Privacy Policy

Effective Date: June 1, 2025
Last Updated: June 1, 2025

1. Introduction

Welcome to Bee4Impact. We are committed to protecting the privacy and personal data of all users of our platform, including companies, beekeepers, partners, and visitors. This Privacy Policy explains how we collect, use, process, store, and protect your personal information in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable laws.

By using our website, platform, or mobile application, you agree to the terms outlined in this Privacy Policy.

2. Who We Are

Data Controller:
IT GO D.O.O. Šabac-Varna
Miloša Obilića 39, 15232 Varna, Serbia
Email: office@itgotechinnovators.com

For GDPR purposes, we are the data controller of the information we collect from you.

3. What Data We Collect

We collect the following categories of data:

a) Personal Identification Data

  • Full name

  • Email address

  • Phone number

  • Company or apiary name

  • Country and city

  • IP address

b) Business-Related Information

  • ESG goals (companies)

  • Number and location of hives (beekeepers)

  • Website, social profiles

  • Agricultural registration status

c) Device & Usage Data

  • Browser type

  • Operating system

  • Pages visited

  • Time of visit

  • Device identifiers

d) Media and Reports (from platform users)

  • Uploaded photos of hives, fields, and field reports

  • GPS location metadata (if shared)

  • Time-stamped activity logs

4. Legal Basis for Processing

We process your data based on the following legal grounds under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)) — when you voluntarily submit data via forms.

  • Contractual necessity (Art. 6(1)(b)) — to fulfill our obligations as a platform.

  • Legal obligation (Art. 6(1)(c)) — to comply with regulatory requirements.

  • Legitimate interest (Art. 6(1)(f)) — to protect platform integrity and prevent abuse.

5. How We Use Your Data

We use your data to:

  • Verify identities and eligibility for the Bee4Impact program

  • Match companies and beekeepers

  • Communicate platform updates, changes, and opportunities

  • Generate non-certified ESG summaries and visualizations

  • Monitor and improve platform functionality and security

We do not use your data for automated decision-making or profiling that produces legal or significant effects.

6. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties.

Data may be shared only with:

  • Hosting providers (e.g. Firebase, Vercel)

  • Internal contractors and consultants (bound by NDA)

  • Regulatory authorities, only if legally required

All third parties must demonstrate compliance with GDPR and sign data processing agreements (DPAs).

7. International Data Transfers

If your data is transferred outside the EU/EEA (e.g. to Firebase servers), we ensure:

  • Transfers are made under standard contractual clauses (SCCs) approved by the European Commission

  • Data is encrypted at rest and in transit

  • We only partner with processors who are GDPR-compliant

8. Data Retention

We retain your data:

  • As long as you maintain an active account

  • Or as necessary to comply with legal, contractual, or tax obligations

After that, your data will be anonymized or securely deleted.

9. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access your personal data (Art. 15)

  • Rectify inaccurate data (Art. 16)

  • Erase data (“right to be forgotten”, Art. 17)

  • Restrict processing (Art. 18)

  • Object to processing (Art. 21)

  • Data portability (Art. 20)

  • Withdraw consent at any time

To exercise these rights, contact us at office@itgotechinnovators.com.

10. Data Security

We implement industry-standard security measures:

  • HTTPS encrypted communication

  • Encrypted storage (AES-256)

  • Role-based access control

  • Regular penetration testing

  • GDPR-aligned breach protocols

In case of a data breach, we will notify affected users and supervisory authorities within 72 hours, as per GDPR Article 33.

11. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from minors. If we discover such data, we will delete it promptly.

12. Updates to This Policy

We reserve the right to update this Privacy Policy at any time.
If material changes occur, we will notify users via email or platform notification.

13. Complaints

If you believe your data rights have been violated, you may file a complaint with your local data protection authority (DPA) or contact us directly.

14. Contact

Data Protection Contact:
Email: office@itgotechinnovators.com
Postal: Miloša Obilića 39, Varna 15232, Serbia