Privacy Policy

JET BI PRIVACY POLICY

In connection with Jet BI’ activities we process your personal data according to the provisions of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR). Below we provide you with all the important information about processing personal data:

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

Data Controller of your personal data is BUNTAISTE TECHNOLOGIES LIMITED t/a Jet BI, a company registered in Ireland under company number 631434, with its registered office at 74 Northumberland Road, Ballsbridge, Dublin, D04 XF75, Ireland.

2. HOW CAN YOU CONTACT THE DATA CONTROLLER?

Contact with us is possible via:

e-mail to the address: info@buntaiste.com
mail, by sending a letter to the address: 74 Northumberland Road, Ballsbridge, Dublin, D04XF75, Ireland.

3. WHAT ARE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

The legal basis for processing personal data varies depending on the situations described below and depends on the interaction you have with us:

If you visit our website

https://jetbi.com/

We may process your personal data in order to:

ensuring the proper website operation,
traffic monitoring,
verification of use of the website,
displaying ads and conducting analytics and marketing activities,
possibly preventing actions contrary to generally applicable laws.

We save the data in particular as part of cookies and logs regarding visiting the website. This data may be your IP address or registering the actions taken on the website.

The legal basis for processing the data in this manner is Article 6(1)(f) of the GDPR, enabling data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

The legitimate interests of the controller in this case is ensuring the proper operation of the website and preventing misuse, unauthorised access and other security incidents.

Non-essential analytics, advertising and social-media cookies or similar technologies are used only after your consent under Regulation 5(3) of the Irish ePrivacy Regulations and Article 6(1)(a) GDPR. You may change or withdraw consent at any time through the cookie settings without affecting prior lawful processing, and you may use the website’s core functions without accepting optional cookies.

If you contact us to establish cooperation between you and us

If you already are our client, service provider, subcontractor or you cooperate with us on the basis of a civil law contract

If you contact us to establish a business cooperation, then we process your personal data in order to take actions on your request before concluding the agreement.

If you already are our client, service provider or cooperate with us on the basis of a civil law contract we process your personal data in order to perform our contract.

In these cases the legal basis for processing the data in this manner is Article 6(1)(b) of GDPR, enabling data processing when it is necessary:

to take action at the request of the data subject before entering into a contract,
for conclusion of contract,
for execution of contract,

to which the data subject is a party.

Furthermore, we process your data in order to fulfil our legal obligations regarding concluding contracts, especially in connection with accounting and tax – on the basis of the Article 6(1)(c) of the GDPR, enabling data processing when it is necessary for compliance with a legal obligation to which the controller is subject.

We also process your data in order to defend against claims and pursuing claims, which constitutes our legitimate interests – in that case processing of the personal data is based on the Article 6(1)(f) of GDPR which states that personal data processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller

If you are the representative of an entity interested in our services

our client or service provider – i.e. an entities which have already concluded an agreement with us

We process your personal data in order to conclude and perform the contract between us and our client or service provider.

The legal basis for processing your personal data is the Article 6(1)(f) of GDPR which states that personal data processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

The legitimate interests of the controller in this case is concluding or performing the contract between us and our Client which requires contacting the representatives of the Client.

If you contact us by e-mail, letter, phone or you provide us with your contact details via our website

We process your personal data, such as your name and surname, e-mail address, correspondence address, phone number, content of the correspondence or conversation in order to contact you and exchange messages.

The legal basis for processing your personal data is the Article 6(1)(f) of GDPR enabling data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

The legitimate interests of the controller in this case are the necessity of data processing in order to contact people and provide them with a response to the submitted content.

If you visit our social media profiles on Facebook, Instagram, LinkedIn, TikTok, YouTube, X, follow them or react on our posts

We process your personal data to monitor traffic and conduct marketing activities regarding our services. Within these social networks, we may target you with marketing content (display posts marked as sponsored) in accordance with the terms and conditions of the indicated platforms.

We process data related to the activities of our profile on Facebook, Instagram, LinkedIn, TikTok, YouTube or X on the basis of the provision of Article 6(1)(f) of GDPR.

The legitimate interest of the controller in this case is conducting statistics, marketing activities and enabling you to interact with our profiles.

If you use our AI bot

We process your personal data to enable you to use our AI bot and conduct conversations with it. We do this as part of marketing activities for our services.

The legitimate interest of the controller in this case is conducting marketing activities regarding our services.

Please have in mind that in some cases we may make the use of the bot conditional on your consent to marketing. In such a case, provisions regarding processing of personal data for the purpose of e-mail marketing shall also apply.

The bot uses artificial intelligence and may generate inaccurate output. Do not submit special-category data, confidential information or third-party personal data unless necessary and authorised.

If you subscribe to our newsletter or other e-mail marketing communication

We process your personal data in order to send the newsletter and conduct marketing activities regarding our services.

Where you subscribe to our newsletter or otherwise consent to receiving marketing communications, processing is based on your consent under Article 6(1)(a) GDPR.

Where Regulation 13(11) of the Irish ePrivacy Regulations applies, we may use contact details obtained from an existing customer in the context of a sale to market our own similar services, provided that we offered a clear opt-out when collecting the details, include an opt-out in every message and send the first such message within 12 months of the sale. The related personal-data processing is based on our legitimate interests under Article 6(1)(f) GDPR.

You may withdraw your consent or object to direct marketing at any time, including by using the unsubscribe link in each message. We will then stop using your personal data for that purpose. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Please see point 6 below for further information about your rights.

If you contact us to participate in a recruitment process, complete our recruitment form or send us your resume

We process your personal data to conduct the recruitment process.

We may use artificial intelligence tools to support our HR specialists, including to extract and organise information from application materials. These tools support the recruitment process and do not make recruitment decisions. All recruitment decisions involve meaningful human review.

Additionally, if you give us your consent, we process your personal data for the purpose of contacting you for future recruitment.

The legal basis for processing your personal data as part of the ongoing recruitment process is Article 6(1)(b) of the GDPR, which allows for the processing of personal data when it is necessary to conclude a contract with the data subject. The scope of the processed data is based on the provisions of the law, which indicates the basic data that an employer may obtain during the recruitment process. In the situation where you provide other data not covered by the law, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR, which allows for the processing of personal data on the basis of the data subject’s consent. If you express a wish to participate in future recruitments, the legal basis for processing personal data is also your consent.

4. WHO WE SHARE YOUR PERSONAL DATA WITH?

In order to properly provide our services, we use the services of certain third parties. Therefore, your personal data provided may be transferred to:

entity providing server and hosting services,
entity providing accounting services,
entity providing analytical, email, marketing services, as well as managing the YouTube platform – Google Ireland Ltd. and Google LLC based in Mountain View, California,
entity managing the Facebook and Instagram platforms, as well as Facebook Pixel analytics plug-ins – Meta Platforms Ireland Limited and Meta Platforms, Inc. based in Menlo Park, California, USA,
entity managing LinkedIn platform, as well as LinkedIn Ads analytics plug-ins – LinkedIn Ireland Unlimited Company and LinkedIn Corp. based in San Francisco, California, USA,
entity managing TikTok platform - TikTok Technology Limited based in Ireland,
entity managing X platform – X Internet Unlimited Company based in Ireland,
entity responsible for our AI bot - eternity.ac based in Dover, Delaware, USA,
entity providing automated data-extraction services – OpenAI Ireland Ltd,
entity responsible for the operation of the software used to manage the process of establishing customer relationships and selling services – Salesforce, Inc. with its registered office in San Francisco, California, USA,
entities responsible for the operation of job portals where we post our employment offers,
other subcontractors and service providers, especially in the field of IT, law firms and legal and accounting consultants, recruiters;
Some platform providers process personal data as independent controllers under their own privacy notices. For certain page-insights or advertising activities, we and the relevant platform may act as joint controllers; the platform's notice explains the relevant arrangement and how you may exercise your rights.

Some recipients or their subprocessors may process personal data outside the European Economic Area. Where the destination or recipient is covered by a current European Commission adequacy decision, we rely on Article 45 GDPR, including the EU-US Data Privacy Framework only where the relevant US recipient is currently certified for the data concerned. Otherwise, we use an appropriate safeguard under Article 46 GDPR, normally the European Commission's Standard Contractual Clauses, together with supplementary measures where required. You may contact us for information about the applicable transfer mechanism and to obtain a copy of, or access to, the relevant safeguards.

5. HOW LONG WE KEEP YOUR PERSONAL DATA?

We try to keep your personal data for as long as we actually need it - after that time we delete it:

If you visit our website, cookies and similar technologies are retained for the periods shown in the cookie settings, while server and security logs are retained only for as long as necessary for their purpose and in any event for no more than 14 months, unless a longer period is required to investigate an incident or comply with law.
If you have established cooperation with us, bought our services and you are our client, service provider, co-worker or representative of our client or service provider – we process your personal data for 3 years after ending our business cooperation. The data processed in order to fulfil accounting and tax obligations will be processed for 6 years after the end of tax year in which the tax liability payment term has expired,
If you contacted us by e-mail, letter, phone or provide your personal data within our website – we process your personal data for as long as our contact is ongoing and for next 3 months,
If you use our AI bot - we process your personal data for 1 month from the moment of using the bot,
If you subscribed to our newsletter or our marketing mailing list – we process your personal data for this purpose until you unsubscribe from our mailing list or until we finish conducting our promotional activities depending on which of these events occurs first,
If you follow us within our social media platforms, react to our posts or contact us via our social media profiles on Facebook, Instagram, LinkedIn, TikTok, YouTube or X – we process your personal data for the duration of the interaction between you and our profile and until one year after the interaction ends,
If you are participating in the recruitment process, in the case of processing as part of the ongoing recruitment – we process your personal data until the recruitment process is completed. However, if you have agreed to participate in future recruitment – we process your personal data for a period of up to 1 year from the moment of submission of recruitment documents.

6. WHAT ARE YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA?

In relation to the processing of your personal data, you have the following rights:

Right of access	You can request confirmation from us as to whether or not your personal data are being processed and obtain information about which data are being processed and what is the purpose of the processing.
Right to rectification	You can request immediate rectification of inaccurate personal data and completion of incomplete personal data.
Right to erasure	You can request immediate erasure of personal data, when one of the following grounds applies: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you have withdrawn the consent to processing and there is no other legal ground for the processing; you have objected to the processing and there are no overriding legitimate grounds for the processing; the personal data have been unlawfully processed; the personal data have to be erased for compliance with a legal obligation. Abovementioned shall not apply to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing; for the establishment, exercise or defence of legal claims.
Right to restriction of processing	You can request restriction of processing if: you contest the accuracy of the personal data – for a period enabling us to verify the accuracy of the personal data; the processing is unlawful you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; you have objected to processing pending the verification whether our legitimate grounds override yours.
Right to data portability	You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller if the processing is based on consent and the processing is carried out by automated means.
Right to lodge a complaint	You have the right to lodge a complaint regarding the unlawful processing of your personal data with the supervisory authority — the Data Protection Commission (DPC) of Ireland. Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, or with another competent supervisory authority, in particular in the EEA country of your habitual residence, place of work or the alleged infringement
Right to object	Where processing is based on legitimate interests, you may object on grounds relating to your particular situation; we will stop unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims. You may object at any time to processing for direct marketing, including related profiling, and we will stop that processing.
Right to withdraw the consent	If personal data is processed based on the consent, you have the right to withdraw your consent at any time as easily as you gave it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. This also applies where consent is required under the Irish ePrivacy Regulations, including for electronic marketing or non-essential cookies.

7. WHAT ELSE YOU SHOULD KNOW ABOUT?

We will not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you within the meaning of Article 22 GDPR. AI tools may support certain activities, but relevant decisions are subject to meaningful human review. Where required by applicable law, we will inform you when you are interacting directly with an AI system, unless this is obvious to a reasonably well-informed, observant and circumspect person.

Providing personal data is voluntary, however:

in the case of data processing in order to conclude or perform of the contract with us failure to provide data may result in our inability to provide services,
in the case of participation in recruitment, failure to provide the personal data may result in the inability to consider the candidate as part of the recruitment process.

COOKIE FILES

Cookies are small files that enable or facilitate the use of certain website functions. They may be saved on your device directly by us or by third parties with whom we cooperate. As part of the use of cookies, we may process your personal data, in particular such as your IP address, the history of your use of the website, or information about the device or software you are using. Cookies used by us are related to the operation of our website, they are used to control traffic on our website, to compile statistics on the use of the website by its users, to undertake marketing activities, to prevent errors and technical faults, to ensure the security of the website or to prevent abuse and infringement of the law.

The following cookies can be distinguished:

Session cookies: these are stored on your device for the time that you use our website (they are deleted when you close your browser). Session cookies enable the correct use of our website. Blocking them may result in errors or prevent you from using our website.

Persistent cookies: these are stored on your device until you delete them or until they expire.

In addition, cookies are divided into the following categories:

Technical cookies - these cookies are necessary for the proper display and operation of the website. These cookies can also detect malfunctions of the site and help to fix errors, as well as allow to verify the extent of the user's consents to other cookies. Blocking them may cause the site to malfunction.
Analytical and statistical cookies - these cookies enable statistics on how users use our website. Among other things, they allow us to verify website traffic, count the number of hits, measure how the website is used, and analyze what devices and browsers users are using. We use tools such as Google Analytics to conduct analytics activities. These tools may require the use of cookies.
Marketing cookies - cookies responsible for carrying out advertising and marketing activities, in particular related to the use of Google Ads services. They also include remarketing activities, i.e. encouraging users to revisit our website. Consenting to the use of these cookies will allow us to target ads to you, based on your previous activities on our website.
Social cookies - these are cookies associated with the social networks we use, such as Facebook, Instagram, LinkedIn, TikTok, YouTube or X. Accepting them will allow us to associate your visit to the site with our social media profiles.

You can read detailed information about what cookies may be stored on your device under the cookie information banner displayed on the website. It contains information about specific cookies, their purpose and how long they will be stored on your device.

Under Regulation 5 of the Irish ePrivacy Regulations, we obtain consent before storing information on, or accessing information from, your device unless the technology is used solely to transmit a communication or is strictly necessary to provide a service you explicitly request. We do not set non-essential analytics, marketing or social-media technologies before consent. You may reject them or change or withdraw consent at any time through the cookie settings; refusal will not prevent access to core website functions, although an optional feature that depends on a particular technology may be unavailable.

It is possible to restrict or disable cookies within your device, using your browser settings. Web browsers allow you to disable all cookies or a portion of them (such as those from third parties). If you disable cookies in part, cookies generated by our website may be stored on your device, enabling the website to function properly. However, if the use of cookies is restricted, the use of our particular services provided may be limited and in some cases may not be possible.

CHANGES TO THE PRIVACY POLICY

We reserve the right to modify or amend this Privacy Policy at its own discretion from time to time. We will publish the revised version and update the date below. Your continued use of our website constitutes your acceptance of those changes, except where applicable law requires additional notice or consent. Where a change materially affects data subjects, we will provide an appropriate additional notice and, where consent is required, obtain it before carrying out the relevant processing.

This version was last updated on 21 September 2026 and historic versions can be obtained by contacting us.