Privacy Policy

Who is responsible for recording your data?

The data on this website is processed by the website operator (the “controller”), whose contact details are set out under “Controller” below.

How do we record your data?

We collect data that you share with us — for example, information you enter into a contact or preview form. Other data is recorded automatically or after your consent by our IT systems when you visit the website; this is primarily technical information (e.g. web browser, operating system, or the time the page was accessed).

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data is used to fulfil your requests, such as generating a website preview or answering an enquiry.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients and purpose of your archived personal data at any time and free of charge. You also have the right to request the rectification or erasure of your data, to restrict or object to processing, to data portability, and to withdraw any consent you have given. You may also lodge a complaint with the competent supervisory authority. Please contact us at any time regarding these or other data-protection matters.

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data-protection regulations and this privacy policy. Please note that data transmission over the internet (e.g. by email) can have security gaps; complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing within the meaning of the GDPR is: NO BORING SHOPS L.L.C-FZ Meydan Grandstand, 6th floor Meydan Road, Nad Al Sheba Dubai, United Arab Emirates E-Mail: hello@noboringshops.com

Storage duration

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for processing no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. tax or commercial retention periods); in that case, deletion takes place once those reasons cease to apply.

Legal basis for processing

Where you have consented to processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. If your data is required to perform a contract or carry out pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, we rely on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The relevant legal basis in each case is stated in the following paragraphs.

Data protection officer

We have not appointed a data protection officer. For privacy enquiries you can reach us at: NO BORING SHOPS L.L.C-FZ Meydan Grandstand, 6th floor Meydan Road, Nad Al Sheba Dubai, United Arab Emirates E-Mail: hello@noboringshops.com

Data transfer to non-EU countries

To operate our website and provide our services, your data may be processed outside the EU/EEA. A data-protection level comparable to that in the EU cannot always be guaranteed in such countries. Any transfer takes place only on the basis of appropriate safeguards (e.g. the EU Commission's standard contractual clauses) or your explicit consent.

Withdrawal of your consent

Many data-processing operations are only possible with your explicit consent. You can withdraw consent you have already given at any time. This does not affect the lawfulness of the data processing carried out before the withdrawal.

Right to object (Art. 21 GDPR)

Where data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation; this also applies to any profiling based on these provisions. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to assert, exercise or defend legal claims. If your data is processed for direct advertising, you have the right to object to such processing at any time.

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged breach. This right is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will be done only where technically feasible.

Information, rectification and erasure

Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, a right to have this data rectified or erased. Please contact us at any time regarding this or other questions.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. This right applies in particular in the following cases:

• If you dispute the accuracy of the data we hold about you, we usually need time to verify this. For the duration of the review you may request restriction of processing.
• If the processing of your data was or is unlawful, you may request restriction instead of erasure.
• If we no longer need your data but you need it to assert, defend or exercise legal claims, you may request restriction instead of erasure.
• If you have objected under Art. 21(1) GDPR, a balancing of your and our interests must be carried out. As long as it has not been determined whose interests prevail, you may request restriction of processing.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection when the browser address line switches from “http://” to “https://” and by the padlock icon in the browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.

Rejection of unsolicited emails

We hereby object to the use of contact details published in the context of our imprint obligations to send us promotional and information material that we have not expressly requested. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, for instance via spam emails.

We host this website with a service provider within the European Union. When you visit the website, the host automatically collects and stores information in server log files transmitted by your browser (see “Server log files”). The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in a reliable presentation of our website. We have concluded a data processing agreement (DPA) under Art. 28 GDPR for the use of the hosting service.

Cookies

Our website uses cookies. Cookies are small data packages that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). By default we set only technically necessary cookies. Non-essential cookies and scripts are loaded only after your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases or to exclude them generally.

Consent management

Non-essential scripts and analytics are executed only after your active consent. Your consent — or its withdrawal — is logged so that we can meet the statutory documentation requirements. You may withdraw a given consent at any time with effect for the future.

Server log files

The provider of the pages automatically collects and stores information in server log files, which your browser transmits automatically. These are:

• browser type and version
• operating system used
• referrer URL
• hostname of the accessing computer
• time of the server request
• IP address

Contact and preview forms

If you send us enquiries via a form or request a preview, the details you provide, including the contact details you enter, will be stored by us to process the enquiry and in case of follow-up questions. Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).

Enquiry by email or telephone

If you contact us by email or telephone, your enquiry, including all resulting personal data, will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. Processing is based on Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR or your consent (Art. 6(1)(a) GDPR).

Preview generator (public business data)

When you request a free preview, Subadoo processes publicly available information about the business you name (e.g. from directories, map and review services) to generate a website preview. The legal basis is our legitimate interest in offering businesses a non-binding impression of their possible online presence (Art. 6(1)(f) GDPR). The documented legitimate-interest assessment is available on request. Preview pages are marked “noindex”, watermarked and expire automatically after 14 days.

Photos from your Google Business Profile

If you select your business from the suggestion list when requesting the preview, we also use the photos your business has published on its Google Business Profile to design your preview or website (Art. 6(1)(f) GDPR; after conclusion of a contract, Art. 6(1)(b) GDPR). Photos are always displayed with source attribution. You may object to this use at any time with effect for the future, informally in the chat, by email to hello@noboringshops.com or via the one-click removal; the photos are then removed and replaced by neutral placeholder images.

Email & contact (consent)

If you provide an email address to receive the preview link or information, we process it on the basis of your consent (Art. 6(1)(a) GDPR). Partner and contact enquiries are processed to respond to your request (Art. 6(1)(b)/(f) GDPR). You may withdraw your consent at any time with effect for the future.

Concierge chat

The concierge chat answers your questions and can start a preview on request. Information you submit is processed to respond to your enquiry and — where you provide contact details — recorded as a consent entry (Art. 6(1)(a)/(f) GDPR). Please do not enter special categories of personal data here.

Retention of preview pages

Preview pages and their associated data are deleted no later than 14 days after creation unless you claim the page. If you claim the page, we store the associated data for the duration of the contractual relationship and beyond insofar as statutory retention periods apply.

Recipients & processors

To provide the service, we use carefully selected providers (e.g. hosting, email delivery, payment processing) as processors under Art. 28 GDPR. Any transfer to third countries takes place only on the basis of appropriate safeguards.

Objection & one-click removal

You may object at any time to the processing of public business data for a preview (Art. 21 GDPR). Every preview page provides a one-click removal for this (“This isn't my business / remove this page”): one click removes the page immediately and logs the objection. Alternatively, an informal email to hello@noboringshops.com is sufficient.

Self-hosted fonts

This website uses self-hosted fonts (via @fontsource) to ensure a uniform presentation of typefaces. The fonts are installed locally; no connection to third-party servers (e.g. Google) is established when loading fonts, so no data is transferred to third parties for this purpose.