Privacy Policy · Adonboard

1.Who is responsible for your data

[company name], trading as Adonboard, [street, postcode, city, country], Chamber of Commerce number [KvK number], decides how and why your personal data is used. That makes us the controller under the GDPR. For anything about privacy, email info@emmercemedia.nl.

2.What we collect

Account: your email address and the display name that comes from it.
Seller profile: your suitcase photos, the 3D model built from them, the spots and prices you set, your travel profile (home country, destinations, how often you travel, traveller type), your promise about applying stickers, your proof photos and the campaigns you publish.
Brand profile: your brand name, website, logo, the short description you write, your briefs and your applications and invitations.
Bids: the amount, the time, the logo shown, and the email address used to place the bid.
Payments: when payments are switched on, Stripe handles card details. We never see or store your full card number. We keep your Stripe customer or account reference, the card brand and its last four digits, and whether payouts are set up.
Technical: the request logs our hosting provider keeps, including IP address, browser and pages visited, for security and troubleshooting.
Messages: anything you email us.

3.Why we use it, and on what legal basis

To run your account, your listings, your briefs and the auction, and to pay out what is owed. Basis: performing our agreement with you.
To show public parts of the platform: listings, bids with brand names and logos, brand profiles and briefs. Basis: performing our agreement, since this is what the service is.
To let sellers and brands find each other by traveller type and destination. Basis: performing our agreement.
To keep the platform safe, prevent abuse and fix faults. Basis: our legitimate interest in a working, trustworthy platform.
To email you about your account and your auctions, such as an outbid notice or a won spot. Basis: performing our agreement.
To meet legal duties, such as keeping records for tax and accounting. Basis: legal obligation.

4.What is public and what is not

Public: published listings with their photos and 3D model, spot prices, bid amounts with the bidding brand's name and logo, seller display name, travel profile and track record, brand profiles and open briefs.

Not public: email addresses, payment details, private brief links, applications and invitations (only the seller and the brand involved see those), and anything in your dashboard before you publish it.

5.Who we share it with

These companies act as our processors, or as their own controller where that is unavoidable, such as Stripe for payments. Some of them are based outside the European Economic Area. Where data leaves the EEA, it is protected by the European Commission's standard contractual clauses.

We do not sell your personal data, and we do not use it for advertising by other companies.

Supabase — database, file storage and login, hosted in the European Union (Ireland).
Vercel — hosting and delivery of the website.
fal.ai — turns the four suitcase photos a seller uploads into a 3D model. Only those photos are sent.
Stripe — payments and payouts, when payments are switched on.
Professional advisers or authorities, when the law requires it.

6.Cookies and local storage

We only use what the site needs to work: a cookie that keeps you signed in, and small pieces of data stored in your own browser, such as which spots you have bid on and the name and email you last used for a bid. There is no advertising or tracking, and no analytics cookies, so we do not ask for cookie consent. If we ever add analytics, we will ask first.

7.How long we keep it

Account and profile data: while your account exists, and up to six months after you close it, in case of disputes.
Listings, bids and proof photos: kept as a record of what was agreed, for seven years, because tax law requires it.
Payment records: seven years, as tax law requires.
Technical logs: usually up to 30 days at our hosting provider.
Emails you send us: up to two years.

8.Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to receive it in a portable file. You can object to use based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time.

Email info@emmercemedia.nl and we will answer within one month. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or to the regulator in the country you live in.

Some data cannot simply be erased: a bid that won a spot and the record of the deal are kept as long as tax law requires.

9.Security

Data is sent over encrypted connections and stored with access rules that keep private data, such as email addresses and payment references, away from the public parts of the site. Signing in uses a one-time link instead of a password, so there is no password to steal. No system is perfect: if a data breach puts you at risk, we will tell you and the regulator as the law requires.

10.Children

Adonboard is not meant for children. You must be 18 or older to use it.

11.Changes to this policy

If we change this policy, the date at the top changes too, and we tell you about important changes by email or on the site. See also our Terms of Service.