Privacy Policy

At BoardGameLink, we are committed to protecting the privacy of everyone who uses our services. In this privacy policy, we explain how we handle personal data and protect your privacy.

1. Contact Information

BoardGameLink (trade name of Benki Games) is the data controller.

• Website: www.boardgamelink.com
• Address: Kanaalkade 57, 1811 LS, Alkmaar, The Netherlands
• Email: info@boardgamelink.nl

2. Processing of Personal Data

We process personal data only to the extent necessary to provide, manage, secure, and improve the Platform; to fulfill the agreement with the user; to comply with legal obligations; or for other legitimate purposes as described in this Privacy Policy.

We process the following personal data:

• email address;
• first name, middle initial, and last name;
• company name;
• account, profile, and company information provided by the user;
• subscription, billing, and payment information (payments are processed through external payment service providers);
• communication data, including messages related to Opportunities, Business Inquiries, and other communications via the Platform;
• technical and usage data, such as IP address, browser type, device, log files, and similar technical data;
• verification data, to the extent necessary for account verification;
• other personal data that the user voluntarily provides or that is necessary for the Platform to function.

3. Minors

BoardGameLink is intended for professional users in the board game industry and is not intended for individuals under the age of 16. If we process personal data of an individual under the age of 16, we do so exclusively with the consent of a parent or legal guardian. By creating an Account or providing personal data to BoardGameLink, you represent that you are at least 16 years old or, if you are under 16, that you have obtained consent from a parent or legal guardian. If we determine that a person in our database is under 16 and consent for the processing has not been provided by a person with parental authority, we will delete the personal data.

If you have any reason to believe that we are processing personal data of a person under the age of 16 without the consent of a parent or legal guardian, please contact us at info@boardgamelink.nl so that we can delete the relevant data.

4. Retention Period for Personal Data

We do not retain personal data longer than is necessary for the purposes for which it was collected. In principle, we retain personal data for as long as your Account is active. After your Account is terminated, certain personal data may be retained for a longer period if this is necessary to comply with legal obligations, such as tax retention requirements or other administrative obligations.

When an account is deleted, the associated personal data is, in principle, deleted or anonymized within a reasonable period of time. Certain data may be retained for a limited period after an account is deleted in backups, log files, or for security, fraud prevention, and dispute resolution purposes. This data is not actively used and will be deleted or anonymized as soon as reasonably possible.

To the extent necessary, certain communication data or log files may also be temporarily retained after an account is terminated for the purpose of handling complaints, disputes, security incidents, or fraud prevention.

5. Security of Personal Data

We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, unauthorized alteration, disclosure, or other forms of unlawful processing.

• The connection to the website (www.boardgamelink.com) is established via a secure SSL/TLS connection.
• The systems and devices on which personal data is processed are equipped with the latest security updates and are adequately protected against unauthorized access.
• Access to personal data is restricted to individuals who need this data to perform their duties.
• All employees who have access to personal data are bound by a confidentiality agreement aimed at protecting personal data.
• A data processing agreement has been entered into with all external parties that have access to personal data, under which these third parties have committed to maintaining confidentiality and to processing personal data only on behalf of BoardGameLink.
• Accounts are secured with a personal password. Passwords are stored in an unreadable format and are processed using appropriate security measures.

If you suspect that your personal data is not properly secured or that there has been a breach, please contact us as soon as possible at info@boardgamelink.nl.

6. Sharing Personal Data with Third Parties

We do not sell personal data to third parties. We disclose personal data to third parties only to the extent necessary for the performance of the agreement with you, the operation of the Platform, compliance with a legal obligation, or when we are otherwise legally authorized to do so. We enter into a data processing agreement with parties that process personal data on our behalf, to the extent required by law. The parties with whom we have entered into a data processing agreement include, but are not limited to, IT and hosting service providers, payment service providers (such as Stripe), and providers of communication and email services.

Information that you yourself make public via your profile, games, Opportunities, or other publicly visible parts of the Platform may be visible to other users and, depending on the Platform’s settings and features, also to visitors without an Account. You are solely responsible for the information you make public.

If personal data is processed outside the European Economic Area, we ensure that this is done with appropriate safeguards in accordance with applicable privacy laws.

7. Cookies and Similar Technologies

BoardGameLink uses strictly necessary cookies and similar technologies to operate and secure the Platform, provide functions requested by users, and remember users’ cookie choices. These technologies are necessary for the Platform to function and do not require consent.

With your prior consent, BoardGameLink uses Google Analytics 4 to understand how the website and Platform are used and may load external media from providers such as YouTube and Vimeo. Optional technologies are disabled by default. The legal basis for the use of these optional technologies is your consent.

You can accept, reject, or change your preferences at any time through “Cookie settings” in the website footer. Withdrawing your consent does not affect the lawfulness of processing that took place before consent was withdrawn.

Detailed information about the cookies and similar technologies used by BoardGameLink, including their names, purposes, providers, categories, and retention periods, is available in our Cookie Policy at www.boardgamelink.com/cookies.

8. Rights of Individuals Whose Personal Data We Process

You have the right to access, correct, supplement, or have your personal data deleted. In addition, to the extent provided by law, you have the right to object to the processing of your personal data, to restrict such processing, to withdraw your consent (if the processing is based on consent), and the right to data portability. Upon your request, we will provide your personal data in a commonly used digital format to you or to an organization designated by you, to the extent permitted by law. You may send a request to access, correct, delete, restrict the processing of, or transfer your personal data, withdraw your consent, or object to the processing of your personal data to info@boardgamelink.nl.

To verify that a request has actually been made by the person in question, we may ask you to verify your identity or your Account, for example, via the email address we have on file or by another appropriate means. In doing so, we will only request the information necessary to verify your identity.

We will generally respond to your request within one month.

9. Other

9.1. Automated Decision-Making

We do not make decisions based solely on the automated processing of personal data that have legal consequences for data subjects or otherwise significantly affect them.

9.2. Complaints to the Dutch Data Protection Authority

If you believe that we are not processing your personal data correctly and we are unable to reach a resolution together, you have the right to file a complaint with the Dutch Data Protection Authority. For more information, please visit: autoriteitpersoonsgegevens.nl.

9.3. Changes

BoardGameLink may amend this Privacy Policy from time to time. In the event of significant changes, we will notify you via the Platform, by email, or by other appropriate means. The most current version of this Privacy Policy is always available on our website.

9.4. Contact Regarding Privacy

If you have any questions about this Privacy Policy or the processing of personal data, please contact us at info@boardgamelink.nl.