Privacy Policy

Who we are

Greenbig SAS (operating under the brand b:bot) is the data controller for personal data collected through this website, our B:Bot mobile app, and our products. We design and manufacture high-density reverse vending machines for deposit return systems (DRS) across Europe.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website, contact us, or use our services. It applies in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

Data we collect

We collect personal data only when necessary and only through lawful means. This includes:

• Contact data — name, email address, company name, phone number, when you submit a contact or demo request form.
• Usage data — pages visited, time spent, referring URL, browser and device type, collected via analytics cookies (with consent).
• Communication data — content of messages or emails you send us, including any attachments.
• B:Bot mobile app data — email address and phone number via Firebase Authentication, usage and performance data via Firebase Analytics, and technical device data (model, OS version, unique identifier, crash reports) via Firebase Crashlytics.

We do not collect sensitive personal data (health, biometric, financial) through this website or the B:Bot app.

If you upload images to the website or the B:Bot app, please be aware that images with embedded geolocation EXIF data can allow anyone who accesses those images to extract location information. If you leave a comment on our site, an anonymised hash of your email address may be shared with the Gravatar service to check whether you are using it; that service's privacy policy is available at automattic.com/privacy. After your comment is approved, your Gravatar profile picture is publicly visible alongside it.

How we use your data

We use personal data for the following purposes:

• Responding to contact, demo, or sales enquiries
• Sending commercial or product information where you have given consent
• Analysing website usage to improve performance and content
• Complying with legal obligations
• Creating and managing your B:Bot app account, authenticating you at login, and providing technical support

Legal basis for processing

Data retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Contact enquiries: retained for 3 years from last interaction
• Marketing consent records: retained until consent is withdrawn
• Analytics data: aggregated and anonymised after 14 months
• B:Bot app authentication data: retained while your account is active, deleted within 30 days of account deletion
• App usage data (Firebase Analytics): retained for a maximum of 26 months
• App crash reports (Firebase Crashlytics): retained for 180 days

Your rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at contact@b-bot.com, or, for data related to your B:Bot account, at appcontact@b-bot.com or directly from within the app's account settings. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority.

Third parties and transfers

We may share data with trusted third-party service providers strictly for the purposes described in this policy (e.g., CRM, email platform, analytics). We do not sell personal data. All processors are bound by data processing agreements.

The B:Bot mobile app relies on Google's Firebase services (authentication, analytics, crash detection). These services are subject to Google's privacy policy, available at policies.google.com/privacy. App data is hosted on Firebase servers, primarily located in the United States and the European Union.

If data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Contact & complaints

For any privacy-related queries or to exercise your rights, please contact our Data Privacy Team: