Privacy Policy

Last updated: 1 December 2025

Company: B9 Agencija d.o.o.
Registered in: Slovenia
Registered address: Trg komandanta Staneta 8, Ljubljana, 1000 Ljubljana, Slovenia
Contact: info@b9agencija.com

1. Introduction

This Privacy Policy explains how B9 Agencija d.o.o. ("B9", "we", "us", "agency") collects, uses, stores, and protects your personal data when you:

Visit our website
Apply to work with us
Work with us as a creator partner
Browse our blog
Interact with our social channels
Contact us for support or inquiries

We operate under EU GDPR, Slovenian Personal Data Protection Act (ZVOP-2), and all relevant EU privacy regulations.

We take privacy extremely seriously — especially because our creators operate in sensitive digital industries. We operate with full confidentiality, strict access controls, and creator-first privacy standards.

2. Data We Collect

We only collect the minimum data necessary to provide our services.

2.1. Data You Provide Voluntarily

When applying to work with us:

Name / stage name
Email
Social media links
Experience level
Country
Content-related preferences
Any info you voluntarily provide in the form

When becoming our client:

Social media & platform account links
(Optional) Access permissions you provide for workflow execution
Communication preferences
Contractual information

When contacting us:

Name
Email
Message content

2.2. Automatically Collected Data (Website Analytics)

We collect minimal usage data for analytics:

IP address (anonymized)
Device type / browser
Pages visited
Time spent on page
Referring source
Click and scroll behavior

We do not collect or share sensitive personal data. We do not use invasive tracking or fingerprinting.

3. How We Use Your Data

We process your data strictly for the following purposes:

3.1. To Operate and Improve Our Services

Review applications
Evaluate fit for collaboration
Provide management services
Optimize account performance
Analyze trends and content performance

3.2. To Communicate With You

Send updates
Provide onboarding information
Respond to inquiries
Schedule calls

3.3. Legal & Contractual Obligations

Compliance with EU GDPR and Slovenian law
Accounting and tax purposes (if applicable)
Contract management

3.4. Website Optimization

Analyze traffic
Improve user experience
Adapt content to user behavior

4. Legal Basis for Processing (GDPR)

Under Article 6 GDPR, we process your data based on:

Consent — when submitting forms, cookies (Art. 6(1)(a))
Contractual necessity — when applying or working with us (Art. 6(1)(b))
Legitimate interest — website analytics, fraud prevention (Art. 6(1)(f))
Legal obligation — accounting or regulatory compliance (Art. 6(1)(c))

5. How We Protect Your Data

We use strict technical and organizational measures:

Encrypted storage
Role-based access
2FA on all internal systems
Regular security audits
Zero sharing of creator NSFW content
Logs of all data access
Strict confidentiality clauses for staff

We never sell personal data to third parties.

6. Sharing of Your Data

We only share your data with:

6.1. Trusted Processing Partners

Such as:

Analytics tools (anonymized)
CRM/scheduling tools
Cloud storage providers
Email service provider

All partners comply with GDPR and have valid Data Processing Agreements (DPAs).

6.2. Legal Authorities (Rare)

Only if legally required.

We do not share content, identity details, or sensitive creator data with any agency, partner, or platform unless explicitly instructed by you.

7. International Data Transfers

Data may be processed in the EU or in GDPR-approved countries. If transferred outside the EU, we use:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Strong encryption

8. Data Retention

We retain data only as long as necessary:

Application forms: 12 months (unless you request deletion sooner)
Client data: For the duration of the partnership + 36 months
Legal/accounting data: 10 years (as required by Slovenian law)
Analytics: 26 months (Google default)

You can request deletion at any time (see Section 9).

9. Your Rights Under GDPR

You have the right to:

Access your data
Correct your data
Delete your data ("right to be forgotten")
Limit processing
Object to processing
Withdraw consent
Receive a copy (data portability)
File a complaint with the Slovenian Information Commissioner (IP RS)

10. Cookies

We use minimal cookies for:

Essential site functionality
Anonymous analytics
Remembering preferences

Marketing pixel cookies (Meta/Google) are only activated with explicit consent.

You can manage or revoke cookies anytime via your Cookie Policy page or the "Cookie preferences" link in the footer.

11. Third-Party Links

Our website may contain links to YouTube, Instagram, blog posts, etc. We are not responsible for their privacy practices.

12. Policy Updates

We may update this Privacy Policy to stay compliant. We will update the "Last updated" date at the top of this page.

13. Contact

B9 Agencija d.o.o.
Trg komandanta Staneta 8, Ljubljana, 1000 Ljubljana, Slovenia
info@b9agencija.com
b9agencija.com