Privacy Policy

Last updated: 03 July 2026

1. Who We Are

Our website address is: https://harunaru.eu.

The operator of this e-shop is:
Bramasole Prague s.r.o.
Oldřichova 506/14
128 00 Praha – Nusle
Czech Republic
Company ID: 04741439
VAT ID: CZ04741439
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 251893.

Privacy contact: info@harunaru.eu.

We operate an online store using WordPress and WooCommerce and process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech law.

2. What Personal Data We Collect and Why

a) Orders and Customers

When you place an order, we collect the information necessary to process and deliver the order, including:

• Name and surname
• Billing and shipping address
• Email address
• Phone number
• Order details, products, price and selected payment method

Purposes: processing and fulfilling orders, accounting and tax obligations, customer communication, complaint handling and legal claims.

Legal basis: performance of a contract (Article 6(1)(b) GDPR), compliance with a legal obligation (Article 6(1)(c) GDPR), and our legitimate interests in managing claims, fraud prevention and website security (Article 6(1)(f) GDPR).

b) User Accounts

If you create an account, we store the personal information provided in your profile. You can view, edit or delete your account data at any time, except data that must be retained for legal, accounting, tax, security or claims purposes. Website administrators may view and edit account data where necessary to operate the website and provide customer support.

c) Comments

When visitors leave comments on the site, we collect the data shown in the comment form, the visitor IP address and browser user agent to help spam detection and site security. An anonymized hash of your email address may be sent to Gravatar. Gravatar’s privacy policy is available at https://automattic.com/privacy/.

d) Media Uploads

If you upload images to the website, avoid uploading images with embedded EXIF GPS location data, as visitors may be able to download and extract this information.

e) Customer Support, Website Security and Legal Claims

When you contact us or use our website, we may process your name and contact details, order and transaction information, communications with customer support, IP address, device and browser information, and information reasonably necessary to investigate fraud, misuse or security incidents.

Purposes include responding to enquiries, resolving complaints and disputes, protecting the website, preventing fraud and misuse, and establishing, exercising or defending legal claims.

f) Marketing Communications

If you subscribe to our newsletter or otherwise provide valid consent, we may process your name, email address and marketing preferences to send product news, offers and HARUNARU updates. Marketing communications may be distributed using Brevo or another email service provider acting on our behalf.

Legal basis: your consent. You may withdraw consent or unsubscribe at any time by using the unsubscribe link in the email or by contacting info@harunaru.eu. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3. Cookies

We use cookies and similar technologies to operate the website, maintain the shopping cart, process checkout, provide security, remember user preferences and improve the website.

Necessary cookies are used where required to provide the service requested by the user. Non-essential analytics and marketing cookies are used only after consent where required by applicable law. You may reject non-essential cookies or withdraw consent at any time through the Cookie Settings available on our website.

WooCommerce cookies may store cart contents, checkout status and session identifiers. They do not store complete payment card details. Comment, login and editing cookies may be used by WordPress to provide convenience and security features. More detailed information about individual cookies, including provider, purpose, category and retention period, is provided in our Cookie Policy or cookie preference tool.

4. Embedded Content from Other Websites

Articles or pages may include embedded content, such as videos, images or social media content. Embedded content from other websites behaves as if you visited the third-party website directly. These third-party services may collect data about you, use cookies and track your interaction with the embedded content according to their own privacy policies.

5. Analytics and Marketing Technologies

Subject to your consent where required, we may use analytics and marketing technologies, including Amplitude Analytics, Google Analytics 4 and Meta Pixel. Depending on the service and configuration, these providers may process information such as IP address, device and browser information, approximate location, pages viewed, referring website, website and checkout interactions, session identifiers, and purchase or conversion information.

6. Payments

Payments are processed by the payment methods and payment service providers displayed during checkout. Depending on the payment method selected, this may include WooPayments, card payment providers, bank transfer providers or other providers available at checkout.

The payment provider may process information necessary to complete the payment, including name and contact details, billing information, payment amount and currency, transaction identifiers, device information, IP address and fraud-prevention information.

The legal basis for this processing is the performance of the purchase contract, compliance with legal obligations and, where applicable, the legitimate interest of preventing fraudulent transactions. We do not receive or store complete payment card details on our servers. The actual payment service provider used for each transaction processes personal data according to its own privacy notice.

7. Who We Share Your Data With

We may share personal data, where necessary, with the following categories of recipients:

• Payment service providers
• Packeta / Zásilkovna and other delivery providers
• Website hosting and technical service providers
• WordPress and WooCommerce service providers
• Analytics providers, including Amplitude and Google, where permitted
• Advertising providers, including Meta, where marketing consent has been provided
• Email and newsletter providers, including Brevo
• Accounting, tax, legal and professional advisers
• Public authorities where disclosure is required by law

These recipients may act as our processors or, in some cases, as independent data controllers. We share only the personal data reasonably necessary for the relevant service or legal purpose. If you request a password reset, your IP address may be included in the reset email.

8. How Long We Retain Your Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy and to comply with legal obligations.

• Order, invoice and accounting data are retained for statutory periods required under applicable Czech accounting and tax laws.
• Customer account data are retained while the account remains active and are deleted or anonymized after the account is closed, except where retention is required by law or necessary for legal claims.
• Customer-support communications are retained for as long as reasonably necessary to resolve the enquiry, complaint or related legal claim.
• Marketing data are retained until consent is withdrawn or the user unsubscribes. We may retain a minimal suppression record to ensure that no further marketing messages are sent.
• Analytics information is retained according to the settings configured in the relevant analytics platform and the periods disclosed in our Cookie Policy or cookie preference tool.
• Comments are retained until removed, unless a longer period is necessary for security, moderation or legal purposes.

When personal data are no longer required, they are securely deleted or anonymized.

9. Your Rights Under GDPR

Subject to the conditions provided by applicable law, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete personal data
• Request erasure of your personal data
• Restrict processing
• Receive your personal data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority
• Request information about applicable safeguards for international data transfers

Requests may be sent to info@harunaru.eu.

You also have the right to lodge a complaint with:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
Email: posta@uoou.gov.cz

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorized access, alteration, disclosure, loss or destruction.

11. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area. Where personal data are transferred outside the EEA, we use a lawful transfer mechanism as required by GDPR, such as a European Commission adequacy decision, the European Commission’s Standard Contractual Clauses or another transfer mechanism permitted under applicable data protection law. Where required, supplementary technical and organisational measures are used to protect transferred personal data.

Information about safeguards applicable to a particular transfer may be requested by contacting info@harunaru.eu.

12. Required Information and Automated Decision-Making

Providing your name, delivery address, email address, telephone number and necessary order and payment information is required to process and deliver an order. If this information is not provided, we may be unable to conclude or perform the purchase contract.

We do not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects for customers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page.