Privacy Policy and Cookies
1. Who we are
The website barsswim.ee is run by MTÜ Spordiklubi BARS (registry code 80596461, Maakri tn 44-4, 10145 Tallinn, Estonia). We are responsible for your personal data as its controller.
For any questions about your data: info@barsswim.ee, +372 610 4238.
2. What data we collect
When you sign up for a trial lesson or send us a request:
- the first and last name of the parent or adult student, phone number, email;
- the child's name and age;
- the chosen group, pool, date and language of lessons, answers to a short questionnaire (experience, goals);
- where you came to the site from (UTM tags of ad campaigns).
When you become a member of the club:
- contract details: name, email, phone, language of communication, students' names, the child's date of birth;
- invoices and payments: amount, invoice number, payment status (the payment itself is processed by our banking partner, card details never reach us);
- attendance and progress in training.
When you simply visit the site:
- technical data: IP address, browser, time of visit. They keep the site running and secure;
- cookies - see section 8.
We do not collect health data. If the coach needs to know something important for training, please tell them in person.
3. Why and on what legal basis
| Purpose | Legal basis under the GDPR |
|---|---|
| Signing you up for a trial lesson, replying to your request | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Running lessons, keeping attendance, invoicing and payment reminders | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting records | Legal obligation (Art. 6(1)(c), Estonian Accounting Act) |
| Protecting the site, fixing errors | Legitimate interest (Art. 6(1)(f)) |
| Understanding where clients come from (UTM tags) and improving sign-up | Legitimate interest (Art. 6(1)(f)) |
| Showing on a map where our pools are (Google Maps) | Legitimate interest (Art. 6(1)(f)) |
| Visit statistics and advertising (Google Analytics, Meta pixel) | Legitimate interest (Art. 6(1)(f)): to see what to improve on the site and how our ads perform. You can switch it off in "Cookie settings" |
| Newsletter and offers to those who subscribed | Your consent (Art. 6(1)(a)); you can unsubscribe in every email |
| Club news and offers to our clients | Legitimate interest (Art. 6(1)(f)) and § 103¹ of the Estonian Electronic Communications Act; you can unsubscribe in every email |
4. Children's data
A child's data is provided to us by a parent or legal guardian, who also gives consent where it is needed. We use children's data only to organise training and never for advertising.
5. Who we share data with
We do not sell your data. Club coaches and administrators have access to it to the extent their work requires.
We also work with partners that process data on our behalf and only on our instructions (data processors). These are:
- hosting and maintenance of the website server (data centre in the EU);
- a payment partner for online invoice payments;
- email and SMS reminder services;
- a newsletter service - only for those who subscribed;
- statistics and website error reporting services;
- Google and Meta - visit statistics and advertising (you can switch these off in "Cookie settings", see section 8), and the Google Maps pool map.
Each partner is bound by a contract or data processing terms and must protect the data at least as well as we do. We will send you the list of specific partners on request - write to info@barsswim.ee.
The club's mobile app has a separate privacy policy.
We disclose data to public authorities only when the law requires it.
6. Transfers outside the EU
Some partners (for example Google and Meta) are based in the USA. We only work with those that take part in the EU-U.S. Data Privacy Framework or have signed the European Commission's Standard Contractual Clauses (SCC), so your data is protected by the same rules as in the EU.
7. How long we keep data
| Data | Period |
|---|---|
| Requests and trial lesson sign-ups, if you did not become a member | 2 years after the last contact |
| Contract data, attendance | While the contract is valid and 3 years after it ends |
| Invoices and accounting records | 7 years (required by law) |
| Cookie consent log | 3 years |
| Technical server logs | up to 30 days |
| Google Analytics statistics | 14 months |
After that we delete the data or anonymise it.
8. Cookies
Cookies are small files a website stores in your browser. We sort them into groups. Statistics and advertising cookies are on by default. You can switch them off at any time with the link at the bottom of every page - after that they are no longer used, and the ones already stored are deleted.
| Group | What it is | Cookies | Duration |
|---|---|---|---|
| Essential (always on) | Running the site: session, form protection, your cookie choice | barsswim_session, XSRF-TOKEN, bars_cookie_consent | 3 days; your choice - 6 months |
| Analytics (can be switched off) | Google Analytics: which pages are useful and where visitors struggle | _ga, _ga_* | 2 years |
| Advertising (can be switched off) | Meta pixel: showing our ads and measuring them | _fbp, _fbc | 3 months |
If you have switched statistics or advertising off, Google and Meta receive a "no consent" signal, and the related scripts are not loaded.
The pool map runs on Google Maps. When a page with the map opens, Google receives your IP address and may use its own cookies on its own sites, according to Google's rules.
The site's fonts are loaded from our own server, not from Google's servers.
9. Your rights
You have the right to:
- find out what data we hold about you and get a copy of it;
- have inaccurate data corrected;
- ask us to delete your data if we have no legal reason to keep it;
- restrict the processing or object to it;
- receive your data in a convenient format to pass it on to another service;
- withdraw your consent at any time. This does not affect the lawfulness of anything done before the withdrawal.
Write to info@barsswim.ee - we reply within one month. If you believe we have breached your rights, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee).
10. How we protect data
The site only works over a secure connection (HTTPS). Only staff who need the data for their work can access it. We back up the database every day to secure storage so that nothing gets lost.
11. Changes to this policy
If we change the policy, the new version will appear on this page with a new date. If anything important about cookies changes, the site will ask for your consent again.
Last updated: 10.11.2026.