Last updated: 1 September 2026
This policy explains what personal data we collect through barkr.eu, why we collect it, how long we keep it, who we share it with, and what rights you have. It is our notice under Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
1. Who is responsible for your data
The data controller is:
- Amorphys Design SRL, trading as Barkr
- Trade Register no. J40/6029/1999 · VAT RO11964737
- Registered office: Prelungirea Ghencea 82A, Bucharest, Romania
- Email: barkr.agility@gmail.com · Phone: +40 722 856 389
We have not appointed a Data Protection Officer, as we are not required to. Send any privacy question or request to barkr.agility@gmail.com.
2. What we collect and why
2.1 When you place an order
Data: name, billing and delivery address, email, phone, order contents, order value, delivery and payment method, VAT number if you buy as a business, order and returns correspondence.
Why and on what basis: to conclude and perform the sales contract with you — GDPR Art. 6(1)(b). We cannot process an order without this data.
2.2 Invoicing and accounting
Data: the identification and transaction data that must appear on an invoice.
Why and on what basis: to meet our accounting and tax obligations under Romanian law — GDPR Art. 6(1)(c).
2.3 When you create an account
Data: email, password (stored hashed), order history, saved addresses.
Why and on what basis: to provide the account service you asked for — Art. 6(1)(b).
2.4 When you contact us
Data: your name, email, the content of your message, and technical data collected by our anti-spam protection.
Why and on what basis: to answer you — Art. 6(1)(b) where it concerns an order, otherwise our legitimate interest in responding to enquiries and preventing abuse of our forms, Art. 6(1)(f).
2.5 Analytics and site measurement
Data: pages viewed, referring page, approximate location derived from IP, device and browser type, interactions with the site. Our session-analytics tool may also record mouse movement, scrolling, clicks and a reconstruction of your visit.
Why and on what basis: to understand how the site is used and improve it — your consent, Art. 6(1)(a), given through our cookie banner. You can withdraw it at any time; see the Cookie Policy.
2.6 Marketing email
Data: email address, and whether you opened or clicked our messages.
Why and on what basis: your consent, Art. 6(1)(a). Every message contains an unsubscribe link, and unsubscribing takes effect immediately.
2.7 Security and fraud prevention
Data: IP address, request metadata, firewall and login logs.
Why and on what basis: our legitimate interest in keeping the site secure and preventing fraudulent orders — Art. 6(1)(f).
3. Third parties that receive your data
We do not sell personal data. We share it only as set out below.
3.1 Processors acting on our instructions
- Our hosting provider — stores the site and its database.
- Carriers (FedEx, UPS, DPD, GLS or another comparable carrier) — receive the name, address and phone number needed to deliver your parcel.
- Email delivery — sends order and account emails.
3.2 Independent controllers
These parties determine their own purposes for the data they collect, and their own privacy policies apply in addition to this one:
- PayPal — payment processing and fraud screening. PayPal collects data directly from you at checkout and through a fraud-detection script on our pages.
- Google — analytics, and reCAPTCHA anti-spam protection on our forms, which collects device and behavioural signals to distinguish humans from bots.
- Microsoft — Clarity session analytics.
- YouTube (Google) — where a video is embedded on a page and you consent to it loading.
- Accountants, auditors and legal advisers, and public authorities where we are legally required to disclose.
3.3 Transfers outside the European Economic Area
Some of the parties above are established in the United States or process data there. Where data is transferred outside the EEA, we rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the recipient is certified under it, or on Standard Contractual Clauses adopted by the Commission together with supplementary measures. You can ask us for details of the safeguards applying to a specific transfer.
4. How long we keep it
| Data | Retention period |
|---|---|
| Invoices and accounting records | 10 years, as required by Romanian accounting law |
| Order and delivery records | 3 years after the order, for warranty and dispute purposes |
| Account data | Until you close the account, then deleted or anonymised |
| Contact form correspondence | 2 years from last contact |
| Marketing consent and email address | Until you withdraw consent |
| Analytics data | As configured in the relevant tool, generally no more than 14 months |
| Security and server logs | Up to 12 months |
Where a legal claim is pending or reasonably foreseeable, we keep the relevant data until it is resolved.
5. Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of whether we process your data, and a copy of it (Art. 15).
- Rectification — have inaccurate or incomplete data corrected (Art. 16).
- Erasure — have your data deleted where one of the grounds in Art. 17 applies. This does not extend to data we must keep for accounting or tax purposes.
- Restriction — have processing limited in the circumstances set out in Art. 18.
- Portability — receive data you provided to us, in a structured, machine-readable format, and have it transmitted to another controller where technically feasible (Art. 20).
- Object — object at any time to processing based on our legitimate interests, on grounds relating to your particular situation, and to object to direct marketing at any time with no need to give reasons (Art. 21).
- Withdraw consent — at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before it.
To exercise any of these, email barkr.agility@gmail.com. We will respond within one month. That period may be extended by two further months for complex requests, in which case we will tell you within the first month. We may ask you for information to confirm your identity before acting on a request.
We do not carry out automated decision-making producing legal or similarly significant effects on you. Our payment provider applies automated fraud screening to transactions; if a payment is declined on that basis you can contact us and we will look at it manually.
6. Complaints
If you believe we have handled your data unlawfully, please tell us first so we can put it right. You also have the right to complain to a supervisory authority — in Romania:
Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest, Romania
www.dataprotection.ro
If you live in another EU member state, you may complain to the supervisory authority there instead.
7. Security
We use HTTPS across the site, restrict administrative access, keep our platform and its components updated, and store passwords in hashed form. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures appropriate to the risk. If a breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
8. Children
Our site and products are directed at adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact barkr.agility@gmail.com and we will delete it.
9. Cookies
Cookies and similar technologies are covered separately in our Cookie Policy.
10. Changes to this policy
We may update this policy. The date at the top shows when it was last revised. Where a change materially affects how we use data you have already given us, we will tell you directly.
11. Contact
Amorphys Design SRL
Prelungirea Ghencea 82A, Bucharest, Romania
Email: barkr.agility@gmail.com
Phone: +40 722 856 389