Privacy policy

1. General Provisions.
   
2. Terms and conditions of use of the website.
   
3. Purposes of information processing.
   
4. Composition of information about users.
   
5. Processing of user information.
   
6. Measures to protect information about Users.
   
7. Limitation of the validity of the Rules.
   
8. Appeals of Users.
   

1. General Provisions.

1.1. These Rules of personal data processing and privacy policy of bo3.gg website (hereinafter - Rules) are an official document of bo3 portal (hereinafter - Website Administration), and determine the order of processing and protection of information about individuals using the services of bo3.gg website (hereinafter - Website) and its services (hereinafter - Users).

1.2. By using bo3.gg services, you may share various types of information, including personal data. When your personal data is processed, you are recognised as a data subject and are entitled to exercise your rights under the EU Data Protection Law, as outlined in this Privacy Policy. Since we determine the purposes and methods of processing personal data on bo3.gg, we are legally regarded as a data controller for your personal data on this website. This role grants us the authority to process your personal data, but also imposes the obligation to protect it in accordance with EU Data Protection Law, specifically the General Data Protection Regulation (GDPR) and this Privacy Policy.

1.3. The purpose of this Policy is to ensure that information about users, including their personal data, is adequately protected from unauthorised access and disclosure.

1.4. The current version of the Rules, which is a public document, is available to any Internet user by following the link https://bo3.gg/wiki/privacy-policy . The Website Administration shall have the right to make changes to these Rules. When making changes to the Rules, the Website Administration shall not notify the Users thereof.

1.5. By registering and using the Site, the User expresses its consent to the terms of these Rules. By accepting these Rules an individual (User) gives consent to receive advertising messages about promotional events conducted by the Site administration, partners by e-mail notifications, including advertising materials placed in social networks and partners' sites.

1.6. The provision of personal data by the User to the Site administration is considered by it as a specific, informed and conscious consent given by the subject of personal data or legal representative of a minor subject of personal data (User) to the processing of personal data of the User by the Site administration, its partners, as well as by third parties processing personal data on behalf of the Site administration/partners. The said consent is given by the User freely, of its own free will and in its own interest.

1.7. In case of disagreement of the User with the terms of these Rules, the use of the Site and its services shall be immediately terminated. The User may at any time unilaterally withdraw its consent to the processing of personal data by the Site Administration by submitting a written application in any form and an e-mail to [email protected], containing the same personal data that were specified when providing personal data to the Site Administration.

2. Terms of use of the Site.

2.1. By providing services on the use of the Site and its services (hereinafter - the Site Services), the Site Administration, acting reasonably and in good faith, considers that the User:

- has all necessary rights allowing him to register and use this Site;

- indicates reliable information about himself/herself in the amounts necessary for the use of the Site Services;

- realises that the information on the Site, placed by the User about himself/herself, may become available to other Users of the Site and Internet users, may be copied and distributed by such users;

- realises that some types of information transmitted by him/her to other Users cannot be deleted by the User himself/herself;

- is familiarised with these Rules, agrees with them and accepts the rights and obligations specified in them.

2.2. Responsibility for the legality and reliability of the User's personal data shall be borne solely by the person who provided it. The Website Administration does not assume any obligations to verify the personal data provided by the Users.

3. Purposes of information processing.

The purposes of processing of personal data of Users by the Administration are:

• authorisation of Users on the Site;
• attracting Users to participate in promotional events, marketing research;
  
• investigation of User's satisfaction with the quality of products and services of the Administration and/or Partners;
  
•  informing Users about products and services of the Administration and its Partners.
  

4. Composition of information about Users.

4.1. Personal data of Users Personal data of Users includes:

4.1.1. the e-mail address provided by Users and minimally required for registration on the Website;

4.1.2. provided by Users using the section of editing their pages on the Site bo3.gg:

- surname and first name;

- fictitious name (nickname);

- links to social networks;

- email address;

- country;

- date of birth.

4.2 Other information about Users processed by the Website Administration may also process other information about Users, which includes:

4.2.1.additional data obtained when accessing the Site, which includes data on technical means (devices), technological interaction with the Site (including host IP address, type of user's operating system, browser type, geographical location, Internet service provider, data from the address book, data obtained as a result of access to the camera, microphone, etc. devices), and subsequent actions of the User on the Site.

4.2.2. information automatically received when accessing the Site using bookmarks (cookies);

4.2.3. information created by users on the Site outside the editing section of bo3.gg pages (including microblogs, photos, audio recordings, video recordings, comments).

5. Processing of information about users.

5.1. The processing of personal data is carried out on the basis of the principles of:

- lawfulness of the purposes and methods of personal data processing;

- integrity;

- compliance of the purposes of personal data processing with the purposes determined in advance and declared at the time of personal data collection, as well as with the powers of the Website Administration;

- compliance of the scope and nature of the processed personal data, methods of personal data processing with the purposes of personal data processing;

- inadmissibility of combining databases containing personal data created for incompatible purposes.

5.1.1. For the purposes of personal data processing established by these Rules, the User gives their consent to the processing of personal data in the following ways: collection, storage, use, transfer of personal data, destruction.

5.1.2. Collection of personal data The User's personal data is collected on the Website during registration, as well as in the future when the User makes additional information about himself/herself on his/her own initiative with the help of the Website tools. Personal data provided for by cl. 4.1.1. of these Rules are provided by the User and are the minimum necessary for registration.

5.1.3. Storage and use of personal data: Personal data of users are stored exclusively on electronic media and processed using automated systems, except for cases when non-automated processing of personal data is necessary in connection with the fulfilment of legal requirements.

5.1.4. Sharing Your Personal Data. We may share your personal data with third parties, categorized as follows:

- Members of the Better Collective Group (BC Group). As we are part of the Better Collective Group, we share data with other entities within this group. We define the purpose and methods of processing your data and decide which of your data will be processed by other BC Group members. For more details about the BC Group members, click here.

- Service Providers: Entities that assist us in providing and enhancing our services, such as analytics, maintenance, marketing, and development. These entities are authorized to process your data as needed to perform their tasks. We solely determine the purpose and methods of processing your data and decide which data will be processed to fulfill these tasks.

- Public Authorities and Law Enforcement: We may disclose your data to public authorities and law enforcement agencies when necessary and where legally required or permitted.

5.1.5. Transfer of Your Data to Third Countries. We may transfer your personal data outside the European Economic Area (EEA) to regularly provide and further develop our services. We ensure that all recipients of your personal data implement an adequate level of protection and appropriate safeguards as defined by the applicable data protection law, particularly the GDPR.

Your personal data may be transferred to countries that the European Commission has deemed to have an adequate level of data protection. For more information about these countries, click here.

For transfers to the United States, we strive to comply with the Privacy Shield framework. More details about the Privacy Shield mechanism can be found here.

Where necessary, we will enter into Data Protection Agreements with the recipients of your data. These agreements will include Standard Contractual Clauses issued by the European Commission, obligating the recipient to provide an adequate level of protection and implement appropriate safeguards as defined by the applicable data protection law, particularly the GDPR, regarding the processing of your personal data.

5.1.6. In limited circumstances, you have the right to request that we delete the information we hold about you. These are the following cases:

- If the data is no longer necessary for the purposes for which it was collected

- If you have withdrawn consent to the processing of your data and there is no other lawful basis on which we can continue to process your data

- If you have objected to the processing and there is no lawful basis on which we can continue to process it

- If the data has been processed unlawfully

- If the data must be deleted in order to comply with a legal obligation.

5.2. By placing information on the personal page, including their personal data, the User realises and agrees that the specified information may be available to other Internet users, taking into account the features of the architecture and functionality of the Site. The Site Administration takes technical and organisational measures to ensure the functioning of the relevant tools of the Site.

6. Measures to protect information about Users.

6.1. The Website Administration shall take technical, organisational and legal measures to ensure protection of the User's personal data from unlawful or accidental access to them, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions.

6.2. User's login and password are used to authorise access to the Website. The User is responsible for the safety of this information. The User has no right to transfer his/her own login and password to third parties, and is obliged to take measures to ensure their confidentiality.

7. Limitation of the validity of the Rules.

The action of these Rules does not apply to the actions and Internet resources of third parties. The Site Administration is not responsible for the actions of third parties, who as a result of using the Internet or the Site Services have access to information about the User in accordance with the level of confidentiality chosen by the User, for the consequences of using the information, which, due to the nature of the Site, is available to any Internet user. The Administration of the Site recommends Users to take a responsible approach to the decision on the amount of information about themselves, placed on the Site.

8. Appeals of Users.

8.1. Users have the right to send their requests to the Website Administration in writing to the address: Prodromou 75, Oneworld Parkview House, 4th floor, 2063, Nicosia, Cyprus or in the form of an electronic document to the e-mail address: [email protected].

8.2. The request sent by the User shall contain the following information:

- number of the main identity document of the user or his/her representative;

- information about the date of issue of the document and the issuing authority;

- information about the personal data entered when registering on the Site;

- the signature of the user or his/her representative.

8.2. The Site Administration undertakes to consider and send an answer to the received User's request within 30 days from the moment of receipt of the request.

8.3. All correspondence received by the Website Administration from users (requests in written or electronic form) refers to information of limited access and is not disclosed without written consent of the User. Personal data and other information about the User, who sent the enquiry, cannot be used without special consent of the User, except for answering on the subject of the received enquiry or in cases directly stipulated by the legislation.