Skip to content

Privacy Policy

Last updated: 8 October 2026

B3YOND Ltd respects the privacy of its website visitors, customers, business partners and applicants. This Privacy Policy explains how we process personal data in accordance with the General Data Protection Regulation (“GDPR”).

1. Data Controller

The controller responsible for the processing of personal data is:

B3YOND Ltd
6 Emmanouil Raidi
1095 Nicosia
Cyprus
Email: info@b3yond-it.com

Where B3YOND processes personal data solely on behalf of a customer as part of an AI, automation, software or consulting project, B3YOND generally acts as a data processor and the customer remains the data controller.

Such processing is governed by the applicable customer agreement and, where required, a data processing agreement pursuant to Art. 28 GDPR.

2. Website Use

When you access our website, technical data necessary to deliver and secure the website may be processed automatically.

This may include:

  • IP address
  • date and time of access
  • browser and device information
  • requested pages or resources
  • technical and security information

We process this data solely to operate, deliver and secure our website.

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in providing a secure and reliable website.

Our website is hosted using Firebase Hosting, a Google service.

We use Cloudflare for DNS and domain infrastructure.

These providers may process technical data necessary to provide their respective services.

3. No Tracking or Analytics

At present, we do not use website analytics, advertising tracking, marketing pixels or similar tracking technologies.

We do not use non-essential cookies for analytics or advertising purposes.

If this changes in the future, we will update this Privacy Policy and obtain consent where required by law.

4. Contact and Business Enquiries

If you contact us by email, telephone, contact form or another communication channel, we may process information including:

  • your name
  • email address and telephone number
  • company and position
  • information contained in your enquiry
  • information concerning your project or requested services
  • subsequent business correspondence

We use this information to respond to your enquiry, evaluate potential projects, prepare proposals and establish or maintain a business relationship.

Legal basis: Art. 6(1)(b) GDPR where processing is necessary for entering into or performing a contract and Art. 6(1)(f) GDPR for the management of our business relationships.

When you use the contact form on our website, the information you enter is processed by a Google Cloud function in the EU (Belgium) and delivered to our mailbox by email via Resend (Resend, Inc.). Your IP address is used briefly in memory to limit repeated submissions and protect the form against abuse; it is not stored.

5. Customer Projects

B3YOND provides services in areas including artificial intelligence, automation, software development, IT consulting and process optimization.

B3YOND as Controller

For information relating to our own customer relationship, such as contact persons, contracts, invoices and project communication, B3YOND generally acts as the data controller.

We process this information for:

  • providing our services
  • project management
  • customer communication
  • contract administration
  • invoicing and accounting
  • compliance with legal obligations

Legal basis: Art. 6(1)(b), Art. 6(1)(c) and, where applicable, Art. 6(1)(f) GDPR.

B3YOND as Processor

During customer projects, we may process personal data provided by our customers, for example as part of an AI, automation or software solution.

In such cases, B3YOND generally acts as a data processor and processes personal data only on documented instructions from the respective customer.

Where required, such processing is governed by a data processing agreement pursuant to Art. 28 GDPR.

The specific data processed, purpose of processing, systems used, retention periods and subprocessors depend on the respective customer project.

6. AI, Cloud and Technology Providers

Depending on the requirements of a customer project, we may use third-party technology providers, including providers of:

  • artificial intelligence models
  • cloud infrastructure
  • databases and storage
  • automation platforms
  • development and communication tools

The providers used may differ from project to project.

Where B3YOND acts as a processor, relevant subprocessors are handled in accordance with the agreement with the respective customer.

B3YOND does not use customer data for unrelated purposes or for the independent training of B3YOND AI models unless expressly agreed with the customer.

7. Applicants

If you apply for a job, freelance engagement or other professional collaboration with B3YOND, we may process information you provide to us, including:

  • contact information
  • CV
  • professional experience and qualifications
  • application documents
  • information provided during the application process

We use this information to assess your application and communicate with you regarding potential employment or collaboration.

Legal basis: Art. 6(1)(b) GDPR and applicable employment law.

8. Recipients of Personal Data

Where necessary, personal data may be accessed by or disclosed to:

  • B3YOND employees and contractors involved in the relevant work
  • hosting, cloud and IT providers
  • AI and automation providers used for customer projects
  • accounting, tax, legal and other professional advisers
  • public authorities where legally required

We do not sell personal data.

9. International Data Transfers

Some of the technology providers we use may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we use appropriate safeguards in accordance with Art. 44 et seq. GDPR.

These may include:

  • an adequacy decision of the European Commission;
  • EU Standard Contractual Clauses; or
  • another legally recognized transfer mechanism.

For customer projects where B3YOND acts as a processor, relevant transfers and subprocessors are additionally governed by the applicable customer agreement.

10. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure.

Depending on the relevant system, these measures may include encrypted data transmission, access controls, authentication, restricted system access and security monitoring.

No internet-based system can nevertheless be guaranteed to be completely secure.

11. Retention and Deletion

We retain personal data only for as long as necessary for the respective purpose or as required by law.

In particular:

  • enquiries are retained for as long as reasonably necessary to process the enquiry and any subsequent business relationship;
  • customer and project information is retained for the duration of the contractual relationship and applicable statutory retention periods;
  • personal data processed on behalf of customers is deleted or returned in accordance with the relevant customer agreement; and
  • applicant information is retained only for as long as necessary for the respective recruitment process unless longer retention has been agreed or is legally required.

12. Your Rights

Under the GDPR, you may have the following rights:

  • Right of access – Art. 15 GDPR
  • Right to rectification – Art. 16 GDPR
  • Right to erasure – Art. 17 GDPR
  • Right to restriction of processing – Art. 18 GDPR
  • Right to data portability – Art. 20 GDPR
  • Right to object – Art. 21 GDPR
  • Right to withdraw consent where processing is based on consent

To exercise your rights, contact:
info@b3yond-it.com

Where B3YOND processes personal data solely on behalf of a customer, we may refer your request to the respective customer or assist the customer in responding to it.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

For B3YOND Ltd in Cyprus, this is in particular:

Office of the Commissioner for Personal Data Protection
Republic of Cyprus

You may also contact the competent supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

14. Changes to this Privacy Policy

We may update this Privacy Policy where necessary due to changes to our services, technology or legal requirements.

The current version is available on our website.