Privacy Policy

1. Introduction

Gameboard (hereinafter – We, Us, Platform) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy describes how we collect, process, store, and protect personal information when you use our board game marketplace platform. By using our services, you acknowledge that you have read and understood this Privacy Policy. We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

2. Data Controller

Gameboard acts as the data controller for personal data collected through the Platform. For any questions regarding the processing of your personal data, data protection inquiries, or to exercise your rights under GDPR, please contact us at info@gameboard.lt. We are committed to responding to all data protection requests within the timeframes required by applicable law.

3. Personal Data We Collect

We collect and process personal data that is necessary for providing our services and ensuring the proper functioning of the Platform. The categories of personal data we collect include:

• Account information: email address, username, password (stored in encrypted form)
• Profile information: user name, location (country and city), profile picture
• Listing data: board game titles, descriptions, prices, condition information, photographs of items
• Communication data: messages exchanged with other users through the Platform's messaging system
• Transaction history: records of purchases, sales, and interactions with other users
• Technical data: IP address, browser type, device information, access times, pages visited
• Notification preferences: your choices regarding email and push notifications

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Contract performance: Processing necessary to fulfill our agreement with you and provide Platform services
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving services, preventing fraud, and ensuring Platform security
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications
• Legal obligation: Processing necessary to comply with applicable laws and regulations

5. How We Use Your Data

We use the personal data we collect for the following purposes:

• Providing and maintaining Platform services, including user registration and authentication
• Facilitating communication between buyers and sellers
• Displaying your listings and profile information to other users
• Sending transactional notifications about your account, listings, and messages
• Improving and personalizing your experience on the Platform
• Detecting, preventing, and addressing fraud, security issues, and technical problems
• Analyzing usage patterns to improve Platform functionality and user experience
• Complying with legal obligations and enforcing our Terms of Service

6. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

• Public profile information: Your username, city, profile picture, and listings are visible to other Platform users
• Communication: When you communicate with other users, your messages and relevant contact information are shared with them
• Service providers: We may share data with trusted third-party service providers who assist us in operating the Platform (hosting, analytics, notification services)
• Legal requirements: We may disclose your data when required by law, legal process, or government request
• Business transfers: In case of merger, acquisition, or sale of assets, your data may be transferred to the successor entity
• Protection of rights: When necessary to protect our rights, safety, or the rights and safety of others

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms. We only work with service providers who demonstrate commitment to data protection standards equivalent to those required under GDPR.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Account data is retained while your account remains active. After account deletion, we may retain certain data for a limited period to comply with legal obligations, resolve disputes, and enforce agreements. Listing data may be archived for fraud prevention purposes. Communication records are typically retained for 2 years after the last interaction. We regularly review our data retention practices to ensure compliance with the principle of data minimization.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of sensitive data, secure server infrastructure, regular security assessments, access controls, and employee training on data protection. However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

10. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restriction: Request limitation of processing of your personal data
• Right to data portability: Receive your personal data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Withdraw consent for processing activities based on consent at any time
• Right to lodge a complaint: File a complaint with a supervisory authority (in Lithuania: State Data Protection Inspectorate, ada.lt)

11. Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at info@gameboard.lt. We will respond to your request within one month of receipt. In complex cases or when dealing with numerous requests, this period may be extended by two additional months, in which case we will inform you of the extension and reasons. We may request verification of your identity before processing your request to protect your data from unauthorized access. There is no fee for exercising your rights, except in cases of manifestly unfounded or excessive requests.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze site usage, and assist in our marketing efforts. Essential cookies are necessary for the Platform to function properly. Functional cookies remember your preferences and settings. Analytics cookies help us understand how visitors interact with the Platform. You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality.

13. Third-Party Services

Our Platform may contain links to third-party websites or integrate with external services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services before providing your personal data. Third-party services we may use include cloud hosting providers, analytics services, and real-time communication services. Each of these providers has their own privacy policy governing their data practices.

14. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 18, please contact us immediately at info@gameboard.lt.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will notify you through the Platform or via email before the changes take effect. The 'Last updated' date at the top of this policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at info@gameboard.lt. We are committed to addressing your inquiries and resolving any data protection concerns in a timely and transparent manner.