⬡ Bee-Ecosystem DAO

Effective: October 1, 2025

Valid Until Revoked or Updated

Privacy
Policy

Policy 101 — GDPR Compliant

◆bee-ecosystem.io

◆bee-cash.io

◆wanderhouse.net

◆Bee-Home Program Interfaces

Controller

Ready-made House Manager Ltd.

Jurisdiction

GDPR (EU) · Swiss Law

Contact

privacy@bee-ecosystem.io

Response Time

Within 1 month

§ 01

Purpose of This Policy

This Privacy Policy explains how Készház Menedzser Kft. ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our websites and digital services.

This Policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 (Infotv.), Act CVIII of 2001 (Eker. tv.), and Act XLVIII of 2008 (Grt.).

§ 03

Key Terms

Terms such as "personal data", "processing", "data processor", and "profiling" follow the definitions provided in the GDPR and applicable Swiss Law (Infotv.).

§ 04

Legal Grounds for Processing

We process your data based on the following legal grounds:

Contractual necessity
Legal obligations
Legitimate interests (balanced against your rights)
Your explicit consent (where required)

GDPR Principles: Lawfulness, fairness, transparency, data minimization, accuracy, security, and accountability.

§ 05

What Data We Collect & Why

Purpose	Data Collected	Legal Basis	Retention
Account Registration	Name, email, phone, password hash, role	Contract	Account existence + 2 years
Bee-Home Participation	Contact info, eligibility metadata, logs	Contract Interest	5 years after project ends
Billing & Accounting	Billing name, address, tax ID, transactions	Legal Obligation	8 years (accounting law)
Customer Support	Name, contact info, message content, logs	Interest Contract	2 years after case closure
Newsletters & Marketing	Name, email, preferences	Consent	Until withdrawn or 2 years idle
IT Security & Operations	IP, device info, error logs	Interest	6 – 24 months
Cookies & Analytics	Device and event data	Consent	Based on cookie lifespan

§ 06

Cookies

We use essential cookies for site functionality, and optional cookies for analytics and marketing (only with your consent).

You can manage your cookie preferences at any time. Full details are available in our Cookie Notice.

§ 07

Who We Share Data With

We may share data with trusted GDPR-compliant partners only:

Hosting and cloud providers
System developers
Newsletter and support platforms
Accounting and payment services

A full list of data processors is available upon request.

§ 08

International Transfers

If data is transferred outside the European Economic Area (EEA), we use legal safeguards such as EU-approved Standard Contractual Clauses or adequacy decisions. We assess and document all transfer risks.

§ 09

Automated Decisions & Profiling

We do not use automated decisions that produce legal or similarly significant effects on you. We may use profiling for marketing or product improvement based on consent or legitimate interest. You may opt out at any time.

§ 10

Your Rights

◎

Access your personal data

✎

Correct inaccuracies

Request deletion (with exceptions)

⏸

Restrict processing

⇄

Transfer your data

✋

Object to processing

↩

Withdraw consent anytime

✉

To exercise your rights, email privacy@bee-ecosystem.io. We will respond within 1 month (extendable by 2 months if needed).

§ 11

Complaints

You may file a complaint with Hungary's data protection authority (NAIH) or take legal action. Contact details are available on the NAIH website.

§ 12

Data Security

We protect your data with encryption, access controls, regular backups, vulnerability management, and continuous monitoring.

Breach Notification: In the event of a data breach, we notify the relevant supervisory authority and affected users within 72 hours, in accordance with GDPR requirements.

§ 13

Sensitive Data

We do not collect sensitive data (e.g., health, religion, ethnicity) unless required for a specific process. In such cases, we will request explicit consent and provide detailed information before collection.

§ 14

Voluntary Data Provision

Providing personal data is voluntary; however, certain services (e.g., registration, billing) require it to function. Required fields are clearly marked.

§ 15

System Logs

System activity — including IP addresses, timestamps, and actions — is logged to ensure security and assist with troubleshooting. Retention period: 6–24 months.

§ 16

Business Partners

We process partner contact details for the purposes of contracts and project qualifications. Retention follows applicable legal requirements and internal program rules.

§ 17

Children's Data

Our services are not intended for users under the age of 17. If data from a minor is collected, verified parental or guardian consent is required before processing.

§ 18

Changes & Notification

We may update this policy from time to time. Significant changes will be announced on our website. Where required by law, we will request renewed consent from affected users.

User-Friendly Summary

Plain Language

🛠

We collect your data to run our services, support you, and improve our systems.

⚖️

We only use your data when legally allowed — by contract, law, consent, or legitimate interest.

🎛

You can access, correct, delete your data, or opt out of marketing at any time.

🍪

We use cookies — you decide which optional ones are active.

🔒

We protect your data with strong technical and organizational security measures.

✉️