Privacy Policy

The General Data Protection Regulation (“GDPR”), which came into force on 25 May 2018, and the Swiss Federal Act on Data Protection aim to guarantee that the personal data of physical persons is processed in compliance with the rights, fundamental freedoms and dignity of persons, with particular reference to confidentiality and personal identity. Board International SA and its subsidiaries (“Board” or the “Data Controller”), pay particular attention to the way in which personal information is used and shared and it is therefore important to inform you of the adopted privacy policy.

Processing of personal data means the collection, recording, organisation, conservation, processing, alteration, selection, retrieval, comparison, use, disclosure, erasure, distribution, interconnection and any other processing which is useful for the performance of the specific service requested (the “Service”).

1. Personal data we collect

1.1 Board collects the personal information provided by users:

1. When sending the contact forms on the website www.board.com (the “Website”) (for example, relating to the "Careers", "Free Demo", “Training and Support” or "Events" sections);
2. for the provision of Board services;
3. for product support;
4. to attend meeting(s) and provide connected services; or
5. to administer online courses, tests, and to issue certifications.

1.2 In particular, the personal data processed by Board includes, inter alia, the following data:

• name, surname, and job title or contact information including the e-mail address and telephone number;
• personal information such as address, postcode, country;
• other information relating to surveys or offers sent to users.

This information falls under the definition of personal data, i.e. any information concerning an identified or identifiable physical person (the “Data Subject”); identifiable refers to physical persons who can be identified, directly or indirectly, with particular reference to data such as the name, identification number, data concerning their location, an online ID or one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity (the “Personal Data”).

1.3 The Website uses cookies, as described in more detail in the Cookies Policy.

2. Purposes of the processing

2.1 The Personal Data provided by you at the time of registering with the Service, or otherwise acquired during the activities performed by us, may be processed, for purposes linked to the provisions of the Service and, for example, to respond to requests sent by you to Board (for example, to send information materials, to be contacts or for a demo or sales offer, etc.). You may object to the sending of e-mails at any time.

2.2 The Personal Data provided by you may be processed also to provide online security for Board website and Services, and to comply with the applicable laws, regulations, court orders, government, and law enforcement requests, to investigate security and privacy incidents, and to manage any customer disputes.

2.3 Your Personal Data will be used to periodically send promotional e-mails (using the e-mail address provided by you), when you accept this Privacy Policy when submitting the form. These e-mails may concern new products, events, special offers or other information Board thinks may interest you. The above communications

may be sent to you also by third parties within the Board Group to whom Board may provide the Personal Data provided by you.

2.3 Your Personal Data may also be used for profiling, through the use of cookies and following acceptance in this sense by you. The acceptance of the use of cookies is given at the start when clicking on “Accept cookies” and closing the banner, as better explained in the Cookies Policy.

3. Methods of processing

3.1 Your Personal Data is collected by the parties set forth at clause 6 of this Privacy Policy, and the related processing is carried out using manual or computerised automated instruments with logics strictly linked to the purposes described above and, in any case, to guarantee the security and confidentiality of the Personal Data.

4. Legal basis of the processing of Personal Data

4.1 Pursuant to the GDPR, Board processes Personal Data on several different legal basis, as follows:

• To perform and manage the contract with you: when entering into an agreement with Board, Board processes Personal Data to provide the Services, and to manage the contractual relationship.
• To comply with legal obligations: Board processes your Personal Data to comply with relevant laws or regulatory requirements, and to respond to lawful requests, court orders, and legal processes.
• Based on our legitimate interests: Board processes Personal Data to send communication or newsletter related to the relevant products, and/or services.
• Based on your consent: in certain situations, Board processes Personal Data based on your consent. You have a right to withdraw your consent at any time.

4.2 The provision of Personal Data by you when sending the contact forms, is absolutely optional and does not represent a legal requirement.

4.3 With regard to the effects of the non-acceptance or disabling of the cookies, please refer to the terms of the Cookies Policy.

5. Categories of persons to whom the Personal Data may be disclosed

5.1 The Personal Data collected for the purpose of the provision of the Service under clause 2 may be disclosed to companies performing activities which are strictly linked and instrumental to the provision of the Service. Such Personal Data may be transferred to associated companies and/or companies within the Board Group or third parties even located outside the European Union, where there are in place the appropriate safeguards (guarantee of an appropriate level of protection) set forth by the European Commission.

5.2 The Personal Data collected for the purposes listed at clause 2 may be transferred to third parties within the Board Group and/or other third parties (located inside or outside the European Union), also for sale or attempted sale, i.e. all purposes of a lawful commercial and/or statistical nature. The list of the third parties to whom your Personal Data have been disclosed may be requested from Board using the e-mail address set forth at clause 7.4.

6. Controller, Processors and Representatives

Data Controller or Controller refers to the physical or legal person, public authority, service or other body which, individually or with others, determines the purposes and means of the processing of Personal Data; where the purposes and means of processing are determined by law by the European Union and the Member States, the Controller or the specific criteria applicable to his or her appointment may be established by the law of the European Union and the Member States;

6.1. The Controllers are Board International SA with registered office in Via Maestri Comacini 4, Chiasso, Ticino 6830, Switzerland, and the other companies in the Board Group which work autonomously and independently in the processing of Personal Data.

6.2 The Controllers appoint external Processors to achieve the purposes specified at clause 2. It is possible to request a complete list of external Processors by sending an e-mail to the e-mail address set forth at clause 7.4 of this policy.

6.3 The Controllers have appointed their own employees and collaborators to process the data.

6.4 Data Subjects may exercise their rights towards each Controller.

7. Rights of the data Subjects

7.1 You have the right, at any time, to obtain confirmation from the Controller as to whether or not Personal Data concerning you is being processed, to know its origin, purposes and methods of processing; you also have the right to request the updating, correction, integration, erasure, transformation into an anonymous form, the suspension of any data processed in violation of the relevant legislation, including those which are no longer necessary to pursue the purposes for which they were collected and/or subsequently processed.

7.2 You have the right to object, wholly or partially, to the processing of your Personal Data for legitimate reasons, even where this is still relevant for the purpose for which they were collected, and to the processing of your Personal Data for the purpose of commercial information or the sending or advertising materials or direct sales or for the execution of market research or commercial communication.

7.3 You have the right to receive your Personal Data in a structured, commonly used and machine-readable format, and to transmit those data to another controller.

7.4 To exercise your rights please write to the specific e-mail address: privacy@board.com.

7.5 Please note that you also have the right to lodge a complaint with the competent supervisory authority.

7.6 If you no longer wish to receive communication via e-mail from Board and wish to unsubscribe from the newsletter, you may do so by clicking on the "unsubscribe" link at the bottom of each e-mail sent by Board.

8. Period for which the Personal Data is processed

8.1 Your Personal Data will be conserved in hard copy and/or electronic/computerized/optical format for the time strictly necessary to meet the purposes indicated at clause 2, in compliance with the applicable laws and/or the contractual relationship. Board has defined the specific duration of the storage of the Personal Data for each type of Personal Data collected. At the end of such periods, Board will definitively erase your Personal Data.

9. Amendments

9.1 This Privacy Policy may be subject to amendments. If substantial amendments are made to the use of your Personal Data, Board will notify you by publishing a notice on the Website and/or by sending you an e-mail.

10. Contacts

For any information or request which relates to this Privacy Policy, please contact us (Board International, Via Maestri Comacini 4, Chiasso, Ticino 6830, Switzerland) at the e-mail address privacy@board.com.