PRIVACY POLICY – Boards Source
Boards Source, owner of the website boardssource-pro.com, acts as the data controller for the collection and processing of personal data as described in this Privacy Policy.
1. PERSONAL DATA COLLECTED
1.1 Data You Provide Directly
When you use the Boards Source e-commerce website, we may collect the following personal data:
- Title, first name, last name
- Email address and password
- Billing and delivery address
- Postal code, city, country
- Phone number
These data are collected when you create an account, place an order, or use our online shop.
When you contact us via a form, we also collect the information you provide, typically:
- Name
- Email address
- Phone number
- Message content
1.2 Data Collected Automatically
When you browse the website, certain data are collected automatically:
- IP address
- Browser type, version, and language
- Operating system and version
- Screen resolution and device type
- Approximate geographic location (city level only)
For statistical and technical purposes, we may also collect:
- Pages visited and URLs
- Date, time, and duration of visits
- Traffic source (direct access, search engine, social media, newsletter, advertisement, external website)
- Referring URL
- Search keywords used to find the site (when available)
2. PURPOSES OF DATA PROCESSING
Your personal data are processed for the following purposes:
- Processing, managing, and delivering orders
- Managing customer accounts
- Customer support and communication
- Legal and accounting obligations
- Sending marketing emails or newsletters only with your explicit consent
- Website security and fraud prevention
- Statistical analysis and website performance improvement
Data processing is strictly limited to what is necessary for these purposes (data minimization principle).
3. LEGAL BASIS FOR PROCESSING
Personal data are processed on the following legal grounds:
- Performance of a contract (order processing, delivery, customer account)
- Legal obligation (accounting, invoicing)
- Legitimate interest (website security, fraud prevention, service improvement)
- Consent (newsletters, cookies, analytics where required)
You may withdraw your consent at any time.
4. DATA SHARING
Personal data are accessible only to authorized persons and service providers strictly necessary for operating the e-commerce website, including:
- Technical and IT service providers
- Website hosting provider
- Analytics providers (e.g. Google Analytics 4, subject to consent)
We do not sell your personal data.
Data may only be disclosed to third parties if:
- You explicitly request or authorize it;
- It is necessary to provide a service you requested;
- Disclosure is required by law or by a judicial or regulatory authority.
5. DATA RETENTION PERIOD
- Analytics data: retained for a maximum of 26 months
- Customer account and order data: retained for the legal duration required for accounting and tax purposes
- Contact form data: retained until deletion is requested or no longer necessary
Data are deleted or anonymized once retention periods expire.
6. COOKIES AND TRACKING TECHNOLOGIES
Cookies and similar technologies are used only after obtaining your explicit consent, except for cookies strictly necessary for website operation.
You may modify or withdraw your cookie consent at any time via the cookie management icon on the website.
- Cookie consent validity: 13 months
7. NEWSLETTERS AND MARKETING EMAILS
Marketing emails and newsletters are sent only if you have given your explicit consent.
Unsubscription
Each email contains an unsubscribe link allowing you to opt out at any time.
8. EMAIL STATISTICS
Our emails may include tracking indicators allowing us to measure:
- Open rates
- Clicked links
- Unsubscriptions
- Spam reports
These data are used solely for statistical and improvement purposes.
9. DATA SECURITY
We implement appropriate technical and organizational measures to protect personal data, including:
- HTTPS encryption using TLS certificates
- Secure hosting infrastructure
- Password hashing
- Restricted access to personal data
10. LINKS TO THIRD-PARTY WEBSITES
The Boards Source website may contain links to external websites.
We are not responsible for the privacy practices or content of those third-party sites.
11. YOUR RIGHTS
In accordance with the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request data erasure
- Restrict processing
- Object to processing
- Withdraw consent at any time
You may also lodge a complaint with the relevant data protection authority.
12. CONTACT
For any questions regarding this Privacy Policy or your personal data, you may contact us:
- Via the website contact form
- Using the contact details provided on the website