PRIVACY POLICY

Privacy Policy

We take the protection of your personal data seriously. This privacy policy explains what data we collect when you visit or shop at boravexti.com, why we collect it, and what rights you have.

1. Who Is Responsible
The controller responsible for the processing of your personal data is:
D-Donkey UG (haftungsbeschränkt), operating the online shop boravexti.com Tweder Berg 20, 24944 Flensburg, Germany Email: info@boravexti.com Phone: +49 159 07951492

If you have any questions about how we handle your data, please reach out to us directly using the contact details above.

2. What Personal Data We Collect
When you create an account or place an order, we collect the information needed to process it, such as your name, delivery address, billing address, email address, phone number, and payment details.

When you contact us by email or phone, we collect the content of your message along with any details you choose to share with us so we can respond properly.

When you visit our website, our server automatically records certain technical information, including your IP address, the date and time of access, the pages you viewed, your browser type, device information, and the site you came from. We also use cookies and similar technologies as described in section 5 below.

If you pay through a payment service provider, such as a card processor or another payment method we offer at checkout, that provider shares the transaction details needed to confirm and process your payment with us.

3. Why We Process Your Data and Our Legal Basis
We process your order details, delivery address, and payment information to fulfil your purchase and deliver it to you. This is necessary to perform our contract with you under Article 6(1)(b) GDPR.

We use your contact details to respond to questions and provide customer support, again on the basis of performing our contract, or, if you contact us before placing an order, on the basis of our legitimate interest in responding to you under Article 6(1)(f) GDPR.

We keep certain order and invoice records to meet our legal obligations, in particular German tax and accounting law, on the basis of Article 6(1)(c) GDPR.

We process technical and log data to keep our website secure and to prevent misuse or fraud, based on our legitimate interest under Article 6(1)(f) GDPR.

If you sign up to receive marketing emails from us, we only send them with your consent under Article 6(1)(a) GDPR, and you can withdraw that consent at any time.

4. Who We Share Your Data With
We only share your personal data where it is genuinely needed, specifically with the shipping provider who delivers your order, the payment service provider who processes your payment, and IT and hosting providers who help us run and secure our website. Where required, we also share information with tax advisors or authorities.

We do not sell your personal data to third parties, and everyone we share it with is bound by confidentiality and data protection obligations, or is only given access to what they need to carry out their specific task for us.

5. Cookies
We use cookies that are technically necessary to run the shop, for example to remember the contents of your shopping cart while you browse. These do not require your consent because they are essential to the service you have requested.

If we use any additional cookies for analytics or marketing purposes, we will only set these with your prior consent, which you can give or withdraw at any time through our cookie settings.

6. How Long We Keep Your Data
We keep your personal data only for as long as it is needed for the purpose it was collected for, or for as long as the law requires us to. Order and invoice records, for example, are generally kept for up to ten years to meet German commercial and tax record keeping requirements.

7. Your Rights
You have the right to ask us what personal data we hold about you, to have inaccurate data corrected, to have your data deleted where we are not legally required to keep it, to restrict how we process it, to object to processing based on our legitimate interest, to receive your data in a portable format, and to withdraw any consent you have given us, at any time and with effect for the future.

To exercise any of these rights, simply email us at info@boravexti.com. You also have the right to lodge a complaint with a data protection supervisory authority. As our seat is in Schleswig-Holstein, the authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD) Holstenstraße 98, 24103 Kiel, Germany

8. How We Protect Your Data
We use appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access, including encrypting our checkout and account pages with SSL/TLS.

9. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in how we operate or in the law. The version published on this page is always the current one.