BusinessClass Forum Privacy Policy

Contents

1. What this Privacy Policy covers
2. Personal data we collect
3. Why we use your data
4. Legal bases (GDPR)
5. How we share your data
6. Cookies and similar technologies
7. International data transfers
8. Data retention
9. Your rights (EU/EEA)
10. Account deletion and content removal
11. Children
12. Security
13. Changes to this Privacy Policy
14. Contact

1) What this Privacy Policy covers

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you:

• browse the Forum,
• register or log in,
• create a profile,
• post content (threads, replies, reactions),
• message other users (if enabled),
• contact moderators or support,
• and interact with Forum features.

Third-Party Sites and Widgets: This Policy applies only to the Forum and our own services. It does not apply to third-party websites, applications, services, or content that may be linked from the Forum, nor to any third-party widgets, plugins, or embedded content (e.g., social media embeds, video players, maps) that may collect data independently. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies before interacting with them.

Our Terms of Service may also apply to your use of the Forum.

Back to contents

2) Personal data we collect

We collect data in three ways: (A) data you provide, (B) data collected automatically, and (C) data from third parties.

2.A) Data you provide directly

Depending on how you use the Forum, this may include:

• Account data: username, email address, password (stored as a hash), account settings
• Profile data: avatar, bio, location (if you choose to provide it), other optional profile fields
• User-generated content (UGC): posts, comments, likes/reactions, uploaded images/files, reports you submit
• Communications: messages to moderators/support, dispute/abuse reports, feedback
• Preference choices: notification settings, cookie preferences (where applicable)

Sensitive / Special-Category Data: Please do not post or otherwise disclose any special-category personal data (also known as “sensitive data”) in the Forum, such as information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data used for identification, health data, or data concerning a person’s sex life or sexual orientation. We do not intend to collect or process such information through user-generated content, and users should avoid sharing it in posts, comments, profile fields, or attachments.

2.B) Data we collect automatically

When you access the Forum, we may automatically collect:

• Device and log data: IP address, browser type, device identifiers, operating system, timestamps, pages viewed, referring URLs
• Security and abuse-prevention signals: rate-limiting events, suspicious login attempts, spam indicators
• Cookies and similar technologies: see Section 6 (and our Cookie Policy, if published separately)

2.C) Data from third parties

If you use third-party features, we may receive limited data from them, such as:

• Social login providers (e.g., Google/Facebook/X if enabled): a user ID/token and basic profile fields you authorize (often email and display name)
• Service providers that help us run the Forum (hosting, email delivery, anti-spam tools)

Back to contents

3) Why we use your data (purposes)

We use personal data to:

• provide and operate the Forum (create accounts, enable posting, display content);
• authenticate and secure accounts (login, session management, password recovery);
• moderate and enforce rules (detect spam/abuse, investigate reports, apply bans);
• communicate with you (service messages, moderation notices, support replies);
• improve the Forum (performance, troubleshooting, feature improvements);
• comply with legal obligations and respond to lawful requests.

Compliance with the EU Digital Services Act, including notice-and-action handling and record-keeping.

Back to contents

4) Legal bases (GDPR)

Where GDPR applies, we process personal data under one or more legal bases, such as:

• Contract (to provide your account and Forum features)
• Legitimate interests (security, fraud/spam prevention, basic analytics, service improvement, moderation)
  
Where we rely on legitimate interests (Article 6(1)(f) GDPR), this includes, in particular: (i) operating, moderating, and administering the Forum (including handling notices and enforcing our Terms), (ii) maintaining security and integrity of our systems (including logging, fraud detection, and incident investigation), and (iii) preventing abuse, spam, and other harmful or unlawful activity. In each case, we balance our legitimate interests against your rights and freedoms and apply appropriate safeguards (such as access controls, data minimization, and limited retention). You may object to processing based on legitimate interests under Article 21 GDPR. We will assess such objections on a case-by-case basis.
• Consent (for non-essential cookies, optional marketing, or optional profile fields where relevant)
• Legal obligation (responding to lawful requests and legal compliance where applicable)
• Establishment, exercise, or defense of legal claims

Back to contents

5) How we share your data

We may share personal data in the following cases:

5.A) Public sharing (because it’s a forum)

• Your profile and your posts may be visible to the public (depending on Forum settings).
• Search engines may index public pages.
• If you include personal data in your posts, it becomes public at your discretion.
• Cached, quoted, or archived content may persist even after deletion

5.B) Service providers (processors)

We use trusted vendors to help operate the Forum (for example: hosting, CDN/DDoS protection, email sending, backups, anti-spam). They process personal data only on our instructions and for providing their services to us.

5.C) Legal and safety reasons

We may disclose information if we believe it is necessary to:

• comply with law or legal process,
• protect rights and safety of users and the public,
• investigate fraud, security, or abuse.

5.D) Corporate transactions

If we are involved in a merger, acquisition, restructuring, or asset sale, user data may be transferred as part of that transaction (subject to applicable law). Any acquirer must honor existing privacy commitments.

Back to contents

6) Cookies and similar technologies

We use cookies and similar technologies for:

• Strictly necessary functions (login session, security, preferences), and
• if enabled, analytics and other optional features.

Back to contents

7) International data transfers

If we (or our vendors) transfer personal data outside the EU/EEA, we use appropriate safeguards (such as Standard Contractual Clauses) and apply additional measures where required.

Back to contents

8) Data retention

We keep personal data only as long as needed for the purposes described above, including:

• Account data: while your account is active; if you delete your account, we delete or anonymize data where feasible and lawful.
• Content (posts): may remain visible if you posted publicly, unless removed or anonymized according to Forum rules and technical constraints (e.g., preserving thread readability).
• Logs/security records: typically retained for a limited period (e.g., [30–180] days) unless needed for investigations or legal compliance.
• Backups: retained for a limited rolling period.
• Retention of posts after account deletion relies on legitimate interest and freedom of expression.

Back to contents

9) Your rights (EU/EEA)

Depending on your location, you may have rights to:

• access your personal data,
• rectify inaccurate data,
• erase data (“right to be forgotten”) in certain cases,
• restrict or object to processing in certain cases,
• data portability (where applicable),
• withdraw consent (when processing is based on consent).

These rights are part of the GDPR transparency/rights framework. (GDPR)

Back to contents

10) Account deletion and content removal

You may be able to delete or disable your account through [Account Settings] (if enabled).

Back to contents

11) Children

The Forum is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us at [email protected].

Back to contents

12) Security

We use reasonable technical and organizational measures designed to protect personal data (access controls, encryption in transit, monitoring, backups). However, no system is 100% secure; please use a strong password and keep it confidential.

Back to contents

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. If changes are material, we will provide additional notice where required.

If we make material changes to this Policy, we will provide a prominent notice on the Forum. We will also update the “Effective date” at the top of this Policy.

Back to contents

14) Contact

For privacy questions or requests:

You can also contact the Estonian supervisory authority (Andmekaitse Inspektsioon).

The English version prevails if translations exist.

Back to contents