Privacy policy
This policy explains how BoardGameBoys Oy processes personal data on boardgameboys.fi. There is no web shop on this site: order and delivery data is covered by the PORO game's own privacy policy.
1. Data controller
BoardGameBoys Oy (Business ID 3642289-7), Finland. For data protection matters: info@boardgameboys.fi.
2. What data we collect and on what basis
Newsletter
We collect your email address and language preference. The legal basis is consent (GDPR Art. 6(1)(a)), given by ticking the checkbox on the form. The address is delivered to the company's own mailbox and added to the mailing list. You can withdraw your consent at any time by letting us know.
Contact form
We collect your name, email address and the content of your message. The legal basis is pre-contractual steps or legitimate interest (GDPR Art. 6(1)(b) and (f)): without this data we cannot respond to you.
Server logs
Our provider Cloudflare collects technical log data (IP address, browser details, timestamp) for security and abuse prevention. We do not use this data for marketing and do not link it to you.
3. Retention periods
Newsletter subscriber data is kept for as long as the subscription is active. After unsubscribing, the address is removed from the list. Contact form messages are kept for a maximum of 24 months, after which they are deleted.
4. Processors and data transfers
We use the following service providers to process personal data:
- Cloudflare, Inc. (USA): site hosting and form intake.
- Resend (USA): delivery of both forms' messages to our mailbox.
Cloudflare and Resend are located outside the EU. Transfers rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU–US Data Privacy Framework. Emails are received and stored in the company's own mailbox.
5. Your rights
You have the right to access data concerning you, to request its rectification or erasure, to object to and request restriction of processing, and to receive your data in a portable format. Where processing is based on consent, you may withdraw it at any time via the link at the end of every newsletter or by sending us a message. Withdrawal does not affect the lawfulness of processing carried out beforehand.
If you believe your personal data is being processed unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
6. Contact
For anything concerning this policy: info@boardgameboys.fi.