Privacy Policy
Protecting your personal data is a priority for Matteo Daluz. This policy describes how we collect, use and protect your data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data Controller
Matteo Daluz, Individual, registered at 8 rue denfert rochereau, 59200 Tourcoing (SIRET: Non Applicable), is the controller of your personal data. For any questions regarding the protection of your data, please contact our Data Protection Officer (DPO) at: mdaluz.boardgames@gmail.com.
2. Data Collected
We collect the following data: — Identification data: email address, first name, last name — Account data: user role, account creation date — Created content: projects, layouts, illustrations uploaded to the platform — Connection data: IP address, connection timestamps (security logs) We do not directly collect banking data; payments are processed by a PCI-DSS certified third-party provider.
3. Purposes and Legal Bases
Your data is processed for the following purposes: — Account creation and management (legal basis: performance of contract) — Providing platform features (legal basis: performance of contract) — Communications about your account or the service (legal basis: legitimate interest) — Compliance with our legal obligations (legal basis: legal obligation) We do not process your data for marketing purposes without your explicit consent.
4. Retention Period
Your data is retained for the duration of your contractual relationship with Matteo Daluz, then for 3 years from account closure, unless a legal obligation requires a longer period. Connection data is retained for 12 months in accordance with legal obligations.
5. Your Rights
Under the GDPR, you have the following rights: — Right of access to your data — Right of rectification — Right to erasure ('right to be forgotten') — Right to data portability — Right to object to processing — Right to restriction of processing To exercise these rights, send your request to mdaluz.boardgames@gmail.com. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL) — www.cnil.fr.
6. Cookies
IndieBoardGames uses only strictly necessary technical cookies required for the service to function (authentication, display preferences). No third-party tracking or advertising cookies are placed on your device. You may disable cookies in your browser settings, which may affect certain features of the service.
7. Contact & Complaints
For any questions regarding this policy or to exercise your rights, contact us at mdaluz.boardgames@gmail.com. If your complaint is not resolved, you may contact the CNIL: Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.