Key Points (at‑a‑glance) Who? B EYE LTD (UIC 202206264), 1 Krum Popov St., 1421 Sofia, Bulgaria – “we” or “B EYE”. What data? Only what you choose to give us (e.g. demo form, CV) plus optional analytics cookies. Why? To answer your enquiries, deliver our services, recruit talent and improve this site. Legal grounds: Contract, legitimate interests, or your consent (cookies/marketing). We never sell data. Your rights: Access ∙ Rectify ∙ Erase ∙ Restrict ∙ Portability ∙ Object ∙ Withdraw consent ∙ Complain. Security: TLS 1.3 encryption, role‑based access, regular penetration testing. Contact: privacy@b‑eye.com | +359 2 4930393 | Data Protection Officer (see §13). Scroll down for the full, legally‑binding text. 1 Who We Are Data Controller B EYE LTD, UIC 202206264, 1 Krum Popov St., Sofia 1421, Bulgaria.Data Protection Officer (DPO) <Insert name / “DPO Team”>, dpo@b‑eye.com.Supervisory Authority Bulgarian Commission for Personal Data Protection (https://www.cpdp.bg). If you are in the UK you may also contact the Information Commissioner’s Office (https://ico.org.uk). We do not require an EU Representative because the company is established in the EU. 2 Scope of this Policy This notice covers personal data processed when you: browse https://b‑eye.com (the “Site”); request information, a product demo or other pre‑contractual services; apply for a job or internship with B EYE; or represent a customer, supplier or business partner of B EYE. 3 What Data We Collect, Why, and For How Long # Purpose Personal data Lawful basis (GDPR Art 6) Retention 1 Website analytics (Google Analytics 4, Consent Mode v2) GA Client‑ID, truncated IP, device & browser data Consent (Art 6 1 a) 14 months 2 Demo / contact request Name, business e‑mail, company, message Pre‑contract steps (Art 6 1 b) Duration of enquiry + 3 years 3 Marketing updates Name, e‑mail, preferences Consent (Art 6 1 a) Until you unsubscribe 4 Recruitment CV, cover letter, interview notes, assessments Legitimate interests (hiring) (Art 6 1 f) Up to 3 years or until you withdraw 5 Customer / supplier management Business contact details, contractual docs Contract (Art 6 1 b) Contract term + 7 years Legitimate‑interest balancing test: For recruitment we process only data provided by you for the sole purpose of filling a position; the impact on your privacy is minimal and you may object at any time (see §10). 4 Cookies & Similar Technologies We set necessary cookies to run the Site and optional analytics cookies only after you click “Accept” on our consent banner. You can choose “Reject” or “Customise” with equal ease, and revisit your choice via the “Cookie settings” link in the footer. Full details are in our Cookie Policy. 5 Sources of Data We collect data directly from you or automatically through your browser. We do not purchase personal data from third‑party data brokers. 6 Sharing Your Data We share data only when necessary with: Service providers under strict contracts (e.g. Google Cloud, Microsoft 365, Web‑hosting, CRM, recruitment platform); Authorities where required by law or to protect legal rights; Professional advisers (lawyers, auditors) bound by confidentiality. We never sell or rent your personal data. 7 International Transfers Some providers (e.g. Google LLC, Microsoft Corp.) are outside the EEA. Transfers are safeguarded by: the EU–US Data Privacy Framework (for certified US entities), or Standard Contractual Clauses (SCCs) approved by the European Commission. Copies of relevant clauses are available on request. 8 Security Measures We apply appropriate technical and organisational measures including: TLS 1.3 encryption in transit and AES‑256 at rest; Role‑based access controls and multi‑factor authentication; Regular penetration testing and vulnerability scans; 24/7 infrastructure monitoring and incident‑response procedures. 9 Automated Decision‑Making / Profiling B EYE does not use your data for automated decisions that produce legal or similarly significant effects (Art 22 GDPR). No AI profiling is applied. 10 Your Rights You can exercise the following rights free of charge by e‑mailing privacy@b‑eye.com: Access – obtain a copy of your data; Rectification – correct inaccurate data; Erasure – “right to be forgotten”; Restriction – pause processing; Portability – receive data in machine‑readable format; Objection – object to processing based on legitimate interests; Withdraw consent – at any time, with future effect. We will respond within one month (Art 12 3). You also have the right to lodge a complaint with the Bulgarian CPDP or another competent authority. 11 Additional Information for California Residents (CPRA) If you are a resident of California, USA, you have additional rights to know, delete, correct, opt‑out of “selling or sharing”, limit sensitive data use, and not be discriminated against. You may exercise these rights via the methods in §10. 12 Children Our Site and services are not directed to children under 16 and we do not knowingly collect their data. If you believe we have done so, please contact us. 13 Contact Us Postal address: B EYE LTD, 1 Krum Popov St., 1421 Sofia, Bulgaria.E‑mail: privacy@b‑eye.comTelephone: +359 2 4930393Data Protection Officer: 14 Changes to This Policy We may update this notice from time to time. Significant changes will be highlighted on this page and, where appropriate, notified to you by e‑mail. The version date at the top indicates when it was last revised. © 2025 B EYE LTD. All rights reserved.