Terms of Use - GDPR Compliance

1. GDPR Compliance Statement

Overboard Co., Ltd. is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR). This document outlines how we handle personal data for users within the European Union.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you explicitly consent to processing for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal obligation: When we need to comply with legal requirements
• Legitimate interests: When processing is necessary for our legitimate business interests

3. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right to be informed: About how your data is being used
• Right of access: To obtain a copy of your personal data
• Right to rectification: To correct inaccurate personal data
• Right to erasure: To have your personal data deleted
• Right to restrict processing: To limit how your data is used
• Right to data portability: To transfer your data to another service
• Right to object: To object to certain types of processing
• Rights related to automated decision making: Including profiling

4. Data We Collect

We may collect and process the following categories of personal data:

• Contact information (name, email address, phone number)
• Purchase history and preferences
• Website usage data and analytics
• Marketing preferences and communication history
• Technical data (IP address, browser type, device information)

5. How We Use Your Data

We use your personal data for the following purposes:

• Processing orders and providing customer service
• Sending marketing communications (with your consent)
• Improving our website and services
• Compliance with legal obligations
• Fraud prevention and security

6. Data Sharing and Transfers

We may share your personal data with:

• Service providers who assist in our business operations
• Payment processors for transaction processing
• Legal authorities when required by law

When transferring data outside the EU, we ensure appropriate safeguards are in place.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods depend on the type of data and the purpose of processing.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within one month of receipt.

11. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority.

12. Contact Information

For any questions about data protection or to exercise your rights, please contact us at: