Privacy Policy
The terms that apply in your country and language.
Last updated: 16.09.2026
This privacy policy explains how Boston Group A/S processes your personal data when you visit our online store, buy from us or contact us. If you have questions, write to salg@boston.dk.
1. Data controller
Boston Group A/S is the controller for the processing of your personal data.
Boston Group A/S
Mileparken 22, 3, 2740 Skovlunde, Denmark
CVR-nr. 19196003
salg@boston.dk
+45 48 10 48 10
The store sells Speediance products and runs on an external e-commerce platform that hosts the store for us.
2. What data we process
Depending on how you use the store, we process:
- Contact details: name, delivery and billing address, email and phone number.
- Order and transaction data: what you buy, return or exchange, order history, payment method and payment status. We never see or store your full card number — payment is handled by our payment provider.
- Account data: if you create an account: username, encrypted password and settings.
- Communication: the content of your messages to customer service.
- Device and usage data: IP address, browser, device and how you use the store. Partly collected via cookies — see cookies and analytics.
- Marketing data: whether you subscribed to our newsletter/SMS and how you interact with our emails.
We do not process sensitive personal data (such as health data) about you.
3. Why we process the data and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Process and deliver your order, handle payment, returns, defect claims and withdrawal | Contact, order and payment data | Performance of contract — Art. 6(1)(b) |
| Customer account | Account data | Performance of contract — Art. 6(1)(b) |
| Customer service | Contact data, communication | Contract (b) and legitimate interest in answering enquiries (f) |
| Bookkeeping and accounting | Order and transaction data | Legal obligation — Art. 6(1)(c) (accounting law) |
| Fraud prevention and store security | Device, order and payment data | Legitimate interest — (f) |
| Analytics and improving the store | Usage data | Consent via the cookie banner — (a) |
| Newsletter and SMS marketing | Email, phone number, marketing data | Consent — (a) and marketing law |
| Marketing similar products to existing customers | Legitimate interest — (f). You can opt out at any time. | |
| Targeted ads on social media and search engines | Usage and order data | Consent via the cookie banner — (a) |
| Legal claims | Relevant data | Legitimate interest in establishing and defending legal claims — (f) |
Do you have to provide the data? To process and deliver an order we need your name, address, email and payment details. Without them the contract cannot be concluded. All other data is optional.
Profiling and automated decisions: With your consent, we and our advertising partners may use your usage and purchase data to show relevant ads and product recommendations. This is a form of profiling, but it has no legal effect on you. We do not make decisions about you based solely on automated processing. Our payment provider may run automated fraud checks.
4. Who we share data with
We never sell your personal data. We share it only where necessary:
Processors acting on our behalf and on our instructions under data processing agreements:
- E-commerce platform and hosting
- Payment providers
- Carriers
- Email and SMS tools
- Customer service tools
- Accounting/ERP systems
- IT suppliers
Independent controllers processing data for their own purposes under their own policies:
- Our e-commerce platform, which uses certain data about your use to provide, secure and improve its services.
- Payment providers in connection with credit assessment, fraud prevention and anti-money-laundering rules.
- Advertising platforms (Meta and Google) if you consented to marketing cookies.
- Public authorities where required by law, and our auditor and legal advisers.
- Buyers or investors in the event of a business transfer.
5. Transfers outside the EU/EEA
Some of our suppliers process data outside the EU/EEA. We only transfer data on a valid basis:
- Canada: the European Commission's adequacy decision.
- USA: the EU-U.S. Data Privacy Framework where the recipient is certified, otherwise the Commission's Standard Contractual Clauses (SCC) with supplementary measures.
Contact us for a copy of the relevant transfer basis.
6. How long we keep the data
| Data | Retention period |
|---|---|
| Accounting records (orders, invoices, payments) | 5 years from the end of the financial year the records relate to |
| Data for handling defect claims | For as long as the statutory defect period runs, plus up to 3 years for potential legal claims |
| Customer account | Until you delete the account, or after 3 years of inactivity |
| Customer service enquiries | 2 years after the case is closed |
| Newsletter/SMS subscription | Until you unsubscribe. Proof of consent is kept for 2 years after that. |
| Cookies | For the lifetime stated in the cookie settings |
7. Cookies and analytics
If you accept cookies, we measure use of the store with Google Analytics, Google Ads and Meta (Facebook/Instagram). We do not share your contact details with the ad networks. You can change or withdraw consent in the cookie settings at the bottom of the page.
8. Your rights
- Access: you can learn what data we process about you and get a copy.
- Rectification: you can have inaccurate data corrected.
- Erasure: in certain cases your data can be deleted. Records we must keep under accounting law cannot be deleted early.
- Restriction: in certain cases processing can be restricted.
- Portability: you can receive the data you provided in a structured, machine-readable format.
- Objection: you can object to processing based on our legitimate interests.
- Withdrawal of consent: you can withdraw consent at any time, without affecting processing before withdrawal.
You always have the right to object to direct marketing. Unsubscribe via the link in our emails, reply STOP to an SMS, or write to salg@boston.dk.
Write to salg@boston.dk to exercise your rights. We reply as soon as possible and within one month at the latest. We may ask you to confirm your identity first. Exercising your rights is free.
9. Complaint to the supervisory authority
If you are unhappy with how we process your data, we would like to hear from you first at salg@boston.dk. You also have the right to complain to the supervisory authority:
Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norge
+47 22 39 69 00
postkasse@datatilsynet.no
www.datatilsynet.no
If you live in another EU/EEA country, you can also complain to the data protection authority there.
10. Security
We use appropriate technical and organisational measures, such as an encrypted connection (HTTPS), access control and data processing agreements, to protect your data against loss, misuse and unauthorised access. No solution is 100% secure, so please do not send sensitive information such as card numbers by email.
11. Children
The store is not aimed at children under 18 and we do not knowingly collect data about them. If you are a parent and believe your child has given us data, contact us and we will delete it.
12. Links to other websites
The store may link to other websites and social media. We are not responsible for their processing of personal data — please read their own privacy policies.
13. Changes to this policy
We may update this policy, for example following changes in legislation or in our processing. The current version always carries the date at the top. For material changes we will notify you, for example by email or with a clear notice in the store.
Your rights as a consumer (withdrawal, statutory defect rights and complaint options) are set out in our terms of sale and delivery and our return policy.
Questions? Write to salg@boston.dk.