Privacy Policy

Last updated: July 2026

1. Data Controller

The data controller responsible for your personal data is BGUN. For any privacy-related inquiries, please contact our Data Protection Officer (DPO) at privacy@bgun.eu. We are committed to responding to all requests within 30 days.

2. Information We Collect

2.1 Account Information

• Name, email address, login credentials (bcrypt-hashed passwords)
• Phone number (optional)
• ID card number (for verification purposes only)
• Company name (optional, for dealers)

2.2 Usage Data

• IP address, browser type, device information
• Pages visited, time spent, click patterns
• Referring URL

2.3 Cookies

See our Cookie Policy for detailed information about the cookies we use and their purposes.

3. Legal Basis for Processing

We process your data based on:

• Consent: When you accept cookies or provide optional information
• Contract: When processing is necessary to provide our services
• Legitimate Interest: For security, fraud prevention, and platform improvement
• Legal Obligation: When required by law (e.g., firearms-related record keeping)

4. How We Use Your Information

• To provide and maintain the Platform
• To verify your identity and age (18+ requirement)
• To process communications between users
• To send important service notifications
• To improve the Platform and user experience
• To comply with legal obligations
• To prevent fraud and ensure platform security

5. Data Sharing

We do not sell your personal data to third parties. We may share data with:

• Hosting Providers: Neon (database), Vercel (hosting) — for platform operation
• Analytics: Google Analytics (only with your consent) — for platform improvement
• Law Enforcement: When required by law or to protect rights and safety

6. Data Retention

• Account Data: Retained until account deletion
• Session Tokens: 7 days (auto-expiring)
• Analytics Data: 26 months (Google Analytics default)
• Marketing Data: 90 days
• Legal Records: As required by applicable law (firearms-related records may be retained longer)

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Restriction: Request restriction of processing in certain circumstances
• Complaint: Lodge a complaint with your local data protection authority

To exercise any of these rights, contact our DPO at privacy@bgun.eu.

8. International Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

9. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Bcrypt password hashing
• HttpOnly, Secure, SameSite session cookies
• Content Security Policy (CSP) headers
• Regular security audits

10. Children's Privacy

BGUN is not intended for users under 18. We do not knowingly collect data from minors. If we learn that we have collected data from a minor, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Platform.