Privacy Policy

Introduction

Bridge Boards is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller

The data controller for your personal information is the operator of Bridge Boards, whose contact details are provided in the Legal Notice.

Personal Data Collected

Legal Basis for Processing

• Contract Performance: Processing your account information and content is necessary to provide the service you requested
• Consent: Analytics cookies are placed only with your consent via cookie banner
• Legitimate Interests: We process technical data for security, fraud prevention, and service improvement based on our legitimate interests

Purposes of Data Processing

• Providing and managing your user account
• Enabling you to create, edit, store, and export bridge boards
• Sending transactional emails (password reset, email verification)
• Analyzing service usage to improve functionality (if analytics implemented)
• Ensuring security and preventing abuse

Data Retention

We retain your personal data as long as your account is active. You may request deletion of your account and all associated data at any time from your account settings or by contacting us.

• Account information: Retained while account is active
• Inactive accounts: Automatically deleted after 3 years of inactivity
• Server logs: Retained for 12 months maximum for security purposes

Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following service providers acting as data processors:

• Hosting provider: For server infrastructure and data storage
• Analytics provider: For usage statistics (if implemented, will be specified)
• Email service provider: For sending transactional emails (password reset, verification)

Cookies

Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your account and all associated data
• Right to Data Portability: Receive your data in a structured, machine-readable format (via export features)
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for analytics cookies at any time

To exercise any of these rights, please contact us using the information provided in the Legal Notice or manage settings from your account preferences.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. This includes encryption of passwords, secure HTTPS connections, and regular security updates.

International Data Transfers

Your data may be processed on servers located outside the European Economic Area (EEA). When data is transferred internationally, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

Minors

Bridge Boards is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. The "Last updated" date at the top indicates when this policy was last revised.

Contact & Data Protection Officer

For any questions about this Privacy Policy, to exercise your rights, or to file a complaint, please use the contact information provided in the Legal Notice. You also have the right to lodge a complaint with your local data protection authority.