Privacy policy

Effective: 2026-09-25

In case of any discrepancy, the Hungarian version prevails.

This policy explains what personal data I process on boardwars.hu, for what purpose and for how long, and what your rights are. Data is processed in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

  • Andor Czafik
  • Address: Árvalányhaj út 5., 9011 Győr, Hungary
  • E-mail: info@boardwars.hu
  • Phone: +36 70 311 1476

2. Orders

Data processed: name, e-mail address, phone number, shipping address, country, order contents, the chosen shipping and payment method, and your message, if any.

Purpose: fulfilling the order, keeping in touch and delivering the parcel. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Retention: 5 years from the order, until any claims become time-barred.

3. School test deck requests and feedback

Data processed: name, e-mail address, phone number, role, institution name and ID, postal address, information on intended use, and the feedback sent later. No personal data about students is ever requested.

Purpose: assessing the request, posting the decks and asking for feedback. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time at info@boardwars.hu. If you allow it in the feedback form, I may quote your opinion on the site with your name and institution; you can withdraw this at any time as well. Retention: until consent is withdrawn, at most 3 years after our last contact.

4. Cookies and site operation

The site uses a single session cookie (PHPSESSID) to store your chosen language, currency and cart. It is strictly necessary, so no consent is required; it is deleted when you close your browser. The order page remembers your chosen colours in your browser (sessionStorage); this is never sent to me.

For secure operation, the server keeps short-term technical logs (IP address, time, page requested). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

5. Analytics

I measure site traffic with self-hosted Matomo (matomo.czandor.hu), without cookies and with shortened (anonymised) IP addresses. The data is not shared with third parties and cannot be used to identify visitors. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) – improving the site.

6. Recipients (processors)

  • Hosting: Hetzner Online GmbH (Gunzenhausen, Germany) – the website and database server is located in Germany.
  • E-mail delivery: Google Ireland Ltd. (Google Workspace) – confirmation and notification e-mails are sent through it.
  • Delivery: Foxpost Zrt. or Magyar Posta Zrt. (MPL) – only the chosen carrier, and only the data needed for delivery (name, address, phone, e-mail). With personal pickup, no data is passed to a carrier.
  • External content: the site's icons are loaded from Google Fonts and the 3D preview script from Google Hosted Libraries. In doing so, your browser's IP address reaches Google.

Google's processing may involve the United States; such transfers are based on the EU–US Data Privacy Framework. I do not sell your data or share it with anyone for marketing purposes.

7. Your rights

You can ask for information about the data I hold about you and for a copy of it; ask for it to be corrected, erased or its processing restricted; object to processing based on legitimate interest; ask for your data in a portable format; and withdraw your consent at any time. I respond within one month; write to info@boardwars.hu.

If you believe your data is processed unlawfully, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; Falk Miksa utca 9–11., 1055 Budapest; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; https://naih.hu) or with the data protection authority of your country of residence, or go to court.

8. Data security

The site runs over an encrypted (HTTPS) connection, the admin area is password-protected, and only I have access to the data.