Legal
Privacy policy
Information on the processing of personal data in the BARAQ app, web administration, cloud services and website.
Effective date: 26 September 2026
This translation is for information only. The Czech version is legally binding.
1. Controller and scope
The controller of personal data is BARAQ SMART SYSTEMS s.r.o., Company ID 23050055, with its registered office at Úvoz 493/29, Staré Brno, 602 00 Brno, Czech Republic (“BARAQ”). This policy applies to the BARAQ mobile app, the web administration interface, the customer account, the related cloud services and the BARAQ website with its forms.
2. How the service works
The app is used to control a home control system. Depending on the configuration, it allows you to control lighting, air conditioning, doors, gates, vehicle charging and other devices, view their status, create automations and manage household members and their permissions. The scope of functions depends on the specific installation and the active cloud services.
3. Data we process
We may process your name, e-mail address, telephone number, login and verification data, the address and location of the installation, installation and device identifiers, user roles and permissions, household and automation settings, operational and security events, IP address, device type, app version, diagnostic logs, billing data and communication with customer support. We store passwords only in a securely derived form. We do not need to obtain full payment card details where the payment is processed by an external provider.
4. Location data
We distinguish between the location of the installation and the current location of the mobile device. The location of the installation is used mainly for localised weather and automations. The current location of the phone is used only after the user has voluntarily granted permission, for example to open the driveway gate automatically. We neither create nor centrally store a history of the user’s movements. The user can change the permission at any time in the phone settings; without it, only the location-dependent functions will not work.
5. Purposes and legal bases
We process account, installation and system-control data for the performance of a contract. We process security data and necessary diagnostic data on the basis of the performance of a contract and our legitimate interest in protecting the service, users and property. We process billing data to fulfil contractual and legal obligations. We use optional functions based on the phone’s location and optional analytics on the basis of consent. We send marketing on the basis of consent or in cases permitted by law; every commercial communication can be declined.
6. Household members and permissions
The owner or administrator of a household may invite other persons and determine which parts of the system they may control or view. Depending on the permissions, the owner or administrator may see their name, contact details, role and certain actions performed in the system. The administrator may add only authorised persons and must remove access from a person who no longer needs it. BARAQ staff may access the data only to the extent necessary for installation, security, diagnostics or support.
7. Recipients and data location
Data may be made available to authorised household members, to providers of hosting, analytics, communication, payment and weather-data services, to installation or service partners and to public authorities where required by law. We will provide the current list of providers on request at info@baraq.cz. The primary cloud infrastructure is located in the Czech Republic. Any transfer outside the European Economic Area will take place only with appropriate legal safeguards. We do not sell personal data.
8. Retention period
We keep account data for as long as the account exists, and necessary data generally for no more than 3 years after its cancellation because of legal claims. We keep the location of the installation for as long as it is linked to the service; we do not store the phone’s movement history. We keep security and diagnostic logs only for as long as necessary for their purpose. We keep accounting documents for the statutory period, and data based on consent until the consent is withdrawn or the purpose concerned ends.
9. Minor users
A household member may be a minor. The account of a minor must be created or approved by their legal representative if the minor cannot act independently. Where processing is based on consent and the user is under 15 years of age, the consent must be given or approved by the person exercising parental responsibility. Paid cloud services are ordered by an adult or by another person with the capacity to do so.
10. Website and enquiry forms
When you contact us through a form on the BARAQ website, we process the details you enter. For the contact form, that is your name, e-mail address, message and, where applicable, the topic you are writing about. The enquiry form for the special offer also asks for the stage of your project and, optionally, your phone number and building location. If you have the calculator send you an estimate by e-mail, we process the e-mail address you enter and the details of the house you filled in. We use this data to answer your enquiry and, where appropriate, to prepare an offer. The legal basis is taking steps at your request before entering into a contract, and our legitimate interest in answering the enquiry you sent us. The form content reaches our team by e-mail through our e-mail service provider; we send a confirmation to the address you give and, for the calculator, its summary. We keep the data only as long as needed to handle the enquiry and any cooperation that follows, unless the law requires us to keep it longer. If you subscribe to our news, we process your email address, the website language, the place on the website where you signed up, and the times of signing up, confirming and, where applicable, unsubscribing. We send the news (new features and modules, articles and BARAQ offers) only with your consent, which you confirm through the link in an email. You can withdraw your consent at any time through the link in every email or by writing to info@baraq.cz. Unconfirmed sign-ups are deleted within 30 days. After you unsubscribe, we keep only the address with a record of the unsubscription, so that we do not send you anything again. If you have agreed to cookies, we also store your browser’s PostHog identifier with the sign-up, so that we can see from which part of the website people sign up.
12. Your rights and account cancellation
You have the right of access, rectification, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interest and withdraw your consent at any time. The account can be cancelled in the app or via info@baraq.cz. Before handling a request, we may verify your identity to a reasonable extent. A complaint may be lodged with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
13. Security
We use appropriate technical and organisational measures, in particular encrypted communication, secure storage of login credentials, management of roles and permissions, restriction of staff access and security logs. The user is responsible for securing their device and login credentials and must report any suspected misuse of the account without undue delay.
14. Changes to this policy
We may reasonably update this policy when the service, technologies or legislation change. We will inform users of material changes through the app, by e-mail or by other appropriate means.
Contact
BARAQ SMART SYSTEMS s.r.o. Company ID: 23050055 Úvoz 493/29, Staré Brno, 602 00 Brno, Czech Republic Email: info@baraq.cz Phone: +420 703 563 414