Privacy policy — BORA Systems

This privacy Policy of personal data (hereinafter – privacy Policy) applies to all information that the website BORA (the BORA) located on the domain (and its subdomains) can receive about the User during use of the website (and its subdomains), its programs and its products.

1. Definition of terms

1.1 The following terms are used in this Privacy Policy:

1.1.1. «Website Administration» (hereinafter referred to as the Administration) – authorized employees for the management of the BORA website who organize and (or) process personal data, as well as determine the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data.

1.1.2. «Personal data» means any information related directly or indirectly to a certain or identifiable individual (the subject of personal data).

1.1.3. «Personal data processing» means any action (operation) or a set of actions (operations) performed with or without the use of automation tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data.

1.1.4. «Confidentiality of personal data» is a mandatory requirement for the Operator or other person who has access to personal data to prevent their dissemination without the consent of the personal data subject or the presence of other legal grounds.

1.1.5. The «BORA Website» is a set of interconnected web pages located on the Internet at a unique address (URL):, as well as its subdomains.

1.1.6. «Subdomains» are pages or a set of pages located on third-level domains belonging to the BORA website, as well as other temporary pages, at the bottom of which the contact information of the Administration is indicated.

1.1.5. «User of the BORA website» (hereinafter referred to as the User) is a person who has access to the BORA website via the Internet and uses the information, materials and products of the BORA website.

1.1.7. «Cookies» — a small piece of data sent by the web server and stored on the user's computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open the page of the corresponding site.

1.1.8. «IP address» is a unique network address of a node in a computer network through which the User gets access to BORA.

2. General provisions

2.1. The use of the BORA website by the User means acceptance of this Privacy Policy and the terms of processing of the User's personal data.

2.2. In case of disagreement with the terms of the Privacy Policy, the User must stop using the BORA website.

2.3. This Privacy Policy applies to the BORA website. BORA does not control and is not responsible for the third-party sites to which the User can click on the links available on the BORA website.

2.4. The Administration does not verify the accuracy of the personal data provided by the User.

3. Subject of the Privacy Policy

3.1. This Privacy Policy establishes the obligations of the Administration for non-disclosure and ensuring the confidentiality of personal data that the User provides at the request of the Administration when registering on the BORA website or when subscribing to an e-mail newsletter.

3.2. The personal data allowed for processing under this Privacy Policy is provided by the User by filling out forms on the BORA website and includes the following information:

3.2.1. the User's last name, first name, patronymic;
3.2.2. the User's contact phone number;
3.2.3. e-mail address (e-mail);
3.2.4. the User's place of residence (if necessary);
3.2.5. photo (if necessary).

3.3. BORA protects the Data that is automatically transmitted when visiting the pages:

IP address;
information from cookies;
information about the browser;
access time;
referrer (the address of the previous page).

3.3.1. Disabling cookies may result in the inability to access parts of the site that require authorization.

3.3.2. BORA collects statistics about the IP addresses of its visitors. This information is used for the purpose of preventing, detecting and solving technical problems.

3.4. Any other personal information not mentioned above (browsing history, browsers used, operating systems, etc.) is subject to reliable storage and non-proliferation, except for the cases provided for in clause 5.2. of this Privacy Policy.

4. Purposes of collecting the user's personal information

4.1. The Administration may use the User's personal data for the following purposes:

4.1.1. Identification of the User registered on the BORA website for his further authorization.
4.1.2. Providing the User with access to the personalized data of the BORA website.
4.1.3. Establishing feedback with the User, including sending notifications, requests regarding the use of the BORA website, processing requests and requests from the User.
4.1.4. Determining the User's location to ensure security and prevent fraud.
4.1.5. Confirmation of the accuracy and completeness of the personal data provided by the User.
4.1.6. Creating an account for using parts of the BORA website, if the User has agreed to create an account.
4.1.7. User notifications by e-mail.
4.1.8. Providing the User with effective technical support in case of problems related to the use of the BORA website.
4.1.9. Providing the User with his consent with special offers, newsletters and other information on behalf of the BORA website.

5. Methods and terms of processing personal information

5.1. The processing of the User's personal data is carried out without a time limit, in any legal way, including in personal data information systems using automation tools or without using such tools.

5.2. The User's personal data may be transferred to the authorized state authorities of Republic of Estonia only on the grounds and in accordance with the procedure established by the legislation of Republic of Estonia.

5.3. In case of loss or disclosure of personal data, the Administration has the right not to inform the User about the loss or disclosure of personal data.

5.4. The Administration takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions of third parties.

5.5. The Administration, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.

6. Rights and obligations of the parties

6.1. The User has the right to:

6.1.1. Make a free decision on the provision of their personal data necessary for the use of the BORA website, and consent to their processing.
6.1.2. Update, supplement the provided information about personal data in the event of a change in this information.
6.1.3. The User has the right to receive information from the Administration regarding the processing of his personal data, if such a right is not restricted in accordance with federal laws. The User has the right to demand from the Administration to clarify his personal data, block or destroy them if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as to take measures provided for by law to protect his rights. To do this, it is enough to notify the Administration at the specified E-mail address.

6.2. The Administration is obliged to:

6.2.1. Use the received information exclusively for the purposes specified in clause 4 of this Privacy Policy.
6.2.2. To ensure that confidential information is kept secret, not to disclose it without the User's prior written permission, as well as not to sell, exchange, publish, or disclose the User's personal data transmitted in other possible ways, except for clause 5.2. of this Privacy Policy.
6.2.3. Take precautions to protect the confidentiality of the User's personal data in accordance with the procedure usually used to protect such information in the existing business turnover.
6.2.4. To block personal data related to the relevant User from the moment of the User's request or request, or his legal representative or the authorized body for the protection of the rights of personal data subjects for the period of verification, in case of identification of false personal data or illegal actions.

7. Responsibility of the parties

7.1. The Administration, which has not fulfilled its obligations, is liable for losses incurred by the User in connection with the illegal use of personal data, in accordance with the legislation of Republic of Estonia, except for the cases provided for in paragraphs 5.2. and 7.2. of this Privacy Policy.

7.2. In case of loss or disclosure of Confidential Information, the Administration is not responsible if this confidential information:

7.2.1. Became public domain before its loss or disclosure.
7.2.2. It was received from a third party before it was received by the Resource Administration.
7.2.3. It was disclosed with the consent of the User.