Last updated August 14, 2024

This privacy notice for BeeVital GmbH ('we', 'us', or 'our'), describes how and why we might
collect, store, use, and/or share ('process') your information when you use our services
('Services'), such as when you:
- Visit our website at beevital.com, or any website of ours that links to this privacy notice
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this privacy notice will help you understand your privacy rights
and choices. If you do not agree with our policies and practices, please do not use our Services.
If you still have any questions or concerns, please contact us at info@beevital.com

SUMMARY OF KEY POINTS
This summary provides key points from our privacy notice, but you can find out more details
about any of these topics by using our table of contents below to find the section you are looking
for.

- What personal information do we process? When you visit, use, or navigate our Services, we
may process personal information depending on how you interact with us and the Services, the
choices you make, and the products and features you use. Learn more about personal
information you disclose to us.
- Do we process any sensitive personal information? We do not process sensitive personal
information.
- Do we collect any information from third parties? We do not collect any information from third
parties.
- How do we process your information? We process your information to provide, improve, and
administer our Services, communicate with you, for security and fraud prevention, and to comply
with law. We may also process your information for other purposes with your consent. We
process your information only when we have a valid legal reason to do so. Learn more about
how we process your information.
- In what situations and with which types of parties do we share personal information? We may
share information in specific situations and with specific categories of third parties. Learn more
about when and with whom we share your personal information.
- How do we keep your information safe? We have organizational and technical processes and
procedures in place to protect your personal information. However, no electronic transmission
over the internet or information storage technology can be guaranteed to be 100% secure, so
we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third
parties will not be able to defeat our security and improperly collect, access, steal, or modify
your information. Learn more about how we keep your information safe.

- What are your rights? Depending on where you are located geographically, the applicable
privacy law may mean you have certain rights regarding your personal information. Learn more
about your privacy rights.
- How do you exercise your rights? The easiest way to exercise your rights is by submitting a
data subject access request, or by contacting us. We will consider and act upon any request in
accordance with applicable data protection laws.
- Want to learn more about what we do with any information we collect? Review the privacy
notice in full.

TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL
INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO-NOT-TRACK FEATURES
11. COOKIES POLICY
12. DO WE MAKE UPDATES TO THIS NOTICE?
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the
Services, express an interest in obtaining information about us or our products and Services,
when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the
context of your interactions with us and the Services, the choices you make, and the products
and features you use. The personal information we collect may include the following:
- Names
- Phone numbers
- Email addresses
- Usernames

- Billing addresses
- Debit/credit card numbers
- Contact or authentication data
Sensitive Information. We do not process sensitive information.
Payment Data. We may collect data necessary to process your payment if you choose to make
purchases, such as your payment instrument number, and the security code associated with
your payment instrument. All payment data is handled and stored by Stripe and PayPal. You
may find their privacy notice link(s) here: https://stripe.com/en-at/privacy and
https://www.paypal.com/us/legalhub/privacy-full.
All personal information that you provide to us must be true, complete, and accurate, and you
must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and
device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This
information does not reveal your specific identity (like your name or contact information) but may
include device and usage information, such as your IP address, browser and device
characteristics, operating system, language preferences, referring URLs, device name, country,
location, information about how and when you use our Services, and other technical
information. This information is primarily needed to maintain the security and operation of our
Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and
performance information our servers automatically collect when you access or use our Services
and which we record in log files. Depending on how you interact with us, this log data may
include your IP address, device information, browser type, and settings and information about
your activity in the Services (such as the date/time stamps associated with your usage, pages
and files viewed, searches, and other actions you take such as which features you use), device
event information (such as system activity, error reports (sometimes called 'crash dumps'), and
hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet,
or other device you use to access the Services. Depending on the device used, this device data
may include information such as your IP address (or proxy server), device and application
identification numbers, location, browser type, hardware model, Internet service provider and/or
mobile carrier, operating system, and system configuration information.

- Location Data. We collect location data such as information about your device's location, which
can be either precise or imprecise. How much information we collect depends on the type and
settings of the device you use to access the Services. For example, we may use GPS and other
technologies to collect geolocation data that tells us your current location (based on your IP
address). You can opt out of allowing us to collect this information either by refusing access to
the information or by disabling your Location setting on your device. However, if you choose to
opt out, you may not be able to use certain aspects of the Services.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data
Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services,
communicate with you, for security and fraud prevention, and to comply with law. We may also
process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact
with our Services, including:
- To facilitate account creation and authentication and otherwise manage user accounts. We
may process your information so you can create and log in to your account, as well as keep
your account in working order.
- To deliver and facilitate delivery of services to the user. We may process your information to
provide you with the requested service.
- To send administrative information to you. We may process your information to send you
details about our products and services, changes to our terms and policies, and other similar
information.
- To fulfill and manage your orders. We may process your information to fulfill and manage your
orders, payments, returns, and exchanges made through the Services.
- To save or protect an individual's vital interest. We may process your information when
necessary to save or protect an individual’s vital interest, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we
have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent,
to comply with laws, to provide you with services to enter into or fulfill our contractual
obligations, to protect your rights, or to fulfill our legitimate business interests.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid
legal bases we rely on in order to process your personal information. As such, we may rely on
the following legal bases to process your personal information:

- Consent. We may process your information if you have given us permission (i.e., consent)
to use your personal information for a specific purpose.
- Contractual Necessity. We may process your information when we believe it is necessary to
fulfill our contract with you or to take steps at your request before entering into such a contract.
- Legal Obligations. We may process your information where we are legally required to do so in
order to comply with applicable law, such as to respond to a subpoena or other legal process.
- Legitimate Interests. We may process your information when we believe it is reasonably
necessary to achieve our legitimate business interests and those interests are not overridden by
your data protection interests or fundamental rights and freedoms.
- Vital Interests. We may process your information to protect your vital interests or the vital
interests of others.
If you are located in the European Economic Area (EEA) or the United Kingdom (UK) and you
are unsure of the legal basis we are relying on to process your personal information, please
contact us to learn more.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share information in specific situations and with specific categories of third
parties.
We may need to share your personal information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during
negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion
of our business to another company.
- Affiliates. We may share your information with our affiliates, in which case we will require those
affiliates to honor this privacy notice. Affiliates include our parent company and any other
subsidiaries, joint venture partners, or other companies that we control or that are under
common control with us.
- Business Partners. We may share your information with our business partners to offer you
certain products, services, or promotions.
- With Your Consent. We may disclose your personal information for any other purpose with
your consent.
We may also need to share your personal information in order to comply with legal obligations
or respond to legal requests and legal processes.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your
information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access
or store information. Cookies are small data files placed on your device. Cookies help us
remember information about you and your preferences. Web beacons are electronic images
used to count visitors who access a website or to deliver cookies.
For more detailed information about how we use cookies, please see our Cookies Policy.

6. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in
this privacy notice unless a longer retention period is required or permitted by law.
We will only keep your personal information for as long as necessary to fulfill the purposes
outlined in this privacy notice unless a longer retention period is required or permitted by law
(such as tax, accounting, or other legal requirements).

7. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and
technical security measures.
We have implemented appropriate organizational and technical security measures designed to
protect the security of any personal information we process. However, please also remember
that we cannot guarantee that the internet itself is 100% secure.

8. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly solicit data from or market to children under 13 years of age.
We do not knowingly solicit data from or market to children under 13 years of age. If we learn
that we have collected personal information from a child under age 13 without verification of
parental consent, we will delete that information as quickly as possible.

9. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You may review, change, or terminate your account at any time. You may also exercise
certain rights regarding your personal information under applicable data protection laws.
Depending on your location, you may have the following rights:
- Access. You may have the right to request copies of your personal information.
- Rectification. You may have the right to request that we correct any inaccurate or incomplete
information we hold about you.

- Erasure. You may have the right to request that we erase your personal information, under
certain conditions.
- Restriction. You may have the right to request that we restrict the processing of your personal
information, under certain conditions.
- Objection.You may have the right to object to our processing of your personal information,
under certain conditions.
- Portability. You may have the right to request that we transfer your information to another
organization, or directly to you, under certain conditions.
If you have any questions or want to exercise your rights, please contact us at
info@beevital.com.

10. CONTROLS FOR DO-NOT-TRACK FEATURES
In Short: Most web browsers and some mobile operating systems include a Do-Not-Track
(‘DNT’) feature that you can activate to signal that you do not want to be tracked online.
No uniform technology standard for recognizing and implementing DNT signals has been
finalized. As such, we do not currently respond to DNT browser signals or any other mechanism
that automatically communicates your choice not to be tracked online. If a standard for online
tracking is adopted that we must follow in the future, we will update this privacy notice to reflect
that practice.

11. COOKIES POLICY
In Short: We use cookies to enhance your experience, analyze site traffic, and for advertising
purposes.
Our Cookies Policy provides more detailed information on the cookies we use, why we use
them, and how you can manage them. You can view our Cookies Policy
here:(https://beevital.com/cookies-policy).

12. DO WE MAKE UPDATES TO THIS NOTICE?
In Short:We may update this privacy notice from time to time.
We may update this privacy notice from time to time to stay compliant with relevant laws and to
reflect changes to our practices. We will notify you of any significant changes by posting the new
privacy notice on our website.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at info@beevital.com or
by post to:

BeeVital GmbH
Kirchengasse 13/27
1070 Vienna AUSTRIA

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In Short: You may review, update, or delete your personal information by contacting us directly.
Upon request, we will provide you with access to your personal information so you may review,
correct, or delete it. If you wish to do this, please contact us at info@beevital.com.
Thank you for taking the time to review our privacy notice. We are committed to protecting your
privacy and ensuring a safe experience when using our Services.