Privacy Terms

Conditions for protection of personal data

These Terms and Conditions for the Protection of Personal Data are drafted with the purpose of protecting the privacy of former, current and future customers of Borealis Eesti OÜ (hereinafter Borealis).
Accordingly, we outline the principles for collecting, using, publishing, transmitting and storing Customer Data.
The activities of Borealis are in compliance with all relevant activities and relevant European Union legislation and the laws of the Republic of Estonia.
Your privacy and the security of your personal information are very important for us.

1. DEFINITIONS

1.1. Customer – physical person who wants to buy goods, who has made the purchase of goods, or who uses the warranty and repair services offered.
1.2. Customer’s personal information – any data relating to an identified physical person, irrespective of the form or form in which the information is located. Personal data include, for example, customers data such as name, gender, age, personal identification code, e-mail address, place of residence, telephone number, banking details, income, photos, and videos.
1.3. Processing of personal data – Any activity involving personal data, including collection, storage, modification, etc.
1.4. Controller – Borealis Eesti OÜ, a limited liability company incorporated under the laws of the Republic of Estonia, registry code 11100242, location Valukoja 8, Tallinn, Harju County, 11415, Republic of Estonia, e-mail address info@borealis.ee and phone number +372 56 252 411.
1.5. Authorized processor – A physical or legal person, public authority, agency or any other organ which processes personal data on behalf of the controller.

2. Processing Principles

Borealis holds great importance to keeping the Customer’s  personal data confidential and protection is crucial and ensures the legality of the processing of the Customer data.
2.1. Processing is legal, fair and transparent to the Customer;
2.2. Personal data is collected accurately and for clearly defined and legimate purposes and it is not further processed in a way incompatible with the purposes;
2.3. Personal data is relevant, important, and limited to what is necessary for the purpose for which they are processed;
2.4. Personal data is correct and, where necessary, up-to-date and all reasonable steps are taken to ensure that personal data which are inaccurate for the purpose of processing are deleted or corrected without delay;
2.5. Personal data is stored in a form that allows the Customer to be identified only as necessary for the purpose for which the personal information is processed as long as it is processed;
2.6. Personal data shall be processed in such way as to ensure the appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage through appropriate technical or organizational measures.

3. Processing purposes

Borealis processes the Customer’s personal data for the performance of the contract, on the basis of a legitimate interest or for the performance of a legal obligation. Borealis  processes personal information that is provided voluntarily by the Customer and with the consent of the Customer.
Personal information may include: first name, surname, phone number, date of birth, personal identification code, address (street/cottage, house number, apartment number, city or town, county, zip code), e-mail address, method of delivery, payment method used for the goods, and purchased goods and services and their cost.
Borealis processes Customer’s personal information:
3.1. The following information is processed for entering into and executing sales contract with the customer in sales office and an online shop and for issuing invoices and sending to the Customer:
Customer’s first and last name, phone number, e-mail address, used payment method, purchased goods and services and their cost, method of delivery;
3.2. Customer’s request for consumer credit. Borealis processes personal data submitted by the Customer for the purpose of forwarding the application for post payment to the creditor.

In order to secure the rights and obligations related to the post-payment agreement and the fulfillment of the obligations related to the payment of the installment contract, the following additional personal data of the Customer shall be forwarded to the creditor in addition to the personal data specified in clause 3.1:
Customer’s personal identification code, document number, number of dependents, marital status, educational level, employer, job title, time of employment, income, source of income, data on loan and leasing obligations (including name of the giver of the loan or leasing, balance of liability, amount of monthly payment), type of housing, first amount of the deposit, the appropriate repayment date, the appropriate contract length, the approximate monthly payment, the consent to make a request to the funded pension register, information on the fulfillment of essential functions of public authority by the consumer credit (post pay) applicant, from his/her family member or close associate.
3.3. Purchase and delivery of the goods purchased from Borealis.
If the Customer chooses a parcel terminal, parcel shop or courier service as the delivery method of the goods, Borealis has the right to forward the Customer’s personal data to the service provider in the amount necessary for delivering the goods to the Customer;
3.4. The data specified in clause 3.1 shall be processed with the Customer for the purpose of sending the Customer a notice of the performance of a sales contract entered into or to be entered by the Customer or for inquiries concerning price or product information submitted by the Customer;
3.6. For Customer servicing in the course of Customer equipment maintenance during warranty and repair procedures, the data specified in clause 3.1 are processed;
3.7. In Borealis sales offices to issue certificates related to the insurance of goods or extension of the warranty period, the data specified in clause 3.1 will be processed;

3.8. Borealis is a controller of Personal Data and transfers the personal data necessary for the execution of payments to the Payment Processor AS.

4. Principals of storag

Borealis storages personal data as long as they are necessary for the purpose of the processing, but no longer than the expiry of statutory limitation periods.
4.1. If Borealis wants to keep personal information longer than is necessary for the purpose of the collection, Borealis will anonymize the personal data so that Customer is no longer identifiable.

5. Customer rights

5.1. Right to access their data.
5.2. Right to fix data.
5.3. Right to restrict the processing of personal data.
5.4. Right to transfer data.
5.5. Right of data deletion.
5.6. Right to object.
Borealis answers Customer’s requests without undue delay, but not later than one month after receiving the Customer’s request. This period may, if necessary, be extended by two months, taking into account the complexity of the application, then Borealis will inform Customer of any such extension and of the reasons for the delay within one month of receiving the request. If Customer submits an application electronically, the information will also be provided electronically if Customer does not request otherwise. In addition, the Customer has the right to turn to the Data Protection Inspectorate or the court at any time in case of violation of his/her rights.

6. Security

Borealis applies all precautions (including administrative, technical and physical measures) to protect the Customer’s personal data. Access to the data processing is restricted to authorized persons. In case of an event where the Customer has any suspicion that the personal data protection conditions described in the Personal Data Protection Conditions have been broken and/or in the case of the risk of data leakage to foreign persons, we ask the Customer to inform Borealis immediately of such occurrence.
6.1. In order to ensure the security of personal data processing, Customer undertakes to submit to Borealis all requested his/her personal data electronically, signed to the following e-mail address andmekaitse@borealis.ee
6.2.

Borealis processes the Customer’s personal data in accordance with the requirements established by legislation and only for the conclusion and performance of sales contracts, to guarantee service during warranty and repair procedures, and to the extent necessary to the use of the online shop. Borealis may use the Customer’s personal data for the protection of its rights and to pass on the Customer’s personal data to Third Parties to the extent necessary to protect its rights.
6.3. Borealis does not transmit, sell or disclose personal information collected to Third Parties without the prior consent of the Customer, unless there is a legal obligation to do so or if such terms are provided in the Terms of Sales.

7. Validity and changes

7.1. Conditions for protection of personal data is available to our customers on Borealis website and sales office.
7.2. Borealis has the right to unilaterally update, detail and supplement the terms and conditions of personal data protection at any time in accordance with applicable law, informing Customers of the changes via the Borealis website and/or by e-mail.

8. Contacts

For questions related to this Privacy Terms, please contact us through our e-mail address andmekaitse@borealis.ee

The last update of the Privacy Terms has been done 23.11.2018.