Privacy Policy

1. Data Controller

The data controller for this website is:
Bee360 GmbH
Victor-Gollancz-Straße 3
76137 Karlsruhe
Germany
Phone: +49 721 989639 0
Email: info@bee360.com

2. Data Protection Officer

If you have questions about data protection, please contact our Data Protection Officer:
Email: info@bee360.com

3. Data Collection and Processing

3.1 Server Logs and Hosting

Service Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Purpose: Website hosting and content delivery
Data Collected: IP address, browser type, operating system, referrer URL, date and time of access
Legal Basis: Legitimate interest (GDPR Art. 6(1)(f)) for website operation and security
Retention Period: 30 days
Third-Country Transfer: Data processing occurs in the USA. Vercel Inc. complies with Standard Contractual Clauses (Art. 46(2)(c) GDPR) for data protection.
Privacy Policy: Vercel Privacy Policy
DPA: Vercel Data Processing Agreement

3.2 Contact Forms

Note: This section will be updated when contact form integration (Pipedrive or other) is implemented.

When you submit a contact form or meeting request on this website:

• Data Collected: Name, email address, company name, role, message content
• Purpose: Processing your inquiry, scheduling meetings, providing requested information
• Legal Basis: Consent (GDPR Art. 6(1)(a)) and contract performance (GDPR Art. 6(1)(b))
• Retention Period: As long as necessary to process your request, then deleted unless we have a legitimate interest or legal obligation to retain
• Third-Party Service: [To be specified when Pipedrive or other service is integrated]

3.3 Analytics and Tracking

Note: This section will be updated when analytics tools are implemented.

Currently, no analytics or tracking tools are active on this website. If we implement analytics in the future, we will:

• Update this privacy policy with full details
• Implement a cookie consent mechanism
• Provide opt-out options
• Ensure GDPR compliance

3.4 Cookies

This website currently does not use cookies. If cookies are implemented in the future, we will update this policy and provide a cookie consent mechanism in accordance with ePrivacy Directive and GDPR requirements.

4. Data Sharing and Third-Party Processors

We only share your personal data with third parties when:

• You have given explicit consent
• It is necessary to fulfill our contractual obligations to you
• We are legally required to do so
• It is necessary to protect our legitimate interests (and your rights do not override those interests)

Current Third-Party Processors:

• Vercel Inc. (USA) - Web hosting (see section 3.1 above)

All third-party processors are bound by Data Processing Agreements (DPAs) and comply with GDPR requirements.

5. International Data Transfers

Transfers to USA: Our website is hosted by Vercel Inc. in the United States. Data processing occurs outside the EU/EEA. We ensure adequate protection through Standard Contractual Clauses (Art. 46(2)(c) GDPR) as approved by the European Commission.

6. Data Retention

• Server logs: 30 days
• Contact form submissions: As long as necessary to process your request, then deleted unless legal obligations require retention
• Marketing communications: Until you withdraw consent or request deletion

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

7.1 Right to Access (Art. 15 GDPR)

You have the right to request confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about the processing.

7.2 Right to Rectification (Art. 16 GDPR)

You have the right to request that we correct inaccurate or incomplete personal data.

7.3 Right to Erasure (Art. 17 GDPR)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed
• Legal obligations require deletion

7.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing in certain circumstances.

7.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

7.6 Right to Object (Art. 21 GDPR)

You have the right to object to processing based on legitimate interests (Art. 6(1)(f) GDPR) or for direct marketing purposes.

7.7 Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:
Email: info@bee360.com
Phone: +49 721 989639 0

We will respond to your request within one month. If your request is complex or we receive many requests, we may extend this period by two months and will inform you.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Competent Supervisory Authority for Bee360 GmbH:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmission (HTTPS)
• Secure hosting infrastructure with regular security updates
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Data Processing Agreements with all processors

10. Children's Privacy

This website is not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are under 16, please do not submit any personal data through this website.

11. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling as defined in Art. 22 GDPR.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our data processing practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date.

We encourage you to review this privacy policy periodically.

13. Contact Us

If you have questions about this privacy policy or our data processing practices, please contact us:

Bee360 GmbH
Victor-Gollancz-Straße 3
76137 Karlsruhe
Germany
Phone: +49 721 989639 0
Email: info@bee360.com

---

Important Notes for Future Implementation

Note: This privacy policy is complete for the current website configuration (hosting only). When adding third-party integrations (Pipedrive forms, analytics, social media, etc.), this policy MUST be updated to include:

• Full company name and address of each service provider
• Purpose of data processing
• Types of data collected
• Legal basis for processing
• Retention periods
• Third-country transfer details (if applicable)
• Links to service provider's privacy policy and DPA
• Consent mechanisms (where required)

Use the legal-compliance-expert agent before adding any third-party services to ensure compliance.