Privacy

SIA GOLDNBEE
Registration number: 40103558050
Legal address: Jaunā Mežaparka iela 36–2, Rīga, LV-1014, Latvia
Privacy contact: latvia@safe365enterprise.com

• Professional identity and invitation data: name, position, organisation, business contact details, company/industry context, invitation status, selection rationale and content prepared for the recipient.
• Contact and meeting data: name, email address, phone number, message or note, preferred time, meeting location/address and timezone.
• Access and device-security data: invitation/access identifiers, access status, device/browser information, device label, access and last-seen timestamps, and a one-way hash of the IP address. The access credential is opaque and does not itself contain readable recipient or company data.
• Use data: random session identifier, screens viewed, time spent, completion and interaction events.
• Administrative/security records: authorised administrator identifiers and audit records of security-relevant changes.

Data may come from the invited recipient, their organisation or its representatives, existing business contacts, and reputable public professional and company sources. Data entered when booking or contacting us comes directly from that person.

• Selecting, preparing, delivering and managing relevant B2B invitations and follow-up conversations — legitimate interests under GDPR Art. 6(1)(f).
• Authenticating access, applying the three-device limit, preventing abuse and protecting the private material — legitimate interests under Art. 6(1)(f).
• Answering contact requests and arranging and managing meetings — legitimate interests and, where applicable, steps taken at the person's request under Art. 6(1)(b).
• Maintaining evidence of administrative and security actions and establishing, exercising or defending legal claims — legitimate interests under Art. 6(1)(f).
• Complying with applicable legal obligations — Art. 6(1)(c).

Our legitimate interest is developing carefully selected, long-term enterprise relationships while protecting a private, recipient-specific experience; we limit the data we hold and the access to it accordingly. You may object to processing based on legitimate interests at any time.

Data is available only to authorised SAFE365 ENTERPRISE / SIA GOLDNBEE personnel and to service providers needed for secure hosting, database and authentication, communications, maintenance and legal or accounting support. Providers act under contractual and confidentiality safeguards. Data may be disclosed to authorities where legally required. We do not sell personal data.

Where a provider processes data outside the European Economic Area, we rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard under the GDPR.

• Invitation and recipient data: while the invitation is active, then no longer than 24 months after the last meaningful interaction; an invitation with no interaction is reviewed and deleted or anonymised no later than 12 months after it is closed.
• Access, device and security-event records: no longer than 12 months after the invitation is closed or access revoked, unless needed to investigate a security incident.
• Engagement analytics: no longer than 12 months, after which they are deleted or irreversibly aggregated.
• Contact requests and meeting records: no longer than 24 months after the last interaction, unless a continuing business relationship or legal requirement justifies longer storage.
• Short-lived access-denial context: usable for about 20 minutes and retained only as long as reasonably needed for abuse prevention and troubleshooting.
• Administrative audit records: up to 36 months.
• Contractual, accounting and legal-claim data: for the statutory period.

Shorter deletion follows a valid request unless a legal exception applies.

• s360_grant: HttpOnly secure access token, kept up to 12 months or until revoked; recognises an authorised device.
• s360_cr: HttpOnly secure contact-request status marker, kept 24 hours; prevents duplicate submissions.
• A random per-tab/session identifier in sessionStorage, held until the browser session ends; used for invitation engagement measurement.
• Administrator authentication storage applies only to authorised administrators.

We use no advertising cookies and no cross-site behavioural profiling. These items are strictly necessary, security-related or limited first-party measurement tied to the private invitation — not public advertising.

We apply access controls, device limits, opaque high-entropy credentials, hashing of IP addresses before storage, audit trails, encrypted transport and least-privilege access. No method of transmission or storage is entirely without risk, but we work to protect the private material to a standard appropriate to its nature.

You may request access, correction, deletion, restriction or — where applicable — portability of your personal data; object to processing; withdraw consent where processing is based on consent; and lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at www.dvi.gov.lv. To exercise your rights, write to latvia@safe365enterprise.com. We may need to verify your identity before acting on a request.

We do not use solely automated decision-making that produces legal or similarly significant effects, and we do not sell personal data or profile you for advertising.

Material updates to this notice appear on this page with a revised date.