# Privacy Policy | Be1B > How Be1B handles your data and privacy. - **URL**: https://be1b.com/privacy-policy - **Category**: Legal - **Language**: EN ## Content This privacy policy explains how Be1B collects, uses, stores, and protects personal data when you access our website, the Be1B app, or related services. By visiting our digital properties, registering for an account, or otherwise interacting with us, you acknowledge that this policy applies to the processing of your information. ## 1. Identification ### Who is responsible for processing your data? BeOneB OÜ Company ID: 16656369 Registered office: Harju maakond, Tallinn, Kesklinna linnaosa, Rävala pst 2, 10145, Estonia. ### Data Protection Officer DPO contact: Jaana Email: dpo@be1b.com ## 2. Information and acknowledgement Please read this privacy policy carefully. In some cases, we will only process your personal data where you have given your consent or where processing is necessary to provide the service you requested. ## 3. Mandatory provision of data We use IP addresses and device identifiers to operate the website and app correctly. Unless stated otherwise, the personal data requested through our website or app is necessary for the stated purposes, and we may be unable to provide the full service if it is not supplied. ## 4. How we use the data we collect We process personal data for the following purposes: - Register and maintain your account, including sharing required data with service partners so we can provide Be1B services under Article 6(1)(b) GDPR. - Manage payments, execute payment orders, and keep the app operating correctly under Article 6(1)(b) GDPR. - Assess transaction risk and manage commercial exposure under our legitimate interests in Article 6(1)(f) GDPR. - Prevent, investigate, and detect fraud to meet legal obligations under Article 6(1)(c) GDPR and protect users, partners, and Be1B under Article 6(1)(f) GDPR. - Send service-related and, where permitted, marketing communications based on legitimate interest or consent under Articles 6(1)(f) and 6(1)(a) GDPR. - Manage commercial enquiries, support requests, and incidents under Article 6(1)(b) GDPR. - Run recruitment and candidate selection processes under Article 6(1)(f) GDPR. - Produce anonymous statistical reports to improve our products and services under Article 6(1)(f) GDPR. ## 5. What information we collect Depending on the service, we may process: - Identification data such as name, surname, official ID details, phone number, email address, postal address, personal image, and social media handle where relevant. - Security credentials such as your PIN or account access data. - Personal characteristics contained in identity documentation, including place and date of birth, residence, sex, nationality, and similar regulatory data. - Financial data including bank account details, IBAN, card details, expiry dates, and CVV where required to process a transaction. - Contact list data where you choose to share it for app functionality. - Location and device data derived from GPS or IP address where needed for security, fraud prevention, or location-based services. ## 6. How long we keep your data We keep personal data until you request deletion, withdraw consent where consent is the legal basis, or the retention period expires. In the absence of those events, we generally retain data for the duration of our relationship and for six years after the fiscal year in which that relationship ends to support legal, regulatory, and audit obligations. ## 7. Disclosure of your information We may disclose data to the following categories of recipient: - Public administrations, tax authorities, courts, regulators, and other institutions where disclosure is required by law. - Service providers and processors acting on our behalf to help us deliver Be1B services. Some providers may operate in areas such as payment processing, NFC services, legal advice, software development, physical security, communications, and cloud infrastructure. Where transfers occur outside the European Economic Area, we use appropriate safeguards required by applicable law. ## 8. Marketing communications and promotions We may use your data to send you information about promotions, events, offers, or other updates related to Be1B. You can opt out of commercial communications at any time by contacting dpo@be1b.com. ## 9. Your legal rights You may exercise the following rights free of charge, subject to applicable law: - Withdraw consent where processing is based on consent. - Obtain confirmation of whether we process your personal data. - Request access to your personal data. - Request rectification of inaccurate or incomplete personal data. - Request erasure where there is no valid reason for us to continue processing the data. - Object to processing or request restriction of processing. - Request portability of personal data where applicable. - File a complaint with a competent supervisory authority. To exercise these rights, contact the Data Protection Officer at dpo@be1b.com or write to Harju maakond, Tallinn, Kesklinna linnaosa, Pärnu mnt 31-54, 10119, Estonia, including sufficient identification information. ## 10. Websites and third-party services Our website or app may link to third-party websites, apps, or services. Those third parties process data under their own privacy policies, and we recommend reviewing those policies before using their services. ## 11. Security measures We process personal data confidentially and implement legal, technical, and organisational safeguards designed to prevent unauthorised access, alteration, loss, or disclosure. No security control is perfect, but we will take urgent measures to mitigate any incident that affects personal data. ## 12. Minors Be1B recommends that minors do not send personal data without parental or guardian consent. We are not responsible for personal data submitted by children under 14 without the necessary consent. ## 13. Changes to this privacy policy We may update this privacy policy to reflect legal, regulatory, operational, or technological changes. Where appropriate, we will publish the changes on the website, in the app, or notify users by email before the changes take effect. Continued use of Be1B services after an update means you accept the revised policy.