Information about handling personal data At Borutan, we process information about you and how you use our services. Borutan is the data controller for the data processed under the Borutan brand. As the data controller, we are responsible for the processing of your data, how and for what purposes the processing is carried out.

What types of data we process We collect and process two types of data about you:

Customer data is information related to your service, such as name, personal identification number, address, phone number, email address, information about agreements and services you have with us, and how you use our services, login information, information about your financial status that we may obtain as part of credit checks.

Traffic data is information related to what happens when you use any of our electronic communication services. Traffic data is processed to transmit an electronic message over an electronic communications network when you use our services. This may include when you make a call or send an SMS. Traffic data also includes information processed for billing our services and for interconnection. Examples of traffic data include information about who communicated with whom, at what time, how long the communication lasted, and which networks were used for such communication.

Information about where you are when you make a call or are connected, such as to which mast, is also considered traffic data.

How we collect data We collect and process data:

• As you voluntarily provided when you became a customer with us and when you communicate with us, such as when you subscribe to services, contact customer service, or sign up for newsletters from us.
• As generated when you use any of our services, such as browsing Borutan.se, sending emails,
• As obtained from other sources, such as from partners (e.g., various social media and marketing networks),
• As collected through our websites placing cookies that gather information from your browser.

The type of data we process about you depends on the services you use. Here's how we use data: To process customer and traffic data, we must base processing on a legal basis according to applicable privacy laws. This means processing must be based on one of the following reasons: processing is necessary (i) for us to fulfill a contract with you or (ii) for Borutan to fulfill a legal obligation, (iii) you have consented to the processing, or (iv) based on a legitimate interest.

Below are examples of purposes for which we process your customer and traffic data and the legal basis for such processing. To comply with laws, we process data to fulfill our legal obligations, e.g., to comply with court orders such as blocking access to certain websites containing copyrighted material unlawfully provided from such sites. The legal basis for processing is legal obligation.

To deliver services, we process data to deliver the services you have ordered from us in accordance with the terms stated in the agreement between us.

Such processing includes traffic management measures such as filtering, blocking, and throttling to maintain the limitations in the service delivery method we have agreed upon. We also process data to enable payment for the services we have agreed upon, to manage invoices and payments, to handle complaints and claims, and for troubleshooting and management of other incidents. We will also process data to ensure the operation of the service.

The legal basis for processing data under this point is fulfillment of the contract. To communicate with you about services, we process data to communicate with you about the services we provide, e.g., when you contact us for information, make inquiries, use the services, or provide feedback about our services and products.

Based on your use of a service, we may provide recommendations on how to use such service, e.g., to improve customer experience or learn about new features. We may also analyze content in chat logs for the purpose of training our staff. We also process data to provide you with a better customer experience when you contact us.

If you have questions or want to exercise your rights, you can contact us at: Borutan LTD (683101) Stockholm, Klarabergsviadukten 70, 111 64 Stockholm, Sweden, www.borutan.com. You can request a registry extract by emailing info@borutan.com starting from September 1, 2019.