PRIVACY POLICY OF THE WEBSITE www.bimoq.com
(Phase 1: registration and download) · Version 1.1, Effective date: 1 October 2026
This Privacy Policy explains how personal data is processed when you visit the website www.bimoq.com (the "Website"), register for an account and download the "BIMOQ" software. It is an information notice under Article 13 of the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR"), and is issued in accordance with the GDPR, Law 4624/2019 and Law 3471/2006 on electronic communications. It is not a contract and you are not asked to accept it.
The use of cookies and similar technologies on the Website is explained in the separate Cookie Policy. Processing that takes place within the software itself, once installed on your device, is explained in the separate Privacy Policy of the BIMOQ software.
1. DATA CONTROLLER
The Controller of the personal data processed through the Website is:
• Name: "BIMoQ SINGLE MEMBER P.C." (distinctive title "BIMoQ"), a single-member private company (Greek I.K.E.)
• G.E.MI. No.: 196255901000
• Tax Reg. No. (ΑΦΜ): 803406136, Tax Office (Δ.Ο.Υ.) KEFODE of Attica
• Seat: 33 Stadiou Street, Athens, Postal Code 10559, Greece
• Legal Representative: Emmanouil Bogris, Manager
• Telephone: +30 211 0012367
• General contact: info@bimoq.com
• Contact e-mail for personal data matters: privacy@bimoq.com
The Controller has not appointed a Data Protection Officer, as it is not obliged to under Article 37 GDPR: it does not carry out large-scale systematic monitoring of data subjects or large-scale processing of special categories of data.
2. SCOPE
This Policy covers the following activities on the Website:
• browsing the public pages of the Website;
• creating and using an account;
• downloading the Preview Release of the BIMOQ software;
• contacting us;
• subscribing to a newsletter, if and when that service is introduced.
The Website does not operate an online shop in this phase and takes no payments.
3. WHAT DATA WE PROCESS
3.1 Technical data when you visit the Website
When you visit any page, the servers of our hosting provider automatically record technical data necessary to deliver the page and protect the Website: your IP address, the date and time of the request, the page requested, the browser and operating system you use (user agent) and the referring page.
3.2 Analytics data (only with your consent)
If (and only if) you accept analytics cookies through the cookie banner, we use Google Analytics 4 on the public pages of the Website to understand how visitors use them. Google Analytics collects pseudonymous identifiers stored in cookies, the pages you view and how you interact with them, information about your device and browser, and your approximate location. Google Analytics is not used in the account area of the Website and is not linked to your account. We do not use Google Analytics for advertising or to build profiles of identified persons.
3.3 Account data
To create an account you provide:
• your e-mail address, which serves as your user ID; and
• a password, which is stored only in hashed form.
We send the registration and confirmation e-mails to that address. We also record the version and language of the Terms of Use you accepted, with the date and time of acceptance.
3.4 Download records
For each download we record, per user, the date and time and the version of the software downloaded.
3.5 Communications
If you contact us by e-mail, we process your e-mail address, your name if you give it, and the content of your message and of our reply.
3.6 Newsletter
At the date of this Policy no newsletter is in operation. If one is introduced, you will be able to subscribe only by a separate, optional choice that is not pre-selected, and your subscription will never be a condition for creating an account or downloading the software. For subscribers we will process the e-mail address and a record of the consent (date, time and the wording you agreed to).
3.7 Data we do not collect
Through the Website we do not collect payment or billing data, special categories of personal data (Article 9 GDPR), or data used for advertising. We do not use advertising or social-media tracking pixels.
4. PURPOSES AND LEGAL BASES
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering the Website and keeping it secure; preventing and investigating abuse and attacks | 3.1 | Art. 6(1)(f) GDPR: legitimate interest in the secure operation of the Website |
| Understanding how visitors use the public pages, in aggregate, in order to improve them | 3.2 | Art. 6(1)(a) GDPR: consent, given through the cookie banner (art. 4 §5 of Law 3471/2006) |
| Creating and managing your account; sending registration and confirmation e-mails | 3.3 | Art. 6(1)(b) GDPR: performance of the Terms of Use, or steps taken at your request before entering into them |
| Supplying the software for download | 3.3, 3.4 | Art. 6(1)(b) GDPR: performance of the Terms of Use |
| Keeping download records, to protect the integrity of the distribution and detect abuse of the free Preview Release | 3.4 | Art. 6(1)(f) GDPR: legitimate interest |
| Proof that the Terms of Use were accepted, and in which version and language | 3.3 (record of acceptance) | Art. 6(1)(f) GDPR: legitimate interest in establishing, exercising or defending legal claims |
| Answering your messages | 3.5 | Art. 6(1)(b) GDPR where the message concerns your account or the software; otherwise Art. 6(1)(f): legitimate interest in answering enquiries |
| Sending a newsletter, if and when introduced | 3.6 | Art. 6(1)(a) GDPR: consent, in conjunction with art. 11 §1 of Law 3471/2006 |
Where we rely on legitimate interest, you may object at any time (Article 9 below).
5. IS PROVIDING DATA MANDATORY?
Your e-mail address and a password are necessary to create an account; without an account the software cannot be downloaded. The technical data in Article 3.1 is necessary for the Website to function. Everything else is optional: you may refuse analytics cookies and you need not subscribe to any newsletter, and refusing has no effect on your access to the Website or to the software.
6. RECIPIENTS AND PROCESSORS
Your data is disclosed only to the extent necessary for the purposes in Article 4, to:
• authorised personnel of the Controller;
• Netlify: hosting and delivery of the Website (data in Article 3.1);
• Amazon Web Services (AWS): hosting of the back-end infrastructure in which accounts and download records are kept (data in Articles 3.3 and 3.4);
• Microsoft (Azure): sending of registration and confirmation e-mails;
• Google: Google Analytics, only where you have consented (data in Article 3.2);
• the provider of the newsletter service, if and when one is introduced;
• the Controller’s legal advisers, in the event of a dispute;
• authorities competent by law, where lawfully requested.
A written data processing agreement under Article 28 GDPR is in place with each processor. We do not sell your data or disclose it to third parties for their own marketing.
7. TRANSFERS OUTSIDE THE EU/EEA
Some of the providers named in Article 6 (indicatively Netlify and Google) belong to groups established in the United States, and your data may therefore be processed outside the EU/EEA. Any such transfer is made only under at least one of the following safeguards:
• an adequacy decision of the European Commission, including, for recipients certified under it, the adequacy decision on the EU–US Data Privacy Framework;
• the Commission’s Standard Contractual Clauses;
• binding corporate rules, where applicable;
• supplementary measures following a transfer impact assessment.
A copy of the safeguards applied may be obtained on request at the address in Article 1.
8. RETENTION
| Data | Retention period |
|---|---|
| Technical data (3.1) | No longer than thirty (30) days, unless needed to investigate a specific security incident |
| Analytics data (3.2) | Fourteen (14) months, the retention period set in Google Analytics; cookies as stated in the Cookie Policy |
| Account data (3.3) | For as long as your account exists, and up to six (6) months after the Preview Release expires or after you ask for deletion of your account |
| Record of acceptance of the Terms of Use (3.3) | Five (5) years from the closure of your account |
| Download records (3.4) | Twenty-four (24) months |
| Communications (3.5) | Three (3) years from the last message |
| Newsletter (3.6), if introduced | Until you unsubscribe; the record of your consent is kept for as long as needed to demonstrate it |
After these periods data is deleted or anonymised, unless longer retention is required by law or is necessary for the establishment, exercise or defence of legal claims.
9. YOUR RIGHTS
Under Articles 15–22 GDPR you have the right to:
• access your data and receive a copy of it (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure, subject to conditions (Art. 17);
• restriction of processing, subject to conditions (Art. 18);
• portability of data you have provided, in a structured, commonly used and machine-readable format (Art. 20);
• object to processing based on legitimate interest, and at any time to direct marketing (Art. 21);
• withdraw your consent at any time (to analytics cookies through the "Cookie settings" link at the foot of every page, and to a newsletter through the unsubscribe link in each message) without affecting processing carried out before withdrawal (Art. 7(3)).
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.
To exercise a right, write to privacy@bimoq.com. We reply within one (1) month, which may be extended by two (2) further months for complex requests (Art. 12(3) GDPR). Exercising your rights is free of charge, except for manifestly unfounded or excessive requests (Art. 12(5) GDPR). We may ask you to verify your identity before a request is met.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority, 1–3 Kifisias Avenue, 11523 Athens, www.dpa.gr, tel. +30 210 6475600, e-mail contact@dpa.gr, or with the supervisory authority of the EU Member State where you live or work (Art. 77 GDPR).
10. SECURITY
We apply appropriate technical and organisational measures under Article 32 GDPR, including encryption of connections to the Website (HTTPS), storage of passwords in hashed form only, access control on the least-privilege principle, and a procedure for handling personal data breaches (Articles 33–34 GDPR).
11. MINORS
The Website is addressed to professionals and to persons aged 18 or over. We do not knowingly collect personal data of minors; if we learn that we have done so, we delete it without delay.
12. CHANGES TO THIS POLICY
We may update this Policy. The version in force bears a version number and an effective date and is always available on the Website. Material changes are announced on the Website, and to registered users by e-mail, before they take effect.
13. CONTACT
• E-mail: privacy@bimoq.com
• Post: BIMoQ SINGLE MEMBER P.C., 33 Stadiou Street, Athens, Postal Code 10559, Greece
• Telephone: +30 211 0012367
(END OF PRIVACY POLICY)
Version 1.1 · 1 October 2026 · www.bimoq.com · BIMoQ SINGLE MEMBER P.C. (ΑΦΜ 803406136)