketing. For example, information about your shopping history
and the products you have purchased from us, we use to be able to recommend other products that may be of interest to you.

We also use information about visits and traffic on our site and its individual sections and displayed products for analytical purposes to understand how people use our website, to make it more intuitive and user-friendly.

Protection of rights

We also use your information to ensure the security of the services we provide, to respond to claims that have been made against us in proceedings before state and other authorities that control our activities, and to enforce claims that we have incurred.

On what basis do we process your data

Performance of the contract

To fulfill our obligations arising from the purchase contract concluded
we use your data remotely on the basis of this agreement, in which you voluntarily provide us with data.

Consent

We use your data to send business information and news (newsletter) and create your e-shop account based on your consent, which you expressed when providing your e-mail address. You can withdraw your consent at any time at privacy@barefu.com or in writing at our company address.

Fulfillment of legal obligations

We store data about you and your orders for accounting purposes
and disclosures to government or other authorities that oversee our activities.

Legitimate interest

To improve and personalize our services, certain marketing activities, or in connection with security and protection of rights, we use your data based on our legitimate interest.

Who we share your data with

We do not disclose, make available, or provide your personal information to any other entity, except to third parties mentioned below. All of our partners process your data based on our instructions and in accordance
with this document. In doing so, they follow all necessary security, technical and organizational measures to provide the required protection for your personal data.

Delivery services:

Slovenská pošta a.s., Partizánska cesta 9, 975 99 Banská Bystrica, IČO: 36631124, zapísaná v Obchodnom registri Okresného súdu Banská Bystrica, Oddiel Sa, Vložka č.803/S 

Accounting services:

PALKOVIČ services, s.r.o., Gorkého 10, 811 01 Bratislava, IČO: 50529676, zapísaná v Obchodnom registri Okresného súdu Bratislava I, Oddiel Sro, Vložka č.114571/B

Hosting services:

Websupport, s.r.o., Staré Grunty 12, 841 04 Bratislava, IČO: 36421928, zapísaná v Obchodnom registri Okresného súdu Bratislava I, Oddiel Sro, Vložka č.63270/B

Newsletter sending services:

MailChimp / The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Atlanta, GA 30308 USA

Consumer competition information storage services:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Írsko

How long we keep your data

We retain personal information related to your user account until you cancel your account. We keep your personal data concerning the processed order for the necessary period, which is usually ten years from its delivery.

If we use your data with your consent, such as when sending business information, we retain it until you revoke your consent.

We keep the data used on the basis of our legitimate interest for as long as the reason for their processing persists.

Cookies

Like many other companies offering their services on the Internet, we use cookies and pixels. Cookies are small pieces of data that are stored
on your browser or mobile device while browsing the web. Pixels are small images or “pieces of code” found
on a website or e-mail that collects information about your browser or mobile device, and some of them may also store cookies.

Some cookies are deleted from your device after you close the browser window (session cookie), others remain stored on your device as well.
after browsing our website (permanent cookie).

Cookies allow us to remember your actions and preferences (for example, login details, order information in the shopping cart)
over a period of time so that you don’t have to re-enter them each time you return to a webpage or move from one webpage to another.

At the same time, cookies help us to understand what interests you on our website, whether it is clear enough for you and you can find what you are looking for on it. Therefore, we also use cookies in order to improve the user experience.

Cookies can also record additional information, such as the number of visitors to our website and also which subpages of our website you visit most often. They are also used to show you advertising and site content that is relevant to you based on your interests and needs.

Key (functional) cookies – without them, our site would not work properly. Thanks to them, you remain logged in on our website, your cart remembers the products you put into it, or unauthorized attempts to access your account are detected.

Analytical cookies – allow you to monitor website traffic and the use of various functions. According to them, we are improving the structure, form and content of our pages. We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find more information about privacy here, and you can install the software add-on available here to refuse cookies.

Tracking and remarketing cookies – help us optimize the offer for customers and address them in advertising spaces on other websites. We use the Facebook Pixel service from Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbor Dublin 2, Ireland. You can find more information about privacy here, and you can refuse cookies here.

You can also allow or deny cookies on websites you visit by changing your internet browser settings. Take a look
to the help in your browser, and follow the instructions. Keep in mind that with cookies turned off, the comfort of using our website can be significantly reduced.

Your rights

Because we use your personal information, you have certain rights. If you apply for any of them, we have 30 days to inform you about the processing of your application. In justified cases, we may extend this period up to
in 60 days, of which we will inform you.

You can exercise your rights at privacy@barefu.com or in writing at our company address. When requesting, please provide your name, surname and address so that we can verify your identity and do not provide your personal information to an unauthorized person.

Right of access to data

You have the right to know if we process your personal data. If we process this, you can ask us for access to the data. Upon your request, we will issue a confirmation with information about what personal data we process, whether it has been transferred to third countries and how long we will keep your data.

Right of correction

You have the right to have your personal data that we process correct, complete and up-to-date. If you find that we are not using your data as you wish, you can contact us and we will correct the error.

Right of deletion

You have the right to delete your personal data that we process if the following conditions are met and legal exceptions do not apply:

we no longer need your personal information for the purpose for which you provided it to us
you withdraw your consent and there is no other legal basis for the processing of your personal data
based on the specific situation, you object to the processing of your personal data
we process your personal data illegally
personal data must be deleted in order to comply with a legal obligation
if you are a child, or parent of a child who has consented to the processing of personal data via the Internet
In the event that your personal data is deleted, we will inform the contracting third parties that you have exercised the right to delete and should therefore delete all references to your personal data.

Right to restrict processing

You also have the right to ask us for a temporary processing restriction if:

we process incorrect personal data until the accuracy of this personal data is verified
the processing of your personal data is illegal and you decide to request a restriction on the processing of personal data instead of deleting it
we no longer need personal data for processing purposes, but this is necessary for your own purposes to prove, assert or defend your legal claims
you object to the processing of your personal data, until verification, whether the legitimate reasons for the processing of personal data outweigh your legitimate interests
Right to data portability

You have the right to request that we provide you with your personal information in electronic form (such as an XML or CSV file) that will allow you to easily transfer the information to another company. You can also ask us to transfer your personal data to the selected company directly. We will comply with your request if you have provided us with personal data directly and you have given us your consent to their processing.

The right to object

You have the right to object, for reasons relating to your specific situation, to the processing of your personal data, which is carried out on the basis of our legitimate interest, including the right to object to profiling based on our legitimate interest.

You also always have the right to object to the processing of your personal data if it is processed for direct marketing purposes.

How we protect your personal information

The security of your personal data is paramount to us. To ensure the protection of your personal data, we have adopted the necessary technical
and organizational arrangements. Personal data is processed on computers that are protected by a password and anti-virus protection. Website serving
for the operation of the online store is secured by an SSL certificate.

Transfer to third countries

We do not actively transfer your personal data to countries outside the EU. However, some of the partners with whom we cooperate in the processing of personal data carry out such transfers, specifically to the USA. The persons to whom this information is disclosed in the US comply with the terms of the US-EU Privacy Shield and thus provide an adequate level of protection for your personal data.

Filing complaints

If you believe that the processing of your personal data by our company is in conflict with the applicable legislation on personal data protection, you have the right to file a complaint with our main supervisory body – the Office for Personal Data Protection of the Slovak Republic.