Privacy Policy (GDPR)

Privacy Policy

Last updated: July 2026

At BERFINI, we are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the EU General Data Protection Regulation (GDPR – EU 2016/679) and applicable European data protection legislation.

1. Data Controller

The data controller responsible for processing your personal data is:

BERFINI s.r.o.
Czech Republic
Email: info@berfini.eu

2. Personal Data We Collect

Identity & Contact Information — First name, last name, email address, phone number, delivery and billing address
Order & Payment Information — Purchase history, payment method details (card numbers are not stored by us)
Technical Data — IP address, browser type, device information, usage data collected via cookies
Marketing Preferences — Newsletter subscription and communication preferences

3. Purposes & Legal Bases for Processing

Purpose	Legal Basis (GDPR Art. 6)
Processing and fulfilling orders	Performance of a contract (Art. 6/1-b)
Customer service and support	Contract / Legitimate interests (Art. 6/1-b, f)
Legal obligations (accounting, tax)	Legal obligation (Art. 6/1-c)
Marketing & newsletter communications	Consent (Art. 6/1-a)
Website analytics (Google Analytics, Meta Pixel)	Consent (Art. 6/1-a)
Fraud prevention & security	Legitimate interests (Art. 6/1-f)

4. Third Parties We Share Data With

E-commerce Infrastructure — Shopify Inc. (as data processor) for order and store management
Payment Providers — Authorised payment institutions for secure payment processing
Shipping & Logistics — Courier and logistics companies for order delivery
Marketing Tools — Google LLC (Google Analytics), Meta Platforms Inc. (Meta Pixel) — only with your consent
Legal Authorities — Competent public authorities and courts, where legally required

All data transfers to third parties are governed by data processing agreements in accordance with GDPR Article 28.

5. International Data Transfers

Your data may be transferred to countries outside the European Economic Area (EEA), such as Shopify and Google servers located in the United States. Such transfers are carried out using GDPR-compliant mechanisms, including Standard Contractual Clauses (SCCs) or adequacy decisions issued by the European Commission.

6. Cookies & Tracking Technologies

Strictly Necessary Cookies — Required for the website to function; no consent needed.
Analytics Cookies — Used to analyse site usage via Google Analytics. Subject to your consent.
Marketing Cookies — Used for personalised advertising via Meta Pixel. Subject to your consent.

You can manage your cookie preferences at any time through our cookie management tool.

7. Data Retention Periods

Order & Accounting Data — 10 years as required by law
Customer Account Data — For the duration the account is active + 30 days after a deletion request
Marketing Data — Until you withdraw your consent
Analytics Data — Google Analytics default retention period (14 months)

8. Your Rights Under GDPR

Right of Access — Request access to the personal data we process about you.
Right to Rectification — Request correction of inaccurate or incomplete data.
Right to Erasure — Request deletion of your data under certain conditions.
Right to Restriction — Request that we restrict the processing of your data.
Right to Data Portability — Request your data in a structured, machine-readable format.
Right to Object — Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent — Withdraw consent at any time where processing is consent-based.
Right to Lodge a Complaint — File a complaint with the Czech data protection authority (ÚOOÚ – Office for Personal Data Protection).

To exercise your rights, please contact us at: info@berfini.eu

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure, including SSL encryption, access controls, and secure data storage.

10. Changes to This Policy

We may update this Privacy Policy from time to time. In the event of significant changes, we will notify you by email or via a prominent notice on our website. The most current version will always be published on this page.