Privacy Policy of Boostboards KG

Modern information and communication technologies play an increasingly important role in the activities of companies like Boostboards KG. Therefore, we take the protection of your privacy and personal data, which you provide to us, very seriously. Compliance with data protection regulations, particularly the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telemedia Act (TMG), is a matter of course for us.

I. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:

Boostboards GmbH & Co. KG
Groten Hoff 21
22359 Hamburg
Germany
Phone: +34 722 706 653
Email: [info@boostboards.de](mailto:info@boostboards.de)
Website: [www.boostboards.de](http://www.boostboards.de)

II. Name and Address of the Data Protection Officer

The Data Protection Officer of the controller is:

Sebastian Keye
Groten Hoff 21
22359 Hamburg
Germany
Email: [datenschutz@boostboards.de](mailto:datenschutz@boostboards.de)

Our Data Protection Officer is available to users, particularly for questions regarding the processing of your personal data or data protection in general, as well as in the case of complaints.

III. General Information on Data Processing

1. Scope of Processing of Personal Data
We collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users regularly occurs only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by statutory provisions.

2. Legal Basis for the Processing of Personal Data
Where we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis. In the case of processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In cases where the processing is necessary for the performance of a task carried out in the public interest, Art. 6 para. 1 lit. e GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if this is provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of data also occurs when a storage period prescribed by the aforementioned standards expires unless there is a necessity for further storage of the data for a contract conclusion or fulfillment.

IV. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the accessing computer’s system. The following data is collected:
– Information about the browser type and version used
– The user’s operating system
– Date and time of access
– Websites from which the user’s system accesses our website
– Websites accessed by the user’s system via our website
– IP address of the user
– The page requested on our website

The data is also stored in the log files of our system. The log files contain IP addresses and store dates and times, allowing assignment to a user. These data are not stored together with other personal data of the user.

2. Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage in log files occurs to ensure the website’s functionality. Additionally, the data serves to optimize the website and to ensure the security of our information technology systems, particularly to defend against hacker attacks. There is no evaluation of the data for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.

4. Storage Duration
The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of data collection for the provision of the website, this is when the respective session has ended. In the case of storing the data in log files, this is the case after no more than seven days.

5. Objection and Removal Possibility
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.

V. Use of Cookies

1. Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require the browser to be identified even after a page change. The following data is stored and transmitted in the cookies:
– Saved items (wishlist)
– Sorting of product search (by relevance, price)

We also use cookies on our website that allow analyzing the users’ browsing behavior. The following data may be transmitted in this way:
– Entered search terms
– Frequency of page views
– Use of website functions
– Frequency of page views (including bounce rates, dwell time)
– Tracking selected events (contact inquiries, newsletter sign-ups, etc.)
– Source of website accesses and referrals visited
– Search terms used on the website

The user data collected in this way is pseudonymized through technical precautions. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users. When accessing our website, users are informed about the use of cookies for analysis purposes by an information banner and are referred to this privacy policy.

2. Legal Basis for Data Processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

3. Purpose of Data Processing
The purpose of using technically necessary cookies is to make websites easier to use for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change within the website. The following applications require cookies:
– Saving sorting parameters in the product search
– Saving selected items in the wishlist

The user data collected through technically necessary cookies is not used to create user profiles. The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and can thus continuously optimize our offer. These purposes also constitute our legitimate interest in processing personal data according to Art. 6 para. 1 lit. f GDPR.

4. Storage Duration, Objection, and Removal Possibility
Cookies are stored on the user’s computer and transmitted to our site. Therefore, you as the user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website fully. Cookies are stored either only for the duration of a session (so-called session cookies) or permanently, but are deleted no later than 26 months after accessing our website.

5. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your anonymized IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide other services relating to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law, or where such third parties process the information on Google’s behalf. Under no circumstances will Google associate your anonymized IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser;

however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: [Google Optout](https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent future collection by Google Analytics within this website (the opt-out works only in the browser and only for this domain), where an opt-out cookie is set on your device. If you delete the cookies in your browser, you must click this link again.

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website: [Disable Google Analytics](). For more information on terms of use and data protection, please visit [Google Analytics Terms of Service](https://www.google.com/analytics/terms/us.html) or [Google Privacy Policy](https://www.google.de/intl/en/policies/). Please note that this website uses Google Analytics with the extension “anonymizeIp” to ensure anonymized collection of IP addresses (so-called IP masking).

VI. Newsletter

1. Description and Scope of Data Processing
On our website, it is possible to subscribe to free newsletters. When registering for the newsletter, the data from the input mask is transmitted to us:
– Email address

The following data is also collected during registration:
– Date and time of registration

For the processing of the data, your consent is obtained during the registration process and you are referred to this privacy policy. In connection with the processing of data for the sending of newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.

2. Legal Basis for Data Processing
The legal basis for the processing of data after the user registers for the newsletter is the user’s consent, Art. 6 para. 1 lit. a GDPR.

3. Purpose of Data Processing
The collection of the user’s email address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

4. Storage Duration
The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case when you notify us by clicking the unsubscribe link that you are no longer interested in receiving our newsletter. The user’s email address is therefore only stored as long as the newsletter subscription is active. After unsubscribing from the newsletter, the personal data will be deleted within seven days.

5. Objection and Removal Possibility
The subscription to the newsletter can be canceled by the affected user at any time. For this purpose, there is a corresponding link in each newsletter. This also allows a revocation of the consent to store the personal data collected during the registration process.

VII. Contact Form and Email Contact

1. Description and Scope of Data Processing
Our website includes contact forms that can be used for electronic contact. If a user takes advantage of this opportunity, the data entered in the input mask will be transmitted to us, stored, and otherwise processed. Depending on the contact form and the reason for the inquiry and the selected contact method, different data may be requested. This may include the following data:
– Salutation, first name, last name
– Contact method: phone, email
– Phone, email
– Company, street, house number, postal code, city
– Message

At the time of sending the message, the following data will also be stored:
– Date and time of the inquiry

Your consent is obtained for the processing of the data as part of the sending process, and reference is made to this privacy policy. Alternatively, contact is possible via the provided email address. In this case, the user’s personal data transmitted by email will be stored. In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation.

2. Legal Basis for Data Processing
The legal basis for processing the data is the user’s consent, Art. 6 para. 1 lit. a GDPR. If the contact aims to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of Data Processing
The processing of personal data from the input mask is solely for handling the contact inquiry and product-related requests (especially information on specific products or service requests). If contact is made via email or product-related inquiry, there is a legitimate interest in processing the data. If the contact aims to create the opportunity to conclude a contract or provide a product or service, the processing of personal data also enables proof of our activity toward you. The other personal data processed during the sending process serves to prevent misuse of the contact form and ensure the security of our information technology systems.

4. Storage Duration
The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection. For personal data from the contact form’s input mask and those transmitted by email, this is the case when the respective conversation with the user is ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved. The additional personal data collected during the sending process will be deleted no later than seven days.

5. Objection and Removal Possibility
The user has the opportunity to revoke their consent to process the personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. The easiest way to revoke or object is by sending an email to the following address: [datenschutz@boostboards.de](mailto:datenschutz@boostboards.de). All personal data stored in the course of contacting us will be deleted in this case.