SHOPBOARD LTD based in London makes every effort to protect the privacy of people using its website. In order to implement the principle of lawful, reliable andtransparent processing of personal data obtained through the website, a document called the Privacy Policy has been adopted.
- The terms used in the Privacy Policy mean:
- SHOPBOARD LTD based in London – hereinafter referred to as Shopboard ltd.
- Customer – a Consumer or Entrepreneur who has placed or intends to place an
order or uses other Shopboard ltd services . - Consumer – a natural person who performs a legal act not directly related to
his business or professional activity. - Entrepreneur – a natural person, legal person or organizational unit, which the law
grants legal capacity, undertaking activities for purposes directly
related to its business or professional activity. - Goods – a tangible movable item being the subject of the Sales Agreement or
the right being the subject of the Sales Agreement. - Service(s) – Order, License Order or Quotation Request, as well as other services
provided by Shopboard ltd . - Order – Customer’s declaration of will constituting an offer to conclude a
Sales Agreement with Shopboard ltd , aiming directly at concluding a
Distance Sales Agreement specifying the type and number of Goods being the
subject of the Sales Agreement. - Inquiry for an offer – submitted by the Customer via the form available on the website,
inquiries for an offer specifying the Goods that are the subject of the
inquiry, as well as the Customer’s data necessary for contact, indicated
in the form or e-mail. - GDPR – Regulation (EU) 2016/679 of the European Parliament and of the
Council of 27 April 2016 on the protection of natural persons with regard
to the processing of personal data and on the free movement of such data,
and repealing Directive 95/46/EC (General Data Protection Regulation)
data). - User – means an entity for which, in accordance with the Regulations and
the law, services may be provided electronically or with whom an Agreement
for the provision of electronic services may be concluded.
- Who is the administrator of personal data?
The administrator of your personal data in connection with the use of our services is SHOPBOARD LTD with its registered office in London, 85 Great
Portland Street , London, United Kingdom, Company No. 12313387.
If you have any questions regarding the processing of your personal data and
your rights, please contact us. Please direct your privacy inquiries to office@shopboard.ltd . - What personal data do we process, for what purpose
and on what legal basis?
Due to the fact that we provide various services to our clients, we process
your personal data for various purposes, to a different extent and on a
different legal basis specified in the GDPR. In order to provide the most
transparent information, we have grouped this information, referring to the
purpose of processing your personal data.
3.1. Services that do not require creating an Account
Types of services. We process your personal data in order to provide services
that do not require creating an Account, such as: a. sending e-mails with
marketing and commercial information, b. ad display.
Scope of data: For this purpose, we process personal data regarding your
activity, i.e. data regarding the products viewed and other subpages, as well
as data regarding the session, your device and operating system, browser,
location and unique ID.
Legal basis: Consent (Article 6(1)(A) of the GDPR) to send e-mails with
marketing and commercial information and our legitimate interest (Article
6(1)(F) of the GDPR), consisting in facilitating the use of services provided
electronically and improving the functionality of these services.
3.2. Statistics on the use of individual website functionalities,
facilitating the use of the website and ensuring the website’s IT security
Scope of
data: For these purposes, we process personal data regarding your activity on
the website, such as: visited pages and subpages and the amount of time spent
on each of them as well as data about your search history, your IP address,
location, device ID, and data about your browser and operating system. Legal
basis: Our legitimate interest (Article 6(1)(f) of the GDPR), consisting in
facilitating the use of services provided electronically and improving the
functionality of these services.
3.3. Determination, investigation and enforcement of claims
Scope of data: For this purpose, we may process some of your personal data
provided in the Account, such as: name, surname, address of residence, data on
the use of our services, if the claims result from the way you use our
services, other data necessary to prove the existence of the claim, including
the extent of the damage suffered. Legal basis: The contract concluded between
the parties (Article 6 (1) (b) and our legitimate interest (Article 6 (1) (f)
GDPR), consisting in determining, pursuing and enforcing claims and defending
against claims in proceedings before courts and other state authorities.
3.4. Consideration of complaints and requests, answers to questions
Scope of data: For this purpose, we may process some of your personal data
provided in the Account, as well as data on the use of our services, which are
the cause of the complaint or request, data contained in the documents attached
to the complaint or request. Basis legal: Our legitimate interest (Article
6(1)(f) of the GDPR), consisting in improving the functionality of services
provided electronically and in building positive relationships with the
Customer, based on reliability and loyalty.
3.5. Customer satisfaction survey
Data scope: For this purpose, we process your personal data, including data
necessary to complete the order, as well as your answers to the questions we
have prepared, contained in surveys and forms used for satisfaction surveys.
Legal basis: Our legitimate interest (Article 6(1)(f) of the GDPR), consisting
in improving the functionality of services provided electronically and
assessing satisfaction with the services we provide. - Marketing of our products and services and our
clients Scope of data:
For this purpose, we process your personal data provided when subscribing to
the newsletter list, registered and stored via cookies . Activity data concerns
in particular such data as: search history, clicks on the website, visits to
main pages and their subpages, dates of visit, data on the use of specific
functionalities on the website, history and activity related to our e-mail
communication.
Legal basis: Consent (Article 6(1)(a) of the GDPR) to send e-mails with
marketing and commercial information and our legitimate interest (Article
6(1)(f) of the GDPR), consisting in the marketing of our products and services
and products and services.
Balance of interests: After weighing our interest and your interests, rights
and freedoms, we decided that marketing combined with profiling will not
interfere excessively with your privacy or be an excessive nuisance. When
weighing interests, rights and freedoms, we took into account the following
circumstances: a. you have expressed your wish to receive marketing
communications to the e-mail address provided, and therefore we have considered
that you can reasonably expect us to send you such communications, b. we
respect your will and facilitate the implementation of your rights. For this
purpose, we provide the ability to easily withdraw consent to receive e-mails
from the Account settings or from the browser settings. - Who do we share your personal data with?
Our databases are protected from access by third parties. The data collected
during registration or purchase are used for the proper execution of orders, as
well as for tracking the status of the order and making changes to it at the
Customer’s request before it is sent. In order to perform the contract,
Shopboard may share the data collected from you with entities such as:
5.1. Service providers
Your personal data is transferred to service providers that we use to run the
website. Service providers to whom we transfer your personal data, depending on
contractual arrangements and circumstances, or are subject to our instructions
as to the purposes and methods of data processing (processors) or independently
determine the purposes and methods of their processing (administrators). The
list of suppliers whose services we use can be found in the tab: ovh.pl. The
list is updated on an ongoing basis. Processing entities: We use suppliers who
process your personal data only on our instructions. They provide us with a
cloud computing hosting service, provide us with systems for online marketing,
for displaying web push notifications , for sending e-mails, for analyzing
website traffic, for analyzing the effectiveness of marketing campaigns, as
well as supporting the implementation of specific Account functionalities.
Administrators: We use suppliers who do not act solely on our instructions and
will set the purposes and methods of using your personal data on their own.
They provide us with remarketing campaign services and conduct statistical
research.
Location. Our suppliers are mainly based in Poland and other countries of the
European Economic Area (EEA). Some of our suppliers are based outside the EEA.
In connection with the transfer of your data outside the EEA, we have made sure
that our suppliers guarantee a high level of personal data protection. These
guarantees result in particular from the obligation to use standard contractual
clauses adopted by the Commission (EU) or participation in the „Privacy
Shield” program established by Commission Implementing Decision (EU)
2016/1250 of July 12, 2016 on the adequacy of protection provided by by the
EU-US Privacy Shield.
5.2. State authorities
Your personal data may be made available to authorized state authorities. - How long do we store your personal data?
Your personal data is stored for the period from the moment of consent until its
withdrawal and for the duration of the contract, and then for the period
required by law or necessary to implement the legitimate interests of the
personal data administrator. After withdrawing the consents, the data will
be anonymized, except for the data necessary to implement the legitimate
interests of the administrator. We store
personal data collected using cookies for a period of time corresponding to the
life cycle of cookies stored on Users’ devices . Details on how we use cookies
are described in the Cookies Policy .
Personal data collected using forms on the website are processed in the scope
of the implementation of a given inquiry and are deleted after the completion
of the inquiry, if the inquiry does not require further processing. Personal
data collected using the newsletter functionality on the website are stored and
processed only in the scope of implementation functionality of the newsletter
and at any time the user may request the discontinuation of the processing of
his data in this respect (removal from the newsletter address list ), in the
same way as he was subscribed to it on the basis of the consent given by the
user.
In case of any doubts as to the scope of processing the user’s personal data,
the user may contact directly the person responsible for the security of
personal data processing at the e-mail address office@shopboard.ltd . - What rights do you have in connection with the
processing of personal data?
We ensure the implementation of your rights indicated below by contacting us
via the e-mail address office@shopboard.ltd .
7.1. The right to withdraw the consent granted
Pursuant to art. 7 sec. 3 of the GDPR, you have the right to withdraw any
consent that was given when completing the contact form or the newsletter list
, as well as when using individual services and functionalities offered on the
website. Withdrawal of consent is effective from the moment of consent
withdrawal, does not affect the processing carried out by us in accordance with
the law before its withdrawal and does not involve any negative consequences
for you. However, it may prevent you from continuing to use services or
functionalities that we can legally provide only with your consent.
7.2. Right to object to the use of data
Pursuant to Art. 21 of the GDPR, you have the right to object to the use of
personal data if we process it based on our legitimate interest, e.g. in
connection with keeping statistics on the use of individual website
functionalities and facilitating the use of the website, as well as
satisfaction surveys. If your objection turns out to be justified and we have
no other legal basis for processing personal data, we will delete the data to
which you objected.
7.3. The right to delete data („the right to be forgotten”)
Pursuant to art. 17 GDPR, you have the right to request the deletion of all or
some of your personal data. We will treat the request to delete all personal
data as a request to delete the Account. You have the right to request the
removal of personal data when: a. a specific consent has been withdrawn, to the
extent that personal data was processed on the basis of consent; b. the
personal data are no longer necessary for the purposes for which they were
collected or processed; c. an objection to the use of data for marketing
purposes has been raised;
d. an objection has been raised against the use of data for the purpose of
keeping statistics on the use of the website and satisfaction surveys, and the
objection was considered justified;
e. personal data is processed unlawfully. Despite the request to delete
personal data, in connection with raising an objection or withdrawing consent,
we may retain certain personal data to the extent necessary for the purposes of
establishing, pursuing or defending claims. This applies in particular to
personal data including: name, surname, e-mail address and purchase history,
which we retain for the purpose of handling complaints and claims related to
the execution of orders.
7.4. The right to limit data processing
Pursuant to art. 18 of the GDPR, you have the right to request the restriction
of the processing of personal data. In a situation where such a request is
submitted, until it is considered, you will not be able to use certain
functionalities or services that were related to the processing of data covered
by the request. We will also not send you any messages, including marketing
ones. You have the right to request the restriction of the use of personal data
when: a. the correctness of personal data has been questioned – the use of this
data will be limited for the time needed to verify their correctness, but no
longer than for 7 days; b. the processing of this data is unlawful, and instead
of deleting the data, a request to limit their use has been received; c.
personal data are no longer necessary for the purposes for which they were
collected or used, but you need them to establish, pursue or defend claims; d.
an objection to the use of this data has been raised – then the restriction
takes place for the time necessary to verify whether the protection of your
interests, rights and freedoms outweighs the interests that we pursue by
processing these personal data.
7.5. Right of access to data
Pursuant to art. 15 of the GDPR, you have the right to obtain from us
confirmation of the processing of personal data. In a situation where these
data are actually processed, you have the right to: a. access your personal
data; b. obtain information about the purposes of processing, categories of
personal data being processed, about the recipients or categories of recipients
of this data, the planned period of data storage or the criteria for
determining this period, about the rights under the GDPR and the right to lodge
a complaint with the supervisory body, about the source of this data, on
automated decision-making, including profiling, and on the safeguards applied
in connection with the transfer of such data outside the European Union; c.
obtain a copy of your personal data. If you wish to exercise the right to
access data, please contact the Personal Data Administrator referred to in
point 2.
7.6. The right to rectify data
Pursuant to art. 16 of the GDPR, you have the right to request rectification of
the personal data provided by you (if they are incorrect) and to supplement
them (if they are incomplete).
7.7. The right to transfer data
Pursuant to art. 20 of the GDPR, you have the right to receive the personal
data provided by you and then send it to another personal data administrator of
your choice. You can also request that we send your personal data directly to
another administrator, if it is technically possible. We will send your
personal data in the form of a csv file . The csv format is a commonly used,
machine-readable format that allows you to send the received data to another
personal data controller.
7.8. When do we meet your request?
If you request us to exercise the above-mentioned rights, we comply with this
request or refuse to comply with it without undue delay, but no later than
within 30 days after receiving it. If necessary, this period can be extended by
another two months due to the complexity of the request or the number of
requests. For technical reasons, we always need 48 hours to update the settings
selected by the User in our systems. Therefore, it may happen that during the
system update, you will receive an e-mail from us that you have opted out of.
7.9. Submitting complaints, inquiries and requests
You can submit complaints, inquiries and requests to us regarding the
processing of personal data and the exercise of your rights. If you believe
that the right to the protection of personal data or other rights granted under
the GDPR have been violated, you have the right to lodge a complaints to the
Inspector General for Personal Data Protection (in the future, the President of
the Office for Personal Data Protection). - How do we ensure the security of your personal
data?
We make every effort to ensure the security of your personal data. The websites
use encrypted data transmission (SSL) when sending data in forms embedded on
the website, which ensures the protection of Users’ identification data and
significantly hinders data interception by unauthorized systems or persons.
Personal data stored in the database will be safely stored until the consent to
the processing of personal data in order to receive technical and marketing
information is withdrawn – then it will be deleted. - How do we use cookies ?
Details on how we use cookies can be found in the
Cookies policy https://shopboard.pl/index.php/cookiespolicy/ - Changes to the Privacy Policy
We reserve the right to change the above Privacy Policy by posting a new
Privacy Policy on this website. You will be informed about any changes or
additions by posting relevant messages on our website, and in the case of
significant changes, we can also send you separate notifications to the
indicated e-mail address. The Privacy Policy does not limit any rights that you
are entitled to under the law.
11. By subscribing to our newsletter you agree to receive information from our partner
EMMA MATRATZEN GMBH Wilhelm-Leuschnet-Str. 78, Frankfurt am Main,
DE 60329, Germany, NIF: DE301904406. Link to privacy policy: https://www.emma-colchon.com.mx/politica-de-privacidad/.