Privacy Policy

The controller responsible for data processing on this website is:

Barefill UG (haftungsbeschränkt)
Oder-Neiße-Str. 68
93073 Neutraubling
Germany

Represented by the managing directors:
Henry Sotta and Samuel Hoffmann

Email: office@barefill.de

We take the protection of your personal data seriously. Personal data means any information that can directly or indirectly identify a natural person. This includes, for example, name, email address, phone number, IP address, company information or information submitted via an inquiry form.

We process personal data only where there is a legal basis for doing so. This applies in particular where processing is required to provide our website, respond to inquiries, schedule appointments, carry out pre-contractual measures, perform contracts, comply with legal obligations or process data on the basis of consent.

When you visit our website, technical access data is processed automatically. This data is stored in server log files and is necessary to provide the website technically, ensure system security and improve the stability of the website.

Access data may include in particular:

• IP address
• date and time of access
• page or file accessed
• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing device
• status messages and error codes

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website.

We use external hosting and infrastructure service providers for the technical provision of our website. These providers may process personal data, in particular technical access data, on our behalf. Where legally required, appropriate data processing agreements pursuant to Art. 28 GDPR are in place with these service providers.

If you contact us by email, contact form or inquiry form, we process the information you provide in order to handle your request.

This applies in particular to the following contact options:

• contact form
• requesting a price list
• starting an inquiry
• booking a consultation
• contacting us
• sending a request by message
• other inquiry or contact forms

The following data may be processed in particular:

• name
• company
• email address
• phone number
• content of the inquiry
• information about products
• information about shipping volume
• information about desired fulfillment services
• information about storage, shipping, returns or Amazon FBA Prep
• other voluntarily submitted information

Processing takes place to handle your inquiry and to carry out pre-contractual measures pursuant to Art. 6(1)(b) GDPR, where your inquiry is directed toward entering into or performing a contract.

In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business inquiries and communicating with prospects, customers and business partners.

If you request a price list or further information about our services through our website, we process the data you provide in order to handle your request and provide the requested information.

The following data may be processed in particular:

• name
• company
• email address
• phone number
• requested service
• information about fulfillment needs
• information about shipping volume, products, storage needs or returns
• information about Amazon FBA Prep or other additional services

The legal basis is Art. 6(1)(b) GDPR, where the request serves to prepare a potential contractual relationship.

Where no pre-contractual measure applies, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business inquiries and preparing suitable offers.

To process, organize and follow up on inquiries, the submitted data may be processed in internal communication, organization, spreadsheet, automation or customer management systems.

Processing serves in particular to handle inquiries in a structured way, prepare offers, track communication and organize internal workflows efficiently.

The legal basis is Art. 6(1)(b) GDPR, where processing is necessary to carry out pre-contractual measures or perform a contract.

In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient organization and handling of business inquiries.

Where external service providers process personal data on our behalf in this context, we enter into corresponding data processing agreements where legally required.

Appointment booking via Calendly may be offered on our website. The booking may take place through an embedded window, a pop-up or a redirect to Calendly.

The provider is Calendly LLC.

If you book an appointment with us via Calendly, the data you enter is processed. This may include in particular:

• name
• email address
• phone number
• company
• requested appointment
• time zone
• information from the booking form
• voluntary messages or notes about the appointment

Data processing takes place for appointment scheduling and to carry out pre-contractual measures pursuant to Art. 6(1)(b) GDPR, where the appointment serves to prepare or perform a contract.

In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in simple, efficient and user-friendly appointment scheduling.

Where Calendly is embedded on our website and uses cookies or similar technologies, this takes place only after corresponding consent where consent is legally required.

We may use Zoom for consultations, initial meetings or other online appointments.

The provider is Zoom Video Communications, Inc.

If an appointment is carried out via Zoom, the following data may be processed in particular:

• name
• email address
• meeting data
• technical connection data
• IP address
• device and browser information
• voluntary information provided during the conversation
• chat messages, where used

Video appointments are recorded only if this has been expressly communicated in advance and an appropriate legal basis exists.

Processing takes place to conduct the respective appointment pursuant to Art. 6(1)(b) GDPR, where the appointment serves to prepare or perform a contract.

In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in simple and efficient communication with prospects, customers and business partners.

We use Google Analytics 4, a web analytics service provided by Google, on our website.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In connection with Google Analytics, processing by Google LLC in the USA may also take place.

Google Analytics helps us understand how visitors use our website. This enables us to see which pages are accessed, which content is relevant and how we can improve our website.

The following data may be processed in particular:

• pages accessed
• click behavior
• time spent on pages
• scrolling and usage behavior
• device and browser information
• approximate geographic origin
• referrer URL
• technical usage data
• interactions with forms or buttons, where configured accordingly

Google Analytics is used only if you have previously given consent via our cookie or consent banner.

The legal basis for storing information on your device or accessing information on your device is Section 25(1) TDDDG.

The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future through the cookie settings on our website.

Data processing terms are in place with Google where legally required.

Google Signals is currently not enabled.

If we activate Google Signals in the future, this Privacy Policy will be updated accordingly. Use will take place only after prior consent where consent is legally required.

Our website uses technically necessary cookies and, after your consent, analytics technologies such as Google Analytics.

Technically necessary cookies are required for the website to function properly. In this case, storing or accessing information on your device is based on Section 25(2) TDDDG.

Non-essential cookies, analytics technologies and comparable tracking technologies are used only if you have previously consented. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time through the cookie settings on our website.

A consent banner or comparable consent management tool may be used on our website to obtain and manage consent.

Technical information may be processed to store and verify your selection. This may include in particular:

• selected consent settings
• time of consent
• technical information about the browser or device used
• anonymous or pseudonymous consent ID

Processing takes place, to the extent necessary to store your consent decision, on the basis of Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in legally compliant documentation and management of consents.

Our website uses system fonts or locally embedded fonts. These are loaded from the user's device or directly from our website. No connection to external font provider servers is established.

The animations and design elements used on the website serve the presentation and usability of the website. Where no external services are embedded, this does not result in personal data being transmitted to external providers.

If external fonts, maps, videos, external media content or other external content are embedded in the future, this Privacy Policy will be updated accordingly.

Our website may contain links to our profiles on social networks such as Instagram, Facebook or LinkedIn.

These are only links. Simply visiting our website does not transfer data to these social networks.

Only when you click such a link do you leave our website. From that point onward, the privacy policies of the respective provider apply.

We currently do not offer a newsletter.

If we offer a newsletter in the future, this Privacy Policy will be updated accordingly. Newsletter registration will take place only with corresponding consent where legally required.

Our website currently does not offer the option to create a customer account, log in to a customer portal, or directly purchase, book or pay for services online.

If we offer such functions in the future, this Privacy Policy will be updated accordingly.

Personal data is disclosed to third parties only where this is necessary to provide the website, handle your inquiry, book an appointment, perform a contract or comply with legal obligations.

Recipients may include in particular the following categories:

• hosting and infrastructure service providers
• email and communication service providers
• appointment booking service providers
• video conferencing service providers
• analytics service providers
• IT and security service providers
• cloud, spreadsheet, automation or customer management systems
• tax advisors, legal advisors or authorities, where legally required

Disclosure takes place only where there is a legal basis for doing so.

When using individual service providers, personal data may also be processed in countries outside the European Union or the European Economic Area, in particular in the USA.

Such transfers take place only where there is a legal basis or suitable data protection safeguards exist. These may include in particular an adequacy decision by the European Commission, standard contractual clauses or express consent.

Where service providers based in the USA are used, data transfers may take place on the basis of the EU-U.S. Data Privacy Framework, provided the respective provider is certified accordingly.

We store personal data only for as long as required for the respective purposes.

Data from inquiries is generally deleted no later than six months after final processing, unless further communication, a contractual relationship or statutory retention obligations exist.

If an inquiry results in a contractual relationship, we store the data required for this for the duration of the contractual relationship and in accordance with statutory retention obligations.

Data that must be stored due to statutory retention obligations is deleted only after the respective statutory periods have expired.

Subject to the statutory requirements, you have the following rights:

• right of access to the personal data stored by us
• right to rectification of inaccurate data
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to certain processing activities
• right to withdraw consent with effect for the future
• right to lodge a complaint with a data protection supervisory authority

To exercise your rights, you can contact us at any time at office@barefill.de.

If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

You can withdraw consent already given at any time with effect for the future.

The lawfulness of processing carried out on the basis of consent before withdrawal remains unaffected by the withdrawal.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The competent supervisory authority in Bavaria is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

We have not appointed a data protection officer because there is currently no statutory obligation to do so.

Automated decision-making, including profiling, does not take place.

We reserve the right to update this Privacy Policy if technical, legal or organizational changes occur.