Privacy policy

Last updated: 10 August 2026

1. Who we are

This website, shop.gladiatorsup.com, is operated by SIA BS Marine — “we”, “us” and “our” below. We are registered in Latvia under number 40103999160. Registered office: Dzirnavu iela 92-3, Riga, LV-1050. Principal place of business: Brivibas 57, Riga, LV-1010.

We are the data controller for everything described here. For any question or request about your personal data, write to gatis@gladiatorsup.com.

2. What this website is

A single page presenting Gladiator SUP boards. There is no account to create, no order to place, no payment to make and no form to fill in. Purchases happen on Amazon, a separate company that applies its own privacy policy.

Because of that we hold no name, postal address, telephone number or payment details of yours. What follows is the complete list of what we do process — there is nothing else.

3. The cookie that records your choice

One cookie, gl_consent, stores whether you accepted or declined analytics. It lasts 12 months and contains nothing but the word “accepted” or “declined”.

We set it without asking because it exists only to carry out the decision you made: without it the banner would ask again on every page you open.

4. Analytics — only if you accept

If you press “Accept”, we load Google Analytics 4. Until you do, no analytics script is loaded and nothing at all is sent to Google. If you press “Decline”, we also delete any Google Analytics cookies already sitting in your browser.

Once enabled, Google Analytics processes:

your IP address, which Google truncates before storing it — we never see it in full;
the approximate location derived from it, no finer than a city;
device type, browser, operating system and screen size;
which page you are on, the language you read it in and the site you arrived from;
an event named click_amazon when you press an Amazon button, recording which button it was and in which language. Nothing identifying you is attached to it.

Google sets its own cookies for this — _ga and _ga_<property> — which last up to 24 months.

Legal basis: your consent, Article 6(1)(a) GDPR.

Recipient: Google Ireland Limited, acting as our processor. Data may reach the United States under the European Commission’s adequacy decision for the EU–US Data Privacy Framework, backed by Standard Contractual Clauses. Google’s own policy is at policies.google.com/privacy.

5. Server logs

Our hosting provider keeps standard access logs: IP address, time of request, address requested and browser identification. They exist to keep the site running and to defend it against attack.

Legal basis: our legitimate interest in the security and availability of the website, Article 6(1)(f) GDPR.

6. What we do not do

No advertising, remarketing or ad networks. No Google AdSense.
No profiling and no automated decisions about you.
No selling or sharing of data with brokers or third-party marketers.
No newsletter, no contact form, no user accounts.
No payment data of any kind — payment happens on Amazon, never here.

7. Changing your mind

You can withdraw or give consent whenever you like: . Withdrawing does not make the earlier processing unlawful — it stops it going forward.

Deleting cookies in your browser settings has the same effect.

8. How long we keep things

gl_consent — 12 months from the moment you choose;
Google Analytics data — the retention period configured in our Analytics property, 14 months at most;
server logs — for as long as our hosting provider retains them for security purposes.

9. Your rights

Under the GDPR you may ask us to:

confirm what personal data we hold about you and give you a copy;
correct anything inaccurate or incomplete;
erase your data;
restrict how we process it;
hand it over in a machine-readable format, or send it to another controller;
stop processing carried out on the basis of our legitimate interest.

You may also withdraw consent at any time, as described in section 7.

Write to gatis@gladiatorsup.com to exercise any of these. We answer within one month.

If you believe we handle your data unlawfully, you can complain to a supervisory authority: in Latvia that is the Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv). You may also go to the authority of the EU country where you live or work.

10. Links to Amazon

Pressing an Amazon button takes you to amazon.com, amazon.de, amazon.fr or amazon.it. From that moment Amazon’s privacy policy governs, not ours. We receive no personal data back from Amazon.

11. Children

This website is not directed at children, and we do not knowingly process data about anyone under 16.

12. Data protection officer

Gatis Valdbergs — gatis@gladiatorsup.com.

13. Changes to this policy

We publish any change on this page and update the date at the top. If we ever change what we collect or why, we will ask for your consent again wherever the law requires it.