Privacy policy

Contents

SUMMARY
1. DATA CONTROLLER
2. WHAT PERSONAL DATA WE COLLECT
3. PURPOSES AND LEGAL BASIS
4. WHO WE SHARE YOUR DATA WITH
5. TRANSFERS TO COUNTRIES OUTSIDE THE EU/EEA
6. HOW LONG WE KEEP YOUR DATA
7. SECURITY
8. YOUR RIGHTS
9. NEWSLETTER AND MARKETING
10. COOKIES
11. HOW TO COMPLAIN
12. CHANGES

Effective from: 25 November 2025

SUMMARY

This privacy policy explains how we process your personal data when you shop with us or use our services.

1. About us: Barefoot ApS (CVR 39363518) operates Mærkbare with an online shop and two physical shops in Copenhagen.

2. Collection: We collect your name, address, email, telephone number, order history and technical data (IP address, browser type).

3. Purposes: We use data to complete purchases, deliver goods, provide customer service and comply with legal requirements.

4. Sharing: We share with payment providers (Shopify Payments, Flatpay), a delivery company (GLS), customer service (Commslayer) and marketing platforms (Meta, Google) – only what is necessary.

5. Transfers to the USA: Shopify, Meta and Google transfer data to the USA under the EU-US Data Privacy Framework.

6. Retention: A minimum of 5 years for order data (the Danish Bookkeeping Act). Other data is kept until you request deletion.

7. Rights: You can access, correct, delete or receive your data. You can also object to processing.

8. Cookies: We use cookies for functionality, analytics and marketing. You can manage cookies through our cookie banner.

9. Newsletter: Requires your affirmative consent. You can unsubscribe at any time.

10. Contact: support@maerkbare.dk or tel. +45 53803340.

1. DATA CONTROLLER

1.1 Barefoot ApS is the data controller for the processing of your personal data.

Barefoot ApS
CVR no.: 39363518
Gammel Kongevej 19, 1610 København V, Danmark

Telephone: +45 53803340
Email: support@maerkbare.dk
Website: www.maerkbare.dk

1.2 We have not appointed a data protection officer (DPO), as this is not required for our type of business. Contact us at the email address above with questions about data protection.

2. WHAT PERSONAL DATA WE COLLECT

Information you provide:

2.1 Contact details: Name, address, email, telephone number.

2.2 Order information: Goods, sizes, amounts, payment method.

2.3 Communication: Customer service enquiries, chat messages.

Information we collect automatically:

2.4 Technical data: IP address, browser type, device type, operating system.

2.5 Usage data: Pages visited, click patterns, time of visit.

Information from third parties:

2.6 Payment providers: Payment confirmation (not card details).

2.7 Delivery company: Delivery status.

3. PURPOSES AND LEGAL BASIS

We process your personal data for the following purposes:

Purpose	Legal basis (GDPR)
Complete and deliver your order	Performance of a contract (art. 6.1.b)
Communicate about your order	Performance of a contract (art. 6.1.b)
Customer service and support	Performance of a contract (art. 6.1.b)
Bookkeeping and accounting	Legal obligation (art. 6.1.c)
Prevent fraud and misuse	Legitimate interest (art. 6.1.f)
Improve our website and services	Legitimate interest (art. 6.1.f)
Send newsletters and marketing	Consent (art. 6.1.a)
Show relevant adverts	Consent (art. 6.1.a)

3.1 About legitimate interest: When we process data on the basis of legitimate interest, we have assessed that our interest does not outweigh your right to privacy. You can object to this processing, see §8.

4. WHO WE SHARE YOUR DATA WITH

We only share your personal data when necessary to provide our services or comply with legal requirements.

Data processors (acting on our behalf):

Category	Company	Purpose	Location
E-commerce platform	Shopify	Online shop, order management, email	USA/EU
Payment	Shopify Payments	Card payments	USA/EU
Payment	Flatpay	Card payments, MobilePay	Denmark
Shipping	GLS	Parcel delivery	EU
Customer service	Commslayer	Support, live chat	Finland (EU)

Marketing partners:

4.1 With your consent, we share data with:

Company	Purpose	Location
Meta (Facebook/Instagram)	Advertising, targeting	USA
Google	Advertising, analytics	USA

4.2 You can withdraw your consent through our cookie banner or by contacting us, see §1.

Authorities:

4.3 We only disclose personal data to authorities when legally obliged to do so.

5. TRANSFERS TO COUNTRIES OUTSIDE THE EU/EEA

Some of our data processors transfer personal data to the USA:

Company	Basis for transfer
Shopify	EU-US Data Privacy Framework
Meta	EU-US Data Privacy Framework
Google	EU-US Data Privacy Framework

5.1 The EU-US Data Privacy Framework ensures that these companies comply with a level of protection equivalent to the EU’s.

6. HOW LONG WE KEEP YOUR DATA

Data type	Retention period	Reason
Order data and invoices	A minimum of 5 years	The Danish Bookkeeping Act
Customer account	Until you request deletion	Maintaining the customer relationship
Customer service enquiries	Until you request deletion	Documentation and service
Newsletter subscription	Until you unsubscribe	Consent-based
Technical logs	Up to 26 months	Security and troubleshooting

6.1 We may be obliged to keep certain data for longer if required by law or if a dispute is ongoing.

7. SECURITY

We protect your personal data with appropriate technical and organisational measures:

7.1 Encryption: All data transmission takes place via SSL/HTTPS.

7.2 Access control: Only relevant employees have access to personal data.

7.3 Secure hosting: Our online shop is hosted by Shopify, which maintains high security standards.

7.4 Payment security: We do not store your card details – payments are handled by certified payment providers.

8. YOUR RIGHTS

You have the following rights under the GDPR:

8.1 Right of access (art. 15): You can find out what personal data we process about you and obtain a copy.

8.2 Right to rectification (art. 16): You can have incorrect information about you corrected.

8.3 Right to erasure (art. 17): You can ask us to delete your personal data unless we are obliged to keep it (e.g. under the Danish Bookkeeping Act).

8.4 Right to restriction of processing (art. 18): You can ask us to restrict the processing of your information in certain situations.

8.5 Right to data portability (art. 20): You can receive your information in a structured, machine-readable format.

8.6 Right to object (art. 21): You can object to processing based on legitimate interest. We will then assess whether we have compelling grounds to continue processing.

8.7 Right to withdraw consent (art. 7.3): If processing is based on consent (e.g. newsletters or marketing cookies), you can withdraw your consent at any time. This does not affect the lawfulness of processing that took place before withdrawal.

8.8 How to exercise your rights: Contact us, see §1. We respond to enquiries within 30 days.

9. NEWSLETTER AND MARKETING

9.1 Subscription: You can subscribe to our newsletter by giving your affirmative consent (checkbox). We use double opt-in, which means you must confirm your subscription by email.

9.2 Content: The newsletter may contain information about new products, offers, campaigns and inspiration about barefoot shoes.

9.3 Unsubscribing: You can unsubscribe at any time using the link at the bottom of each email or by contacting us, see §1.

9.4 Transactional emails: Emails about your order (order confirmation, shipping information, etc.) are not marketing and are sent regardless of newsletter subscription, as they are necessary to fulfil our contract.

10. COOKIES

We use cookies and similar technologies on our website. Cookies are small text files stored on your device.

Types of cookies:

Type	Purpose	Requires consent
Essential	Make the online shop work (basket, login)	No
Functional	Remember your preferences	Yes
Statistics	Understand how the website is used (Shopify Analytics)	Yes
Marketing	Show relevant adverts (Meta Pixel, Google Ads)	Yes

10.1 Manage cookies: The first time you visit our website, a cookie banner appears where you can choose which cookies to accept. You can change your choices at any time through the cookie settings on our website.

10.2 Blocking cookies: You can also block cookies in your browser settings. Please note that this may affect the website's functionality.

11. HOW TO COMPLAIN

11.1 If you are dissatisfied with our processing of your personal data, you can complain to:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby
Telephone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk

11.2 You can also use the EU’s online complaints portal: https://ec.europa.eu/consumers/odr

12. CHANGES

12.1 We may update this privacy policy if our data processing changes or if legislation requires it. The current version is always available at www.maerkbare.dk/policies/privacy-policy.

12.2 If there are significant changes that affect you, we will inform you by email or on our website.

Barefoot ApS
CVR no.: 39363518
Gammel Kongevej 19, 1610 København V

Telephone: +45 53803340
Email: support@maerkbare.dk

Last updated: 25 November 2025 (v1.0)