Privacy policy

Last updated: 26.10.2026

This policy explains how we process personal data when you visit or shop on bargear.dk, bargear.se, bar-gear.de or bargear.eu, and when you contact us.

1. Data controller

Hospitality Line ApS (BarGear)
CVR no. 44898438
Alstrup Skovvej 18, 4840 Nørre Alslev, Denmark
Email: info@bargear.dk · Contact form: bargear.eu/pages/kontakt-os

We have not appointed a data protection officer (DPO), as we are not required to. If you have questions about your data, write to info@bargear.dk.

2. What we process, why, on what legal basis and for how long

Purpose Data Legal basis Retention
Processing and delivering your order, including payment, shipping and order emails Name, address, email, phone, order contents, payment status (not full card details), delivery choice Performance of a contract, Art. 6(1)(b) GDPR Until the order is completed. Accounting records are then kept as below.
Bookkeeping and accounting Invoices, order and payment data Legal obligation, Art. 6(1)(c) (Danish Bookkeeping Act, bogføringsloven) 5 years from the end of the financial year the data relates to
Withdrawal, complaints and customer service Contact details, order, your enquiry, any photos Contract (b), legal obligation (c) and our legitimate interest in documenting the case (f) 3 years after the case is closed (limitation period). For Swedish customers, 3 years from delivery plus the limitation period.
18+ age limit for alcoholic products Age confirmation at purchase Legal obligation (c) and legitimate interest (f) Kept with the order
Customer account Name, email, addresses, order history Contract (b) Until you delete the account. Accounts with no activity for 3 years are deleted.
Newsletter and email marketing Email, name, purchase and click history, interests Consent (a) and the rules on electronic marketing Until you withdraw consent. Proof of consent is kept for 2 years after that.
Back-in-stock notifications Email, product Consent (a) Until the notification is sent, for no more than 12 months
Product reviews Name, email, review, any photos Consent (a) For as long as the review is published, or until you ask us to delete it
Price match and B2B enquiries Contact details, company details, your enquiry Contract / pre-contractual steps (b) and legitimate interest (f) 3 years after the last contact
Statistics and marketing via cookies and pixels Online identifiers, IP address, device, on-site behaviour, purchases Consent (a) and the cookie rules See the cookie policy
Security and fraud prevention, including spam protection for forms IP address, device, order and payment data Legitimate interest (f) in protecting the shop and our customers As long as needed for the purpose, for no more than 12 months unless a case requires longer

Legitimate interests: where we rely on Art. 6(1)(f), we have weighed our interests against yours. We have concluded that our interest in running a secure shop, documenting customer cases and defending legal claims outweighs your interest in the data not being processed.

You must provide the data needed to complete an order, otherwise we cannot deliver. Everything else is voluntary.

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

3. Who we share data with

Processors handle data on our behalf and on our instructions. We have data processing agreements with them.

Provider Task Where data is processed Basis for transfer to third countries
Shopify International Ltd. (Ireland) Shop platform, checkout, customer accounts, order emails, Shopify Email/Messaging, Shopify Forms, Shopify Flow EU, Canada and USA Canada: EU adequacy decision. USA: EU-US Data Privacy Framework and/or EU Standard Contractual Clauses (SCCs).
Klaviyo, Inc. (USA) Newsletters, automated emails, on-site measurement USA and EU DPF and/or SCCs
Herodesk ApS (Denmark) Customer service system (email and enquiries) EU Not applicable
Posten Bring AS / Bring Shelfless (Norway/Denmark) Warehouse, packing, Bring Checkout and shipping EU/EEA Not applicable
Ongoing Warehouse AB (Sweden) Warehouse management system (WMS) used for the warehouse EU Not applicable
Shipmondo, Homerunner and Pakkeshopper (Denmark) Shipping bookings, labels and parcel shop selection EU Not applicable
Judge.me Collecting and displaying reviews See the provider's privacy policy DPF and/or SCCs if data is transferred outside the EU/EEA
Make (Celonis/Make s.r.o., Czech Republic) Automating workflows between systems See the provider's privacy policy DPF and/or SCCs if data is transferred outside the EU/EEA
Conversio Hub Conversion measurement See the provider's privacy policy DPF and/or SCCs if data is transferred outside the EU/EEA

We also use providers of email, accounting software and IT operations who process data on our behalf.

Independent controllers receive data that they process for their own purposes under their own privacy policies:

  • Payment providers: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) and MobilePay/Vipps MobilePay.
  • Carriers: for example Bring, PostNord and DAO. They receive your name, address, phone and email so they can deliver and notify you.
  • Marketplaces: Kaufland and other channels via Shopify Marketplace Connect, when you buy there.
  • Meta Platforms Ireland Ltd.: the Meta pixel, only with your consent.
    • We are joint controllers with Meta for collecting and transmitting data from the shop (Art. 26). Meta is responsible for further processing.
    • Transfers to the USA are based on the DPF and SCCs.
  • Google Ireland Ltd.: Google Tag Manager and any Google statistics and advertising services, only with your consent.
    • Google reCAPTCHA protects forms against spam.
    • Transfers to the USA are based on the DPF and SCCs.
  • Daisycon B.V. (Netherlands): affiliate tracking, only with your consent. We record which partner site you came from so the partner can earn a commission.
  • Authorities, advisers, auditors and debt collection agencies: where the law requires it, or where it is needed to establish or defend legal claims.

We do not sell your personal data.

4. Transfers outside the EU/EEA

Some providers process data in the USA or Canada. This only happens on a valid transfer basis:

  • EU adequacy decisions. These cover Canada and US recipients certified under the EU-US Data Privacy Framework.
  • EU Standard Contractual Clauses (SCCs) with supplementary measures.

Contact us if you would like a copy of the relevant safeguards.

5. Your rights

You have the right to:

  • access the data we hold about you
  • have incorrect data corrected
  • have data erased
  • restrict processing
  • receive your data in a structured format (data portability)
  • object to processing based on legitimate interest
  • object to direct marketing at any time. If you do, we will stop.
  • withdraw consent at any time. This does not affect the lawfulness of processing carried out before you withdrew it.

Write to info@bargear.dk. We will reply within one month.

6. Complaints to a supervisory authority

You can complain to a data protection authority. We are established in Denmark, so our lead authority is Datatilsynet. You can also complain in the country where you live or work.

  • Denmark: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby
    • Email: dt@datatilsynet.dk
    • Website: datatilsynet.dk
  • Sweden: Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm
    • Email: imy@imy.se
    • Website: imy.se
  • Germany: the data protection authority of your federal state. A list is available from the Federal Commissioner for Data Protection and Freedom of Information (bfdi.bund.de).

7. Security

We protect your data with appropriate technical and organisational measures. These include an encrypted connection (HTTPS), access controls and data processing agreements.

We do not store your full card details. The payment provider handles them.

8. Changes

We update this policy when our processing changes. The date at the top shows when it was last changed.