Политика конфиденциальности

Version: 28 October 2026

This Privacy Policy explains how personal data is processed when you use the website https://ib-beurs.com and the IB · BEURS service ("Service").

Personal data is processed in line with the following laws:

• the Law of Georgia on Personal Data Protection;
• where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

Individual Entrepreneur Sergey Bukreev
Identification code: 305894618
Legal address: Bakhtrioni St., Saburtalo District, Tbilisi, Georgia
Email for privacy requests: ibb@ib-beurs.com

In this Policy, the controller is referred to as "we" or "us".

2. What data we process, why, and on what basis

Email address, password (stored hashed), name if provided, account settings

• Purpose: Creating and running your Account; giving access to the Service
• Legal basis: Performance of the contract
• Retention: While the Account exists, plus up to 30 days after deletion

Plan, subscription status, order ID, amount, currency, payment date, payment method type

• Purpose: Providing the Subscription, invoicing, refunds, accounting and tax
• Legal basis: Performance of the contract; legal obligation
• Retention: As long as tax and accounting law requires

Support messages and complaints

• Purpose: Answering requests and handling complaints
• Legal basis: Performance of the contract; legitimate interest
• Retention: Up to 3 years after the request is closed

Technical and log data: IP address, device and browser data, login times, actions in the Service, error logs

• Purpose: Security, fraud and abuse prevention, preventing account sharing, keeping the Service running
• Legal basis: Legitimate interest
• Retention: Up to 12 months

Telegram user ID and username, if you connect Telegram for alerts

• Purpose: Delivering alerts to Telegram
• Legal basis: Performance of the contract
• Retention: Until you disconnect Telegram or delete the Account

Email address, for newsletters and product news

• Purpose: Marketing communications
• Legal basis: Your consent (separate checkbox)
• Retention: Until you withdraw consent

We do not receive or store full payment card details. The Payment Provider processes them.

You must provide the data marked as needed for the contract, such as your email address. Without it we cannot provide the Service. Giving data for marketing is optional.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

3. Recipients

We share personal data only as far as needed with the following categories of recipients:

• Hosting providers. Servers and the database are located in Frankfurt, Germany (EU).
• Email delivery providers: GoDaddy (Professional Email).
• Payment Providers. They process payment data under their own privacy policies.
• Telegram: only if you connect alerts.
• Public authorities: where the law requires it.

We do not sell personal data.

4. International transfers

Some recipients are located outside Georgia, for example in the EU, the United States or other countries.

Where data is transferred to a country that does not ensure an adequate level of protection, we use one of the following:

• appropriate safeguards, such as standard contractual clauses;
• your informed consent, which you give at checkout or registration after being informed of the possible risks.

You can request information about the safeguards used by contacting us.

5. Your rights

Subject to the applicable law, you have the right to:

• get information about whether and how we process your data, and receive a copy of it;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict processing;
• object to processing based on legitimate interest, and to direct marketing at any time;
• receive your data in a portable format;
• withdraw consent at any time. Withdrawal does not affect processing that took place before it.

Making a request. Email us at the address in Section 1. We normally reply within 10 working days.

Marketing. Every marketing message contains an unsubscribe link. We stop sending marketing messages within 7 working days of your request.

Complaints. You may lodge a complaint with:

• the State Audit Office of Georgia, the authority responsible for personal data protection supervision; or
• if the GDPR applies to you, the data protection supervisory authority in your EU/EEA country of residence.

6. Cookies

Strictly necessary cookies keep you logged in and secure the Service. They do not require consent.

We do not use analytics or marketing cookies.

7. Security

We use technical and organisational measures to protect personal data. These include:

• encrypted connections (HTTPS);
• password hashing;
• access controls;
• logging of access to personal data.

If a personal data breach occurs, we notify the competent authority and, where required, the affected users within the timeframes set by law.

8. Children

The Service is not intended for persons under 18. We do not knowingly collect data from them.

9. Changes to this Policy

We may update this Policy. The current version is published on the Website with its version date. We notify registered users of material changes by email.