Politique de confidentialité

Last updated: August 2026

1. Data controller

• Identity: Marbe Pharma, S.L. (hereinafter, "Bizz Id")
• Spanish Tax ID (CIF): B93616837
• Address: Centro Comercial Guadalmina, Oficina 10, 29670 Marbella (Málaga), Spain
• Data protection contact: support-bee@bizz-id.com

2. Registered user data

When you register or use our services we process:

• Registration data: first name, surname, email address and password (stored encrypted).
• Data of the company you represent: name, description, sector, professional contact details, logo, images and catalogues you upload.
• Billing data: company name, tax address, VAT number and payment history.
• Browsing data: IP address, browser type and pages visited.

Purposes: managing your account, publishing and maintaining your company profile, facilitating contact between users and companies, issuing invoices, sending service-related communications and improving the platform.

Legal bases: performance of the contract (Art. 6(1)(b) GDPR) for the account and the service; compliance with a legal obligation (Art. 6(1)(c)) for invoicing; legitimate interest (Art. 6(1)(f)) for service improvement and security.

3. Company listings obtained from public sources

Bizz Id maintains a directory of companies in the pharmaceutical, cosmetics and related sectors. Some of these listings were not created by the company itself but compiled by Bizz Id from publicly accessible professional information. This section provides the information required by Article 14 of the General Data Protection Regulation.

• Source of the data: the companies' own corporate websites and other publicly accessible professional sources. We do not purchase third-party lists and we do not process data from personal social media.
• Data processed: company name, country, sector, activity description, professional postal address, corporate telephone, generic corporate email and website address. We do not publish third-party logos or images.
• Purpose: to provide a professional sector directory and to inform the company that its listing exists so that it may claim, complete, rectify or request removal of it.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in maintaining a B2B professional business directory, balanced against the data subject's rights. The information processed is professional in nature, not domestic or sensitive.
• Right to object: any company may object to the processing and request removal of its listing by writing to support-bee@bizz-id.com. We handle such requests within a maximum of 30 days, with no justification required.

4. Recipients of the data

To provide the service we rely on the following providers, acting as data processors:

We do not sell or share data with third parties for commercial purposes.

5. International transfers

Data storage takes place entirely within the European Union. The server is hosted in Finland and our email provider stores data in France and Belgium.

However, the following access from outside the European Economic Area does occur:

• Stripe, Inc. (United States), for payment processing.
• Support and maintenance teams of our email provider located in the United States, India and Serbia, which may access data stored in the European Union in order to provide technical assistance.

All such access is covered by the European Commission Standard Contractual Clauses and, for the United States, additionally by the EU-US Data Privacy Framework.

6. Retention periods

• Account data: while the account remains active and for up to 12 months after closure.
• Billing data: 6 years from issuance of the invoice (Art. 30 Spanish Commercial Code) and 4 years for tax purposes.
• Directory company listings: while the directory purpose subsists or until the company exercises its right to object.
• Security logs: 12 months.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to support-bee@bizz-id.com, stating the right you wish to exercise. We will reply within a maximum of one month.

If you consider that the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

8. Security

We apply reasonable technical and organisational measures: encryption in transit (HTTPS), passwords stored using salted key-derivation functions, restricted administrative access and periodic backups.

9. Changes to this policy

We may update this policy. Changes will be published on this page with their date, and significant changes will be notified by email to registered users.