Privacy Policy

1. Who We Are (Data Controller)

The Website is operated by:

We are the "data controller" responsible for your personal data under the EU General Data Protection Regulation (GDPR).

2. What Data We Collect

a) Data you give us. When you submit the pre-order form, we collect your first name, last name, and email address.

b) Data collected automatically. When you visit the Website, the following data is processed automatically: your IP address, browser type and version, operating system, device type, referring website, pages visited, and date and time of access. This happens through our hosting provider's server logs and — only if you consent — through the analytics and marketing tools described in Section 4.

We do not knowingly collect data from anyone under 18 years of age.

3. Why We Process Your Data and On What Legal Basis

• To operate and secure the Website (server logs): legitimate interest, Art. 6(1)(f) GDPR.
• To record your pre-order interest (saving your contact details so we can notify you at launch): pre-contractual measures taken at your request, Art. 6(1)(b) GDPR.
• To send you marketing emails (news about Barision and our crowdfunding campaign): your consent, Art. 6(1)(a) GDPR. You can withdraw this consent at any time by clicking "unsubscribe" in any email or writing to info@barision.com. Marketing emails are sent only after a separate double opt-in confirmation, as required by German and EU law.
• Analytics and advertising measurement (Meta Pixel, and — if enabled in the future — Google Analytics): your consent, Art. 6(1)(a) GDPR, given via the cookie banner. You can withdraw it at any time via the cookie settings link in the Website footer.

4. Who Receives Your Data (Processors and Third Parties)

We share personal data only with service providers that help us run the Website:

• UltaHost — web hosting. Our server is located in the United States, so technical data (including IP addresses in server logs) is processed there. Pre-order form submissions are processed by n8n, a workflow automation tool running on our own server (self-hosted on the same UltaHost infrastructure as the Website).
• Google (Google Ireland Ltd. / Google LLC, USA) — Google Sheets (storage of pre-order submissions, accessed by our service account barision@barision.iam.gserviceaccount.com; the Sheet contains: email, first name, last name, created/updated timestamp, and the marketing-consent flag).
• Meta Platforms (Meta Platforms Ireland Ltd. / Meta Platforms Inc., USA) — Meta Pixel for measuring the effectiveness of our advertising, only if you consent via the cookie banner.
• Klaviyo (Klaviyo, Inc., USA) — sending marketing emails and managing our email list, only after your double opt-in confirmation.

We do not sell your personal data, and we do not share it with anyone else except where required by law.

5. International Data Transfers

Some of the providers above process data in the United States. Where data is transferred outside the EU/EEA, we rely on the EU–US Data Privacy Framework (where the provider is certified) and/or the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

6. How Long We Keep Your Data

• Pre-order contact data (name, email): until our crowdfunding campaign is completed, or until you ask us to delete it — whichever comes first.
• Marketing email list: until you unsubscribe or ask us to delete your data.
• Server logs: automatically deleted by our hosting provider on a rolling basis.
• Analytics data: per the retention settings of the analytics tool in use.

7. Your Rights

Under the GDPR you have the right to: access your data (Art. 15), correct it (Art. 16), delete it (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing based on legitimate interest (Art. 21), and withdraw any consent at any time with effect for the future (Art. 7(3)).

To exercise any of these rights, email us at info@barision.com. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular the authority of your habitual residence or of our location (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, www.datenschutz.rlp.de).

8. Information for US Residents

Depending on your state of residence (e.g., California, Colorado, Virginia), you may have additional rights, including the right to know, delete, and correct personal information and the right to opt out of "sharing" for targeted advertising.

Categories of personal information we have collected in the last 12 months:

We do not sell personal information. The use of Meta Pixel may qualify as "sharing" for cross-context behavioral advertising under California law; you can opt out by rejecting these tools in our cookie banner. To exercise your rights, email info@barision.com.

9. Security

We use appropriate technical and organizational measures (including HTTPS encryption) to protect your data. No method of transmission over the Internet is 100% secure, but we work to protect your information in line with industry standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the "Last updated" date above.