Privacy Policy

Privacy Policy published on April 17, 2023, and becomes effective upon its publication

This Privacy Policy (hereinafter referred to as the "Policy"):

  • is developed by Limited Liability Company "Benefits Solution" (hereinafter referred to as the "Operator"),
  • in compliance with the Law of the Republic of Belarus dated May 7, 2021, No. 99-Z "On Personal Data Protection",
  • defines the policy regarding the processing of personal data of individuals and other information about Visitors and Users of the website with the domain name "getbenefits.io" and/or the Mobile Application "Benefits & Perks",
  • constitutes one of the measures taken by the Operator to protect personal data.

 

1. KEY TERMS OF THE POLICY.

Key terms and their definitions established by the legislation on personal data protection are set forth in the Law of the Republic of Belarus dated May 7, 2021, No. 99-Z "On Personal Data Protection" (hereinafter referred to as the "Law").

In the Policy, unless otherwise specified, the following terms and definitions are used:

Privacy Policy published on April 17, 2023, and becomes effective upon its publication

This Privacy Policy (hereinafter referred to as the "Policy"):

  • is developed by Limited Liability Company "Benefits Solution" (hereinafter referred to as the "Operator"),
  • in compliance with the Law of the Republic of Belarus dated May 7, 2021, No. 99-Z "On Personal Data Protection",
  • defines the policy regarding the processing of personal data of individuals and other information about Visitors and Users of the website with the domain name "getbenefits.io" and/or the Mobile Application "Benefits & Perks",
  • constitutes one of the measures taken by the Operator to protect personal data.

 

1. KEY TERMS OF THE POLICY.

Key terms and their definitions established by the legislation on personal data protection are set forth in the Law of the Republic of Belarus dated May 7, 2021, No. 99-Z "On Personal Data Protection" (hereinafter referred to as the "Law").

In the Policy, unless otherwise specified, the following terms and definitions are used:

Involved Parties
Operator Limited Liability Company "Benefits Solution" (Unified State Register of Legal Entities No. 193425788), independently or jointly with other individuals, organizing and/or carrying out the processing of personal data.
The legal definition of this term is established in Article 1 of the Law.
Interaction Environment
Website Internet website in the territory of the Republic of Belarus with the domain name "getbenefits.io," owned by the Operator (hereinafter referred to as the "Website").
Personal Data Consent The voluntary, informed, and unequivocal expression of will by the subject of personal data, by which they permit the processing of their personal data (Article 1 of the Law).
Cross-Border Transfer of Personal Data The transfer of personal data to the territory of a foreign state (Article 1 of the Law).

Technical/computer terms used in the Policy are used in their commonly understood meaning unless otherwise specified by the Policy.

Other terms of the Policy are used as defined in Article 1 of the Law (where the definition is provided by the article).

 

2. GENERAL TERMS OF THE POLICY.

The Policy establishes rules for the processing of both personal data of Visitors/Users and other information not related to personal data.

The purpose of the Policy is to protect the personal data and other information of Visitors and Users in the performance of our Contracts, as well as in other use of the Website and mobile application.

During the use of the Website and Mobile Application, we may collect both your personal data and other non-personal information.

The processing of personal data is carried out with the consent of the subject of personal data, except for cases provided for by the Law "On Personal Data Protection" and other legislative acts.

Cases (legal grounds) when consent of the subject is not required for the processing of personal data are provided in Articles 6 and 8 of the Law "On Personal Data Protection".

In particular, the consent of the subject of personal data for the processing of their personal data is not required when the Operator obtains personal data based on a contract concluded (to be concluded) with the subject of personal data, for the purpose of performing actions stipulated by this contract.

For example, if you have agreed to the User Agreement and registered your Personal Account on the Website, your personal data is processed based on this Contract.

The list of cases of personal data processing, purposes, and legal grounds for processing depend on which category of subjects you belong to and are specified in the Table of the section "What personal data about our users we collect and process, for what purposes, and for how long".

The User familiarizes themselves with the Policy before joining the Contract (we place a link to the Policy in the registration form), and can also review the text at any time thereafter, ask questions through feedback forms, etc.

The Policy is published on the Website. It can also be reviewed in the Mobile Application.

We do not control and are not responsible for the websites and mobile applications of third parties that you may access through links available on the Website. Such websites may collect or request different personal data and information.

Informational emails sent by the Operator to Users for the purpose of informing them about Website capabilities, available options, updates on the Website, new discounts posted on the Website, serve only the purpose of informing the User and fulfill the User Agreement (contract).

If you no longer wish to receive informational emails, you can unsubscribe at any time. Just use the "unsubscribe" link, which is present in every informational email, or send us a message.

 

3. HOW WE COLLECT INFORMATION ABOUT USERS.

We collect information about Users during the activities of Visitors and/or Users through the Website or Mobile Application.

    You provide information about yourself independently, including personal data, to the extent necessary for processing, through the following methods:
  • when registering on the Website;
  • when using the Personal Account and the Website;
  • when filling out the feedback form on the Website;
  • during correspondence in online chats, messengers, and when using other means of feedback;
  • in other ways while using the Website and Mobile Application.

 

4. WHAT DATA ABOUT OUR USERS WE COLLECT AND PROCESS, FOR WHAT PURPOSES, AND FOR HOW LONG.

We have defined processing purposes that are necessary for providing you with quality services.

The content and scope of processed personal data correspond to the processing purposes.

The list of processed personal data depends on the category of the subject of personal data.

You can associate yourself with a specific category of subjects of personal data and familiarize yourself with what data, for what purpose, and on what legal basis we process.

We process cookies when visiting our website.

We do not process your special and/or biometric personal data.

Some of the information we collect may not be considered personal data.

* The abbreviation "Law" in Table 1 refers to the Law of the Republic of Belarus dated 07.05.2021 No. 99-Z "On Personal Data Protection".

Categories of Subjects of Personal Data Whose Data Are Processed Purposes of Processing Personal Data List of Processed Personal Data Legal Basis for Processing Personal Data Storage Period of Personal Data**
Users - individuals registering on the getbenefits.io website and/or in the "Benefits & Perks" mobile application (excluding employees of Customer companies - legal entities under contract, as well as Partners) Registration of the specified category of Users (in column 1) on the getbenefits.io website and/or in the "Benefits & Perks" mobile application (conclusion and performance of civil-law contracts)
  • name,
  • email address (e-mail),
  • mobile phone number,
  • part of the bank card number (during payment for services) and token for auto payments
Processing based on a contract with the data subject (without consent under paragraph 15 of Article 6 of the Law*) - Accession Agreement ("User Agreement" on the getbenefits.io website) - https://getbenefits.io/agreement Duration of the Personal Account's existence on the Website until its deletion
Employees of Customers - legal entities under contract, registering at the Customer's individual address Registration of the Personal Account of the specified category of Users at the Customer's individual address - a legal entity under a contract on the getbenefits.io website and/or in the "Benefits & Perks" mobile application (conclusion and performance of civil-law contracts)
  • email address (e-mail).
Processing based on a contract with the data subject (without consent under paragraph 15 of Article 6 of the Law) - (Accession Agreement ("User Agreement") on the getbenefits.io website - https://getbenefits.io/agreement Duration of the Personal Account's existence on the Website until its deletion
Authorized representatives of the Customer under a contract - a legal entity Registration of the Customer's Personal Account under a contract - a legal entity on the getbenefits.io website and/or in the "Benefits & Perks" mobile application (conclusion and performance of civil-law contracts)
  • name,
  • email address (e-mail),
  • phone number,
  • company name (place of work)
- bilateral contracts with Customers - legal entities.
1) In the case of a contract with a legal entity - processing of personal data is necessary for the performance of obligations (powers) provided by legislative acts (without consent, paragraph 20 of Article 6 of the Law, Article 49, paragraph 5 of Article 186 of the Civil Code;
2) In the case of a contract with an individual - processing based on a contract with the data subject (without consent under paragraph 15 of Article 6 of the Law).
1) Duration of the Personal Account's existence on the Website until its deletion
2) Authorized individuals who concluded a bilateral contract with the Operator on behalf of a legal entity - 3 years after the expiration of the contract term, conducting tax authority checks for compliance with tax legislation. If tax authority checks for compliance with tax legislation were not conducted - 10 years after the expiration of the contract term.
1) Authorized representatives of Partners - legal entities
2) Partners - individuals
Registration of the Personal Account of a Partner on the getbenefits.io website and/or in the "Benefits & Perks" mobile application (conclusion and performance of civil-law contracts)
  • name,
  • email address (e-mail),
  • phone number,
  • company name (place of work).
- bilateral contracts for paid services provision,
OR
- Partner Accession Agreement on the Website - "Cooperation Agreement. Partner Program" - https://getbenefits.io/partners/agreement
1) In the case of a contract with a legal entity - processing of personal data is necessary for the performance of obligations (powers) provided by legislative acts (without consent, paragraph 20 of Article 6 of the Law, Article 49, paragraph 5 of Article 186 of the Civil Code;
2) In the case of a contract with an individual - processing based on a contract with the data subject (without consent under paragraph 15 of Article 6 of the Law).
1) Duration of the Personal Account's existence on the Website until its deletion
2) Authorized individuals who concluded a bilateral contract with the Operator on behalf of a legal entity - 3 years after the expiration of the contract term, conducting tax authority checks for compliance with tax legislation. If tax authority checks for compliance with tax legislation were not conducted - 10 years after the expiration of the contract term.
    Users who have filled out and submitted the feedback form:
  • Website Visitors (registered or unregistered),
  • Users of the Mobile Application.
Responses to Visitors' questions, maintaining communication with Visitors through feedback forms on the getbenefits.io website and/or the "Benefits & Perks" mobile application
  • name,
  • email address (e-mail),
  • phone number,
  • company (place of work) - for Customers and Partners
Consent (electronically by filling out and submitting the feedback form) For the period necessary to provide a response
- Website Visitors (registered or unregistered),
- Users of the Mobile Application
Analysis of the operation of the getbenefits.io website and/or the "Benefits & Perks" mobile application - IP address of the user's computer (anonymized on the website);
- information about the user's browser (or other program used to access the Website);
- requested page addresses;
- access time;
- data from cookies;
- information about the user's device.
Consent (electronically in a pop-up window on the website) 1) IP address - until the user is deleted
2) Browser information (or other program) - until the user is deleted
3) Requested page addresses - until the user is deleted
4) Access time - until the user is deleted
5) Data from cookies - as specified in the Cookies Policy section

** Processing of information that does not allow the identification of the data subject (as well as personal data in a form that does not allow the identification of the data subject) is carried out without any time limit.

De-identification of personal data refers to actions that make it impossible, without the use of additional information, to determine the attribution of personal data to a specific data subject.

 

5. HOW WE USE COOKIES.

What are Cookies

Like many websites, our service uses cookies.

Cookies are text files stored in the browser of a computer (mobile device) of the Site user during its visit to reflect the actions taken. This file allows not to re-enter or select the same parameters when revisiting the site, for example, selecting the language version.

Usually, cookie files contain the domain name from which the cookie file was sent, as well as information about the age of the cookie file and a alphanumeric identifier.

Our Purpose for Using Cookies

Cookies help us improve the online service and provide you with enhanced and more personalized services.

Cookies allow us to recognize the computer and immediately provide any settings, preset by default.

Operator's Assurances Regarding Cookies

We do not transmit or use cookies for the identification of personal data subjects.

Types of Cookies We Process

The following types of cookies are processed on the site:

  1. Essential - these cookie files are necessary for the proper functioning of the Website. They provide access to certain functions of the Website, such as secure login to Website accounts.
  2. Functional - allow to provide an individual user experience on the site and are set in response to actions of the personal data subject;
  3. Statistical - allow storing the history of page visits on the site to improve its functioning, to identify the most and least popular pages.
  4. Analytical - used to solve tasks related to web analytics. The Operator uses tools that involve the use of analytical cookie files, such as Google Analytics and Yandex.Metrica.
Consent of the Data Subject / Rejection

Users can accept or reject all cookies processed on the site, except for the necessary ones.

Please note that your ability to use our Site may be limited or unavailable if you disable the ability to save certain types of cookie files.

In this case, the correct functioning of the site is only possible in the case of using functional cookies. In case of their deactivation, it may be necessary to re-select cookie preferences.

Disabling statistical cookies does not allow determining the preferences of site users, including the most and least popular pages, and taking measures to improve the functioning of the site based on user preferences.

Visitor Browser Settings

Most browsers are set to automatically accept cookies.

However, in addition to cookie settings on the site, data subjects may accept or reject the collection of all or some cookies in the settings of their browser.

In addition, some browsers allow you to visit websites in "incognito" mode to limit the amount of information stored on the computer and automatically delete session cookies. In addition, the personal data subject can delete previously saved cookies by selecting the appropriate option in the browser history.

More about cookie control settings can be found by following external links leading to the relevant pages of major browser sites:

[Firefox](https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored)

[Chrome](https://support.google.com/chrome/answer/95647?hl=en)

[Safari](https://support.apple.com/en-us/guide/safari/sfri11471/mac)

[Opera](https://help.opera.com/en/latest/web-preferences/#manageCookies)

[Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09)

[Internet Explorer](https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d)

 

We process the following cookies:

Necessary Cookies

Necessary cookies help make the website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Name Provider Purpose Duration / Storage
userLang GetBenefits.io Save the displayed content translation on the website 365 days
benefits_session GetBenefits.io User session 1 day
XSRF-TOKEN GetBenefits.io Protection against attacks 2 hours

 

Statistical Cookies

Statistical cookies help website owners understand how visitors interact with websites by collecting and presenting anonymous information.

Name Provider Purpose Duration / Storage
_ga Google Analytics Allows for distinguishing users. 2 years
_gid Google Analytics Allows for distinguishing users. 24 hours
_ym_d Yandex Metrica Stores the date of the user's first visit to the website. 1 year
_ym_isad Yandex Metrica Used to detect the presence of ad blockers in visitors. 2 days
_ym_uid Yandex Metrica These cookie files are intended for counting and analyzing website visit data. They are used by the Yandex Metrica script owned by Yandex. 2 years
_ym_visorc_* Yandex Metrica Used for the correct operation of Webvisor. 30 minutes

 

6. ACCESS BY THIRD PARTIES TO YOUR PERSONAL DATA

When visiting the website, your personal data may be collected and processed by third parties (authorized parties) - owners of the services listed below:

Automated Data Processing by Authorized Parties:
Purpose Authorized Party Data Documents of the Authorized Party on Data Processing
Web Analytics, Service Improvement Google Ireland Limited Google Analytics - a web analytics service that tracks website visits and analyzes user behavior in an automated manner. - How Google Analytics Works and What Information It Collects. - Google Privacy Policy.
- How to Block Google Analytics.
Web Analytics, Service Improvement LLC "YANDEX" Yandex.Metrica - a web analytics service that tracks website visits and analyzes user behavior in an automated manner. - How Yandex.Metrica Works and What Information It Collects. - Yandex LLC Privacy Policy.
- How to Block Yandex.Metrica on All Sites You Visit.
- How to Block Yandex.Metrica on Specific Pages of a Site at the time of your visit.
Lead Collection Widget
JivoSite
LLC "Jivoy Site" - Data automatically transmitted by the Site during its use through installed software on the User's device: cookie files, user data (location information; OS type and version; browser type and version; device type and screen resolution; source of user's site visit; from which site or advertisement; operating system and browser language; pages the User opens and buttons the User presses; IP address).
- Last name, first name, patronymic.
- Email address.
- Phone number (if provided).
Personal Data Processing Policy - https://www.jivo.com/files/personal_data_processing_policy.pdf

When paying for services using bank cards, all transactions with them are processed by banks in special secure modes. No confidential information about bank cards, except for notification of the payment made, is transmitted to or can be transmitted to the Operator.

Personal data of the personal data subject may be disclosed to authorized state bodies of the Republic of Belarus only on the grounds, in the manner, and to the extent provided by the legislation of the Republic of Belarus.

 

7. HOW WE PROCESS INFORMATION ABOUT YOU.

    We adhere to the following principles when processing personal data:
  • Legality,
  • Fairness,
  • Purpose limitation,
  • Legal basis,
  • Prohibition of excess,
  • Transparency,
  • Storage limitation,
  • Accuracy.

 

    The termination conditions of personal data processing may include:
  • Achievement of the purposes of personal data processing,
  • Expiration of the term of personal data processing,
  • Withdrawal of the consent of the personal data subject to the processing of their personal data,
  • (if the data were processed based on consent),
  • Identification of unlawful processing of personal data.

The user can delete their personal account from the Site by sending us a request via email or through the feedback form.

We store and process your personal data in a reliable and secure manner.

We follow our procedures, principles, and measures that ensure the confidentiality of Users in accordance with legal requirements. We continually improve the methods of collecting, storing, and processing your data. We restrict the access of our employees, contractors, and partners to personal data.

Compliance with the requirements of the Policy is monitored by the person responsible for organizing the processing of personal data at the Operator.

 

8. YOUR RIGHTS AND HOW TO EXERCISE THEM.

Right Where to learn more about the right? How to exercise it? Timeframe for realization
Right to withdraw consent Applies only if we process your data based on consent. Article 10 of the Law "On Personal Data Protection." Send a request to the Operator by email or postal address. Within a 15-day period after receiving your request.
Right to receive information about the processing of personal data and change personal data Article 11 of the Law "On Personal Data Protection." Send a request to the Operator by email or postal address. Within 5 business days after receiving the request.
Right to receive information about the provision of personal data to third parties Article 12 of the Law "On Personal Data Protection." Send a request to the Operator by email or postal address. Within a 15-day period after receiving your request.
Right to demand the cessation of personal data processing and/or deletion Article 13 of the Law "On Personal Data Protection." Send a request to the Operator by email or postal address. Within a 15-day period after receiving your request.
Right to challenge actions (inactions) and decisions of the Operator related to the processing of personal data Article 15 of the Law "On Personal Data Protection." You have the right to file a complaint with the authorized body for the protection of the rights of personal data subjects in the manner established by the legislation on appeals of citizens and legal entities. -

 

9. ACCURACY OF INFORMATION. USER MODIFICATION OF PERSONAL DATA AND OTHER INFORMATION.

We do not verify the accuracy of information, including personal data, provided by Users, and do not control their legal capacity. We assume that the User provides accurate and sufficient information on the questions offered in the registration form and keeps this information up to date.

The consequences of providing false information may be specified in the Agreement.

You can change (update, supplement) the provided information or its part, as well as the parameters of its confidentiality, at any time using the technical capabilities of the Site, browser, and/or by contacting us through other means (messengers, email hello@getbenefits.io, etc.).

Upon receiving information from the User about changes in personal data, We update the information stored with us no later than the next business day after such notification.

You can also change the information provided within a specific account. However, changing data may result in the inability to use the Site and its services.

 

10. PRIVACY POLICY CHANGES.

We will regularly update our Privacy Policy to inform you of all changes in our approach to processing your personal data.

In case of significant changes, we will inform you separately.

All other changes to the Privacy Policy will be reflected on this page.

The date of the last update is indicated in the current version.

 

11. HOW TO CONTACT US.

 

The website uses cookies to automate processes. By continuing to use our website you consent to the processing of cookies to the extent and for the purposes set out in the Privacy Policy.