Privacy Policy

1. General

This Privacy Policy applies to personal data that RealBee ApS (“RealBee”, “we”, “us” or “our”) processes as an independent data controller, including in connection with our website, customer administration, support, billing, marketing, recruitment and our general business activities (the “System”). Where RealBee processes personal data on behalf of a customer in connection with the customer’s use of the System, RealBee acts as data processor, and such processing is governed by the applicable data processing terms or any separate data processing agreement entered into with the customer.

2. Identity of the Data Controller

If there are any questions regarding this Privacy Policy, you may contact us using the information below.

We are processing your personal data in accordance with the General Data Protection Regulation (GDPR) and any national regulations applicable to us.

We are not required to appoint an external Data Protection Officer (DPO). If you have any questions regarding our processing of your personal data, please contact us using the details above.

3. Purpose of Processing

4. Transfer of Personal Data

We may share or transfer your personal data to a country or territory outside the EU/EEA where this is necessary for the purposes described in this Privacy Policy, including where we use service providers, hosting providers, communication tools, analytics providers, payment processors or AI API service providers located outside the EU/EEA.

Where such transfers occur, we ensure an adequate level of protection for the rights and freedoms of data subjects by relying on appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission and, where relevant, supplementary measures required under applicable data protection law.

We will not share your personal data with any third party without your consent, unless it is specifically stated or required by law that we do so.

5. Profiling and Automated Decision Making

Our processing activities do not include automated decision-making that produces legal effects concerning you or similarly significantly affects you. Based on user input and other information submitted through the System, the System may generate analyses, summaries, market insights, use case descriptions, patent search results and other outputs. Such outputs are intended as decision-support and inspiration only and do not constitute automated decisions by RealBee about individual persons. Where user input contains personal data, such personal data is processed only for the purposes described in this Privacy Policy.

6. Business Transfers

In the event of an actual or contemplated transfer of our company or our assets, or if we discontinue our business or enter into bankruptcy proceedings, we will include data, including your personal information, among the assets transferred to any parties who acquire us or such assets may be the subject of review (due diligence) by such parties (or their representatives). You acknowledge that such transfers may occur, and that any parties who acquire, or contemplate to acquiring us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information.

7. Use of Personal Data

We only process your personal data as stated in this privacy policy and we do not use your personal data for any other purpose than explicitly described above or communicated directly to you elsewhere.

We process your personal data in a lawful, fair and transparent manner. The data we collect is solely used for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

All use of your personal data is relevant and limited to what is necessary in relation to the purposes for which they are processed.

8. Security

When we store and process personal data that we have received from you, we implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. These measures are reviewed and updated where relevant, taking into account the nature of the processing, the risks involved and the state of the art.

The following security measures are in place to keep your data safe:

• Encryption of personal data, both in transit and at rest
• Access controls and authentication
• User-specific access rights and private-by-default project access
• Secure hosting environments
• Use of trusted cloud infrastructure and relevant infrastructure-level security features
• Security rules and access enforcement for project data
• Monitoring and measures designed to protect against unauthorised access and common web application attacks
• Internal policies and staff GDPR awareness training

We retain personal data only for as long as necessary for the purposes for which it was collected, including to provide the System, administer customer accounts, comply with legal obligations, resolve disputes and enforce our agreements.

• Accounting records and related bookkeeping material are retained for five (5) years after the end of the financial year to which the material relates, in accordance with applicable bookkeeping requirements.
• Upon termination of a subscription, project data may be available for export for a limited period as set out in the applicable agreement, after which such data may be deleted in accordance with RealBee’s data retention policies.
• Where personal data is processed on behalf of a customer, retention and deletion are governed by the applicable data processing terms or separate data processing agreement.

9. Access to Your Information

Under the GDPR, you have the following rights:

• Right to access (GDPR Article 15) – You have the right to obtain a confirmation from us as to whether personal data concerning you are being processed, including information on the purpose-, categories-, recipients-, and time of storage of the processing.
• Right to rectification (GDPR Article 16) – If you find that the data that is being processed about you is inaccurate or incomplete, you have the right to get that data rectified. We will communicate any rectification or erasure of personal data to any recipient to whom the personal data has been originally disclosed, unless it proves impossible according to Article 19.
• Right to erasure and restriction of processing (GDPR Article 17) – You also have the right to get your personal data erased, if the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed. Please see Article 17 for the full list of reasons for your right to erasure.
• Right to restriction of processing (GDPR Article 18) – You have the right to restrict the processing of your personal data if it is (i) inaccurate; (ii) unlawful; (iii) the purpose of the processing has changed; or (iv) you have objected to the processing according to Article 21.
• Right to data portability (GDPR Article 20) – You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format. You can also request that we transmit your data to another party.
• Right to object (GDPR Article 21) – You have the right to object to the processing of your personal data if it is being used for profiling or direct marketing purposes.

10. Sub-processors

We use data processors and other third-party service providers to deliver, secure, maintain and improve the System and to operate our business. These service providers may process personal data on our behalf and only in accordance with our instructions and applicable data processing terms.

The categories of service providers currently include:

• Cloud hosting and backend infrastructure providers, including providers used for secure data storage, authentication and platform hosting
• Website hosting providers
• AI API service providers used to support selected System functionality
• Email, communication and customer support tools
• Analytics and product performance tools
• Payment, invoicing and bookkeeping providers

11. Contact Information, Requests & Complaints

If you want to exercise any of your above rights, please contact us:

If you find that your personal data has been processed in a way that does not meet the requirements of the GDPR, and if you want to file a complaint, you have a specific right to lodge a complaint with the relevant supervisory authority. The supervisory authority will guide you through the process. See contact information below: