Privacy and cookies
We collect very little, and we would rather tell you exactly what than reassure you vaguely.
1. Who is responsible
The controller of personal data processed through bopva.org is:
- Controller
- JBV Consultancy OÜ
Sepapaja tn 6, 15551 Tallinn, Harju maakond, Estonia
Registry code 14807025 · VAT EE102224454 - Privacy contact
- privacy@bopva.org
The publisher is established in Estonia, so the EU General Data Protection Regulation (GDPR) and Estonian data protection law apply to everything described here. Readers in Canada also have rights under Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA); where Canadian law gives you a stronger right, we respect it.
2. Reading the site
You can read every page without giving us anything. When you load a page, our hosting server records standard technical data: IP address, date and time, the page requested, the referring page and your browser type. We use this to deliver the site, find faults and protect it against abuse (legal basis: our legitimate interest, GDPR Article 6(1)(f)). Logs are kept for a short period and then deleted or reduced to statistics.
Fonts, icons and images are served from our own server. Reading a page does not send your IP address to any font service, social network, video platform or analytics provider.
3. The Bopva Letter (newsletter)
If you post the reply card, we collect your email address and nothing else, together with the date and time you signed up and confirmed, which is the record of your consent.
- Purpose: sending you The Bopva Letter, which you asked for.
- Legal basis: your consent (GDPR Article 6(1)(a)).
- Double opt-in: we first send one email asking you to confirm the address. Until you click the link in it, nothing else is sent; unconfirmed addresses are deleted.
- Withdrawal: every issue contains an unsubscribe link, or write to privacy@bopva.org. It takes effect straight away and costs nothing.
- Who else sees it: only the email delivery provider we use to send the letter, acting on our behalf under a data processing agreement. We do not sell or rent addresses.
Your email address is never placed in a web address (URL), and we never ask for a name, postal address, date of birth, Social Insurance Number or any financial information.
4. Cookies and browser storage
This site does not set advertising cookies of its own. It uses two small items of browser storage:
| Item | Purpose | Kept |
|---|---|---|
| Your cookie choice (local storage) | Remembers whether you chose “Accept” or “Essential only”, so the notice does not reappear | Until you clear site data |
| Campaign parameters (session storage) | If you arrived from an advertisement, keeps its campaign or click reference so a subscription can be attributed to it | Until you close the browser |
Both are strictly necessary for the functions described, and neither identifies you by name.
5. Advertising measurement
This site is promoted through paid advertising. Advertising platforms offer measurement tags that record that a visitor arrived from one of their adverts.
Current state: no advertising or analytics tag is active on bopva.org. The site is built so that, if a measurement tag is added in future, it will load only after you press “Accept” in the cookie notice, and only on article and section pages, never on this page, the imprint, the contact page or the thank-you page. If you choose “Essential only”, no such tag loads and nothing on the site changes for you. Before any tag is switched on, this section will be updated to name the provider and the data it receives.
If you accept and later change your mind, clear this site’s data in your browser settings; the notice will reappear and you can choose again. Legal basis for any such tag: your consent (GDPR Article 6(1)(a)).
6. Emails you send us
If you write to us, we use your message and address to reply and keep the correspondence as long as needed to deal with it (legal basis: our legitimate interest in answering, GDPR Article 6(1)(f)).
7. Transfers outside the EU
Where a service provider processes data outside the European Economic Area, we rely on an adequacy decision of the European Commission or on the Commission’s standard contractual clauses.
8. Your rights
You may ask for access to your data, correction, deletion, restriction of processing, data portability, and you may object to processing based on legitimate interest or withdraw consent at any time. Write to privacy@bopva.org; we reply within one month, free of charge.
9. Complaints
You can complain to a supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, www.aki.ee. Readers in Canada may also contact the Office of the Privacy Commissioner of Canada, www.priv.gc.ca, and readers elsewhere in the EU the authority in their own country.
10. What we will never ask for
No page on this site needs a Social Insurance Number, banking details, or a My Service Canada Account or CRA password, and we will never ask for them by email, phone or form. If someone does so in our name, they are not acting for us; please tell us at privacy@bopva.org.
11. Changes
If what this site does with data changes, including switching on a measurement tag, we will update this notice and the date at the top before the change takes effect.