At BeMee, operated by Iteca Solutions, we are committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and protect your personal data in compliance with Slovenian law, including the Personal Data Protection Act (ZVOP-2), and the European Union’s General Data Protection Regulation (GDPR) (EU 2016/679). By using BeMee, you acknowledge and agree to the practices described in this Policy.

Privacy Policy

This policy is available in multiple languages to ensure every member of our global community understands their rights.

Scope of This Policy

This Privacy Policy applies to:

Users of the BeMee website (bemee.si) and mobile applications.
Recipients of our promotional content, including newsletters and advertisements.
Individuals who contact us via phone, email, web forms, or other channels regarding our services.
Participants in our direct marketing activities.

This Policy does not govern contractual relationships with our data processors.

Definitions

Personal Data: Any information relating to an identified or identifiable individual, such as name, email, or characteristics like physical or cultural identity.
Processing: Any operation performed on personal data, including collection, storage, use, or deletion.
Controller: Iteca Solutions, which determines the purposes and means of processing personal data.
Processor: A third party that processes personal data on behalf of the Controller.
EEA: European Economic Area, comprising EU member states, Iceland, Norway, and Liechtenstein.

Collection and Processing of Personal Data

We process personal data based on lawful, specific, and transparent purposes, adhering to the principle of data minimization. We collect only the data necessary to achieve the purposes outlined in this Policy and inform you of processing activities via this Policy or separate notices when required.

Types of Personal Data Collected

We may collect the following categories of personal data:

Basic Personal Information: Username, password, date of birth, gender, IP address, photos*, eye color*, hair color*, height*, body type*.
Contact Information: Email address, phone number*, address*, city of residence*, Facebook ID*, Google ID*.
Professional Information: Education level*.
Service-Related Information: Gender of sought partner*, purpose of using the Platform, age range of sought partner*, interests*, relationship status*, information about children*, religion*, clothing style*, dietary preferences*, smoking habits*, drinking habits*, vaccination*, pets*, financial status*, favorite activities*, personal description*, desired partner characteristics*, shared interests with a partner*, personal goals*, Video profiles, voice snippets, and video stories.

Data marked with an asterisk (*) is optional. We do not verify the accuracy of provided data. Non-optional data is required to use our services.

You can update your profile data at any time via your account settings on BeMee.

Profile Visibility

To facilitate matching, certain profile data (e.g., username, photos, interests) may be visible to other BeMee users based on your privacy settings. You can adjust these settings in your account at any time.

Match Suggestions and Profiling

We use algorithms to suggest potential matches based on your profile data, such as interests and preferences. This may involve automated profiling. You can object to automated decisions by contacting us, and we will review your request manually.

Our algorithms are designed to prioritize human connection over addictive engagement patterns, helping you avoid dating burnout.

Legal Bases for Processing

We process personal data based on the following legal grounds:

Contractual Necessity: To fulfill our obligations under the agreement with you (e.g., providing dating services).
Consent: Where you explicitly consent to processing, which you may withdraw at any time.
Legitimate Interests: For purposes such as improving app functionality (e.g., analyzing user behavior) or sending service-related updates, provided your rights and freedoms are not overridden.
Legal Obligation: To comply with applicable laws (e.g., tax or regulatory requirements).

Providing data required by law or contract is mandatory. Optional data is voluntary, but failure to provide required data may prevent us from delivering certain services. Consent-based services (e.g., newsletters) cannot be provided without consent or after its withdrawal.

Purposes of Processing

We process personal data for the following purposes:

Service Delivery: To provide and manage dating services, including partner searches, match suggestions, communication tools, and filtering options.
Match Suggestions and Profiling: We use algorithms to suggest potential matches based on your profile data, such as interests and preferences. This may involve automated profiling. You can object to automated decisions by contacting us, and we will review your request manually.
Marketing and Newsletters: To send promotional materials, newsletters, or personalized offers (via email, SMS, or mail) based on your consent or our legitimate interest in effective business operations.
Customer Support: To respond to inquiries submitted via web forms, phone, or email, based on our legitimate interest in efficient communication.
Advertising: To display targeted ads on the Platform, based on basic user characteristics, to enhance user experience and business efficiency.
Service Improvement: To analyze user data to personalize services, such as event invitations or tailored recommendations.
Legal Compliance: To meet regulatory requirements or respond to legal requests.
Dispute Resolution: To protect our business, enforce rights, or resolve disputes, as permitted by law.
Statistical Analysis: To improve Platform functionality and user experience.

We will not process your data for purposes incompatible with those listed above without prior notification and, if necessary, your consent. You may withdraw consent at any time by contacting us.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law:

Contractual Data: Retained for the duration of the contract, plus statutory limitation periods (e.g., 5 years after contract fulfillment).
Consent-Based Data: Retained until you withdraw consent or the purpose is fulfilled (e.g., discontinuation of newsletters).
Legally Required Data: Retained for periods mandated by law.

Once the retention period expires or the purpose is fulfilled, we will delete, destroy, or anonymize your data to prevent reconstruction.

Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or damage, including:

Regular updates and testing of software and IT systems.
Restricted access to personal data on a need-to-know basis.
Secure backup systems protected against unauthorized access.
Employee training on data protection practices.
Audits of employees and processors handling personal data.
Incident response protocols for security breaches.

In the event of a data breach, we will notify the Slovenian Information Commissioner (the competent supervisory authority) without undue delay. If a breach poses a high risk to your rights and freedoms, we will inform you promptly. Suspected criminal breaches will be reported to the police or relevant authorities. If such actions are detected, a minimum penalty fee of 500,000 € will be imposed. The final amount of the fee will be determined based on a comprehensive assessment of the damage caused.

Any unauthorized extraction of user data (scraping) for the purpose of training AI models or creating competing databases will be prosecuted to the fullest extent of the law.

Sharing Personal Data

We may share your personal data with third parties only when necessary to achieve the purposes outlined in this Policy. Recipients are bound by applicable data protection laws and this Policy. We may share data with:

Affiliated Companies: For operational purposes, subject to strict data protection agreements.
Contractual Processors: Such as website editors, IT administrators, accountants, or legal advisors, who process data on our behalf.
Legal Authorities: When required by law (e.g., tax authorities, courts).

We may transfer personal data outside the EEA, ensuring appropriate safeguards, such as binding corporate rules, contractual agreements, or verification of third-party certifications, to maintain data security.

Your Rights

Under GDPR and applicable Slovenian law, you have the following rights regarding your personal data:

Right to Access: Request confirmation of whether we process your data and access details about the data and its processing.
Right to Rectification: Request correction or completion of inaccurate or incomplete data.
Right to Restriction: Request restriction of processing in specific cases (e.g., while verifying data accuracy), though this right is limited.
Right to Erasure: Request deletion of your data, except where retention is required by law or contract.
Right to Data Portability: Receive your provided data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Withdraw Consent: Withdraw consent at any time without negative consequences, though this may prevent us from providing certain services. Contact us as outlined above to withdraw consent.
Right to Object: Object to processing for direct marketing or profiling, or when based on legitimate interests. Submit objections via contacts in Section above.

To exercise these rights, contact us using the details in Section above. We may request identifying information (e.g., name, email) to verify your identity.

If you believe we have violated your data protection rights, you may file a complaint with the Slovenian Information Commissioner:

Information Commissioner
Address: Dunajska cesta 160, 1000 Ljubljana, Slovenia
Email: gp.ip@ip-rs.si
Phone: +386 1 230 97 30

EU residents may also use the European Online Dispute Resolution platform at ec.europa.eu/odr.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyze Platform usage, and deliver targeted advertising. You can manage cookie preferences through your browser settings. For details, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via the Platform or email. Continued use of BeMee after changes take effect constitutes acceptance of the updated Policy.