Legal

Privacy Policy

Policy on the processing and protection of personal data

Version 1.0 · effective date: 6 November 2026

This policy explains what personal data BB TECHNOLOGIES LLC processes when you visit bb-technologies.info or write to us, why we do it, who else receives the data and what rights you have.

1 Who we are

The website bb-technologies.info (the “Website”) is owned and operated by BB TECHNOLOGIES LLC (“BB TECHNOLOGIES”, “we”, “us”), a limited liability company registered in the Kyrgyz Republic (registration number 335866-3301-OOO, taxpayer identification number 00211202610296). Registered address: Logvinenko 55, 32, Pervomaisky District, Bishkek, Kyrgyz Republic. We are the owner (controller) of the personal records of our correspondence with you. The technical data described in section 3 is recorded by our hosting provider, GitHub, Inc., which processes it as a separate owner for its own security purposes.

We have not appointed a separate person responsible for processing personal data. For any privacy matter, write to info@bb-technologies.info.

2 What this policy covers

This policy covers the Website and your correspondence with us. Each of our mobile apps has its own privacy policy, which is published on this Website and linked from the app’s page in the App Store and Google Play. For data processed in an app, that app’s privacy policy applies.

3 What data we process and where it comes from

• Technical data. When you open the Website, your browser connects directly to the servers of our hosting provider, GitHub, Inc. GitHub logs your IP address for security purposes and may also record other details of the request, such as its date and time, the page requested, the referring page and your browser and device type (user agent). GitHub does this under its own privacy statement; we do not receive these records and have no access to them.
• Correspondence. When you email us, we process what you send: your email address, your name and any other details you include, the text of your message, attachments and the technical data of the email, as well as our replies.

We do not ask for payment card details or special categories of personal data, such as health information, and ask you not to send them to us by email.

4 Cookies, analytics and automated decisions

The Website does not use cookies, analytics or any other tracking technologies, shows no advertising and does not load content or scripts from third-party services. We do not build profiles and do not make automated decisions about you.

5 Why we process data and on what legal grounds

• Delivering the Website and keeping it secure — technical data, processed by GitHub (see section 3) — our legitimate interest in a working and secure website (Art. 79(1)(5)).
• Replying to your messages and communicating with you about our products, partnerships, support and legal matters — correspondence — the conclusion or performance of a contract with you, or steps you ask us to take before concluding one (Art. 79(1)(1)); in other cases, our legitimate interest in replying to you (Art. 79(1)(5)).
• Complying with our legal obligations, such as accounting duties, and responding to lawful requests from public authorities — correspondence — legal obligation (Art. 79(1)(2)).

These grounds are provided for by Article 79(1) of the Digital Code of the Kyrgyz Republic. Because they apply, we do not ask for your consent (Article 79(2)). Where the EU General Data Protection Regulation (GDPR) applies to you, the corresponding legal bases are Art. 6(1)(f) GDPR for the first purpose, Art. 6(1)(b) or, in other cases, Art. 6(1)(f) GDPR for the second, and Art. 6(1)(c) GDPR for the third.

6 Who receives your data

We do not sell personal data and do not share it with anyone for advertising. The data is received only by:

• our service providers, under their agreements with us:
  • GitHub, Inc. (USA) — website hosting; GitHub logs visitors’ IP addresses for its own security purposes as a separate owner of these records, under its own privacy statement;
  • Cloudflare, Inc. (USA) — domain name system (DNS); it answers DNS queries for our domain, which usually come from your internet provider’s DNS server rather than from your device, and does not see the pages you open;
  • Migadu-Mail GmbH (Switzerland; servers in France and in Germany) — email;
• public authorities, where the law requires us to disclose it.

Our staff access the data only as far as their work requires.

7 Where data is processed

Our service providers process data on servers in the USA, in France, in Germany and in other countries where they operate. No foreign country is yet marked as providing adequate protection on the list published by the State Agency for Personal Data Protection, so we transfer personal data abroad only on the grounds in Article 89(4) of the Digital Code of the Kyrgyz Republic: under the data-protection terms of our agreements with these providers (Art. 89(4)(6)) and, where your message concerns a contract with you, to conclude or perform that contract (Art. 89(4)(4)). When you open the Website, your browser sends the technical data directly to GitHub. Data processed abroad is also subject to the law of the country where it is processed.

8 How long we keep data

• Technical data is kept by GitHub for security purposes for the periods set in its own rules. We do not store it.
• Correspondence is kept for as long as needed to handle your request and our dealings with you, and then for no more than three years after the last message, unless the law requires us to keep it longer. After that, we delete it.

9 How we protect data

• The Website is served only over an encrypted connection (HTTPS).
• Our hosting, domain (DNS) and email accounts are held in the company’s name and protected with two-factor authentication, and only the people who need access for their work have it.
• Service providers that process data on our behalf do so under agreements that require them to protect it.
• If an incident affects personal data, we act under our incident response procedure and, where the incident affects your rights or the resilience of our services, notify the State Agency for Personal Data Protection no later than 72 hours after discovering it (Article 63 of the Digital Code).

10 Your rights

You have the right to:

• get information about how your data is processed and a copy of it, within 7 working days of your request;
• have inaccurate data corrected and incomplete data completed, within 7 working days;
• have your data deleted when it is no longer needed, when the ground for processing has ended or following your objection, unless the law requires us to keep it or we need it to establish, exercise or defend legal claims;
• restrict the processing of your data;
• object to the processing of your data by particular methods or for particular purposes, and get a reasoned decision within 7 working days;
• receive your data in a structured, commonly used format, where processing is based on a contract or consent;
• withdraw your consent at any time, where processing is based on consent.

To exercise your rights, write to info@bb-technologies.info. This is free of charge. We may ask you to confirm that the request comes from you, for example by replying from the email address concerned.

We do not hold the technical data recorded by GitHub. To exercise your rights over it, contact GitHub as described in the GitHub Privacy Statement.

If you believe we have violated your rights, you can complain to the State Agency for Personal Data Protection under the Cabinet of Ministers of the Kyrgyz Republic (dpa.gov.kg) or go to court. If you live in the EU, you can also contact the data protection authority of your country.

11 If you do not provide data

Providing data is voluntary. Without your email address we cannot reply to you. Technical data is needed to deliver the Website, so the Website cannot be opened without it.

12 Children

The Website is intended for adults and businesses and is not directed at children. We do not knowingly process children’s data. If we learn that we have received personal data of a child under 14 without the consent of a parent or legal guardian, we will delete it.

13 Applicable law

This policy has been drawn up in accordance with the law of the Kyrgyz Republic, in particular Chapter 11 “Processing of personal data” of the Digital Code of the Kyrgyz Republic No. 178 of 31 July 2025, in force since 6 February 2026.

14 Changes to this policy

We may update this policy. The current version is always published on this page with its version number and effective date. If the changes are significant, we will say so at the top of this page.