{"id":3,"date":"2026-02-01T16:20:30","date_gmt":"2026-02-01T16:20:30","guid":{"rendered":"https:\/\/bardaro.eu\/?page_id=3"},"modified":"2026-08-29T05:48:37","modified_gmt":"2026-08-29T05:48:37","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/bardaro.eu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<main class=\"bdr-legal-page\"><header class=\"bdr-legal-hero\"><div class=\"bdr-legal-inner\"><p class=\"bdr-legal-eyebrow\">BARDARO \u00b7 PRIVACY<\/p><h1>Privacy Policy<\/h1><p class=\"bdr-legal-lead\">A clear explanation of how BARDARO uses, protects, and manages your personal data.<\/p><p class=\"bdr-legal-updated\">Updated \u00b7 August 29, 2026<\/p><\/div><\/header><div class=\"bdr-legal-layout\"><div class=\"bdr-legal-inner bdr-legal-grid\"><nav class=\"bdr-legal-toc\" aria-label=\"Contents\"><span>TABLE OF CONTENTS<\/span><ol><li><a href=\"#controller\">Who processes your data?<\/a><\/li><li><a href=\"#data\">What Data Do We Process?<\/a><\/li><li><a href=\"#purposes\">Why, and on what grounds?<\/a><\/li><li><a href=\"#public\">My BARDARO and Digital Business Card<\/a><\/li><li><a href=\"#recipients\">Recipients and Services<\/a><\/li><li><a href=\"#retention\">Storage periods<\/a><\/li><li><a href=\"#rights\">Your Rights<\/a><\/li><li><a href=\"#security\">Security<\/a><\/li><li><a href=\"#changes\">Changes and Contact Information<\/a><\/li><\/ol><\/nav><div class=\"bdr-legal-body\"><div class=\"bdr-legal-intro\"><p>This policy applies to bardaro.eu, My BARDARO, digital BARDARO business cards, physical NFC cards, and related services. We strive to collect only the data necessary for the specific service and to give you real control over it.<\/p><\/div><section class=\"bdr-legal-section\" id=\"controller\"><div class=\"bdr-legal-number\">01<\/div><div class=\"bdr-legal-copy\"><h2>Who processes your data?<\/h2><p>The data controller is:<\/p><div class=\"bdr-legal-identity\"><strong>GB Concept, Ltd.<\/strong><br>EIK BG208659435<br>Sofia, Postal Code 1113, Izgrev District, DIANABAD Oil Refinery, 15 Samokov Street, 14th floor,<br><a href=\"mailto:office@bardaro.eu\">office@bardaro.eu<\/a><br>+359 886 14 90 15<\/div><p>For questions regarding your personal data and exercising your rights, you can use the email address provided or the \u201eAccount and Privacy\u201c section in My BARDARO.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"data\"><div class=\"bdr-legal-number\">02<\/div><div class=\"bdr-legal-copy\"><h2>What Data Do We Process?<\/h2><p>Depending on how you use BARDARO, we may process:<\/p><ul><li><strong>Profile and Account:<\/strong> first name, last name, email, preferred language, login and security information.<\/li><li><strong>Digital Business Card:<\/strong> photo, job title, company, phone numbers, email addresses, websites, social media profiles, address, BG\/EN profile, selected theme, and the information you choose to publish.<\/li><li><strong>Customer service, visits, and tailoring:<\/strong> measurements and sizing information, including height, weight, and usual clothing size, when necessary for preparing for the initial consultation; fit preferences, orders, items, fabrics, details, service history, number of clients at the appointment, date and time of the visit, selected appointment method, verified address, address details, and access instructions, when necessary for the requested service. An appointment request may be submitted even without a My BARDARO account. If a person requests a joint visit for another customer, the limited data provided by the requester regarding that participant may also be processed for the purpose of preparing and organizing the appointment.<\/li><li><strong>NFC and Digital Identity:<\/strong> internal card identifiers, activation status, permanent BARDARO Identity link, technical data for first-time use, and, if you choose, a Wallet Pass ID.<\/li><li><strong>Communication and Concierge:<\/strong> Private Client Concierge requests, preferred method and time for contact, associated model, desired date, your notes, and the back-and-forth correspondence between you and BARDARO regarding the request.<\/li><li><strong>Rights, Privacy, and Legal Notices:<\/strong> requests for access, portability, rectification, or erasure, and the history of their processing, as well as a limited audit trail for explicitly accepted Terms and Conditions or confirmation of a public profile\u2014document, version, date and time in UTC, context, and language.<\/li><li><strong>Technical Specifications:<\/strong> minimal security logs, date and time of actions, browser\/device, and information necessary to protect the account and the service. The public visit form uses Cloudflare Turnstile anti-bot protection and request rate limiting; BARDARO does not store the Turnstile token after verification, and application rate limiting retains only one-way HMAC hashes instead of raw IP addresses.<\/li><\/ul><p>Photos and measurements are used to provide the selected service. BARDARO does not use profile photos for biometric recognition.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"purposes\"><div class=\"bdr-legal-number\">03<\/div><div class=\"bdr-legal-copy\"><h2>Why and on what basis do we process data?<\/h2><div class=\"bdr-legal-table\"><div><strong>My BARDARO, Private Client Concierge, business card, tailoring, and customer service<\/strong><span>Performance of a contract or actions taken at your request prior to entering into a contract.<\/span><\/div><div><strong>Security, Fraud Prevention, and Reliability<\/strong><span>It is in our legitimate interest to protect the service and users, while adhering to the principle of data minimization.<\/span><\/div><div><strong>Proof of Acceptance of Applicable Terms and Conditions and the Choice to Publish Publicly<\/strong><span>Performance and management of the contractual relationship and, where applicable, our legitimate interest in maintaining a limited audit trail for the specific action.<\/span><\/div><div><strong>Accounting, tax, and other required records<\/strong><span>Compliance with a legal obligation.<\/span><\/div><div><strong>Marketing and Optional Analytical Technologies<\/strong><span>Consent, when required by law. You may withdraw your consent at any time.<\/span><\/div><div><strong>Publishing Your Digital Business Card<\/strong><span>Based on your explicit choice and instructions\u2014you determine whether the business card is published and which fields it should contain.<\/span><\/div><\/div><p>As of the date of this policy, we do not use analytical cookies for profiling or advertising. Should we enable limited analytics in the future, we will update this information and implement the necessary opt-out mechanism.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"public\"><div class=\"bdr-legal-number\">04<\/div><div class=\"bdr-legal-copy\"><h2>My BARDARO and Digital Business Card<\/h2><p>My BARDARO is a private area for your profile. The public digital business card is a separate feature and is displayed only when you publish it. You can choose the fields, the default language, and the visual theme. The public version can be accessed via a link, QR code, NFC card, or Wallet pass.<\/p><p>The contact information you post is visible to anyone to whom you provide the public link or physical card. Do not post information that you do not want to share.<\/p><p>When you submit a request to close and delete your profile, it will be hidden while the request is being reviewed.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"recipients\"><div class=\"bdr-legal-number\">05<\/div><div class=\"bdr-legal-copy\"><h2>Recipients and Services<\/h2><p>Only individuals and vendors who need it are granted access to data. Depending on the service, this may include hosting and technical support, email infrastructure, manufacturing and logistics partners, map and address validation providers (such as the Google Maps Platform when scheduling a visit), a provider of anti-bot protection for public forms (Cloudflare Turnstile), as well as providers of digital wallet services when you choose to use them.<\/p><p>Google Wallet and the future Apple Wallet integration are independent services provided by their respective providers. When you add a pass to such a service, their terms and policies also apply.<\/p><p>When a service provider processes data on our behalf, we require appropriate contractual and organizational safeguards. For transfers outside the European Economic Area, we use the applicable safeguards when necessary.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"retention\"><div class=\"bdr-legal-number\">06<\/div><div class=\"bdr-legal-copy\"><h2>Storage periods<\/h2><p>We retain data only as long as it is necessary for the purpose for which it was collected. Your My BARDARO profile and digital business card are retained as long as your account is active, unless limited retention is required after the account is closed.<\/p><p>Documents and data related to orders, payments, accounting, and tax obligations may be retained for the periods required by applicable law. Data necessary to establish, exercise, or defend legal claims may be retained until such need ceases to exist.<\/p><p>Concierge requests, visits, and related communications are retained for as long as necessary to provide the service and for a reasonable period thereafter to maintain a record of customer service, unless a longer retention period is required by law or to protect rights.<\/p><p>Requests to exercise rights are retained to a limited extent so that we can prove their receipt and fulfillment. Records of acceptance of terms and conditions and of public postings are part of the My BARDARO account, are included in the personal copy of the data, and are deleted along with the Client Hub account upon fulfillment of a request for complete deletion, unless applicable law requires otherwise at that time.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"rights\"><div class=\"bdr-legal-number\">07<\/div><div class=\"bdr-legal-copy\"><h2>Your Rights<\/h2><p>In accordance with applicable law, you may request access to, correction of, or erasure of your personal data; restrict its processing; object to certain processing; receive the applicable data in a portable format; and withdraw your consent.<\/p><div class=\"bdr-legal-callout\"><strong>My BARDARO \u00b7 Account and Privacy<\/strong><p>From there, you can directly obtain a personal copy of your data, a data portability file, and submit a request for account closure and data deletion.<\/p><a href=\"https:\/\/bardaro.eu\/en\/my-bardaro\/privacy\/\">Open Account and Privacy \u2192<\/a><\/div><p>As a general rule, we will respond without undue delay and within one month; however, in the case of complex or numerous requests, this period may be extended in the instances provided for by law. The right to erasure is not absolute\u2014certain records may be retained when required by law or when necessary to defend legal claims.<\/p><p>You have the right to file a complaint with the Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., <a href=\"https:\/\/cpdp.bg\/\" target=\"_blank\" rel=\"noopener\">cpdp.bg<\/a>.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"security\"><div class=\"bdr-legal-number\">08<\/div><div class=\"bdr-legal-copy\"><h2>Security<\/h2><p>We use organizational and technical measures to protect profiles and personal data, including secure access, HTTPS, restricted administrative access, protection of sensitive system identifiers, and mechanisms to prevent misuse. Passwords are not stored in plain text.<\/p><p>No online system can guarantee absolute security. If we detect a security breach, we will take the actions required by applicable law.<\/p><\/div><\/section><section class=\"bdr-legal-section\" id=\"changes\"><div class=\"bdr-legal-number\">09<\/div><div class=\"bdr-legal-copy\"><h2>Changes and Contact Information<\/h2><p>We may update this policy in response to changes in our services, technologies, or legal requirements. The current version is always posted on this page. In the event of a significant change that affects My BARDARO users, we may also provide additional notice.<\/p><p>Questions regarding confidentiality: <a href=\"mailto:office@bardaro.eu\">office@bardaro.eu<\/a>.<\/p><\/div><\/section><\/div><\/div><\/div><\/main>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Who we are<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>Our website address is: https:\/\/bardaro.eu.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Comments<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor&#8217;s IP address and browser user agent string to help spam detection.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:paragraph -->\n<p>An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https:\/\/automattic.com\/privacy\/. After approval of your comment, your profile picture is visible to the public in the context of your comment.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Media<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Cookies<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:paragraph -->\n<p>If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:paragraph -->\n<p>When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select &quot;Remember Me&quot;, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:paragraph -->\n<p>If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Embedded content from other websites<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:paragraph -->\n<p>These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Who we share your data with<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you request a password reset, your IP address will be included in the reset email.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">How long we retain your data<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:paragraph -->\n<p>For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">What rights you have over your data<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.<\/p>\n<!-- \/wp:paragraph -->\n<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">Where your data is sent<\/h2>\n<!-- \/wp:heading -->\n<!-- wp:paragraph -->\n<p><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>Visitor comments may be checked through an automated spam detection service.<\/p>\n<!-- \/wp:paragraph -->\n","_et_gb_content_width":"","pagelayer_contact_templates":[],"_pagelayer_content":"","footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":6,"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":1121,"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/1121"}],"wp:attachment":[{"href":"https:\/\/bardaro.eu\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}