eBbizz
Legal
This Privacy Policy explains how eBbizz collects, uses, protects, and manages users’ personal data.
Last updated: 14 July 2026
This Privacy Policy explains how eBbizz collects, uses, stores, protects and otherwise processes personal data in connection with the operation of the eBbizz B2B Marketplace.
This Policy applies to all services provided through:
This Privacy Policy has been specifically drafted for the operation of eBbizz as a Business-to-Business Marketplace and complies with:
For the purposes of the GDPR, the operator of eBbizz acts as the Data Controller for personal data processed in connection with the operation of the Platform.
Depending on the nature of a specific service, eBbizz may also act as:
where this is established by applicable contractual arrangements and relevant legislation.
The official contact details of the Data Controller are published on the official eBbizz website and within the Platform.
This Privacy Policy applies to personal data relating to:
This Policy does not apply to third-party websites or external services that may be linked from the Platform.
Depending on the services used, eBbizz may collect and process the following categories of personal data.
Personal data is processed only where a lawful basis exists under Article 6 GDPR.
Depending on the circumstances, processing may be based upon:
eBbizz applies the principles of lawfulness, fairness, transparency and data minimisation throughout its processing activities.
Personal data may be processed for purposes including:
Suppliers may publish business information through Company Profiles.
Such information may include:
Supplier Profiles become publicly visible only when the Supplier has obtained:
approved = true
Only the information intended for public presentation is made publicly available.
Processing of Orders requires the handling of business and technical information necessary to facilitate transactions between Customers and Suppliers.
The Reorder functionality may retain historical information including:
Historical information is retained solely to facilitate future Orders.
Customers remain responsible for verifying:
before confirming each new Order.
The retention of historical information does not imply that previous commercial conditions remain valid.
eBbizz uses cookies and similar technologies to ensure the proper operation of the Platform, improve user experience, enhance security and analyse Platform performance.
Cookies used by the Platform may include:
Where required by applicable law, non-essential cookies are placed only after obtaining the User's valid consent.
Users may manage, modify or withdraw their cookie preferences at any time through the Platform's Cookie Management Tool or through their browser settings.
The Platform may use Local Storage, Session Storage and similar browser technologies to store technical information required for the operation of Platform services.
Such information may include:
Local Storage is used solely for legitimate operational purposes and is not used for unrelated processing without appropriate legal basis.
eBbizz may process analytical information to better understand how the Platform is used and to improve its services.
Analytics processing may include:
Where feasible, analytics data is aggregated, pseudonymised or otherwise processed in a manner designed to reduce the identification of individual users.
Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy or as otherwise required or permitted by applicable law.
Retention periods are determined by considering factors including:
When personal data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with applicable legal requirements and internal retention policies.
eBbizz implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
Security measures may include:
Although eBbizz follows recognised security practices, no method of electronic transmission or storage can guarantee absolute security.
Access to personal data may be provided, where necessary, to:
Recipients receive access only to the extent necessary for the performance of their duties and are subject to confidentiality and data protection obligations.
eBbizz may engage carefully selected third-party service providers acting as Data Processors on its behalf.
Processors may provide services including:
Where required under Article 28 GDPR, eBbizz enters into appropriate data processing agreements with its Processors.
Certain Processors engaged by eBbizz may themselves engage approved Subprocessors to assist in providing their services.
Where Subprocessors are used, eBbizz takes reasonable steps to ensure that they are contractually required to maintain data protection standards substantially equivalent to those imposed upon the primary Processor.
Where personal data is transferred outside the European Economic Area (EEA), eBbizz implements appropriate safeguards in accordance with Chapter V of the GDPR.
Depending upon the circumstances, such safeguards may include:
International transfers are carried out only where a valid legal basis exists.
Subject to applicable law, individuals whose personal data is processed by eBbizz may exercise the following rights:
Requests submitted by data subjects are handled in accordance with the GDPR and applicable Cyprus data protection legislation.
Where necessary, eBbizz may request reasonable evidence of identity before fulfilling a request in order to protect personal data against unauthorised disclosure.
Data subjects have the right to obtain confirmation as to whether eBbizz processes personal data relating to them.
Where personal data is processed, the data subject may request access to information including:
Before responding to an access request, eBbizz may request reasonable proof of identity to protect personal data against unauthorised disclosure.
Data subjects may request the correction of inaccurate or incomplete personal data.
Where technically possible, Users may also update certain personal information directly through their Account settings.
eBbizz will take reasonable steps to ensure that inaccurate information is corrected without undue delay.
Data subjects may request deletion of their personal data where the conditions of Article 17 GDPR are satisfied.
This right is not absolute.
eBbizz may retain personal data where retention is required or permitted for purposes including:
Where the requirements of Article 18 GDPR are met, data subjects may request restriction of processing.
During the restriction period, personal data will only be processed where legally permitted, including for compliance with legal obligations or the protection of legal claims.
Where processing is based upon legitimate interests, data subjects may object to such processing on grounds relating to their particular situation.
eBbizz will carefully assess each objection and will cease processing unless compelling legitimate grounds exist that override the interests, rights and freedoms of the data subject or where processing remains necessary for the establishment, exercise or defence of legal claims.
Where applicable under Article 20 GDPR, data subjects may request receipt of their personal data in a structured, commonly used and machine-readable format.
Where technically feasible and legally permissible, data subjects may also request direct transmission of such data to another controller.
eBbizz does not make decisions producing legal or similarly significant effects solely by automated means, including profiling, except where expressly permitted by applicable law and accompanied by appropriate safeguards.
Analytical tools used by the Platform are intended to improve Platform performance, usability, security and service quality and are not used as the sole basis for decisions materially affecting Users.
If a data subject believes that personal data has been processed in violation of applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.
This right exists without prejudice to any other administrative or judicial remedies available under applicable law.
Before submitting a complaint to a supervisory authority, eBbizz encourages Users to contact its privacy team so that concerns may be addressed promptly and efficiently whenever possible.
The eBbizz Platform is designed exclusively for business use.
Its services are not intended for children or minors.
eBbizz does not knowingly collect personal data relating to children.
If eBbizz becomes aware that personal data relating to a child has been collected contrary to applicable law, appropriate steps will be taken to delete such information without undue delay.
eBbizz may amend this Privacy Policy from time to time to reflect:
The most recent version of this Privacy Policy will always be published on the Platform together with its effective date.
Where legally required, Users will be informed of material changes through appropriate electronic communications or Platform notifications.
Questions concerning this Privacy Policy, personal data processing or the exercise of data protection rights may be submitted using the official contact details published on the eBbizz website or within the Platform.
eBbizz will respond to requests within the timeframes required by the GDPR and applicable legislation.
Where appropriate, additional information may be requested in order to verify the identity of the requesting individual before disclosing personal data.
This Privacy Policy forms an integral part of the legal framework governing the use of the eBbizz Platform and should be read together with the eBbizz Terms of Use, Cookie Policy and any additional legal notices published by eBbizz.
If any provision of this Privacy Policy is found to be invalid, unlawful or unenforceable, the remaining provisions shall remain in full force and effect.
eBbizz is committed to processing personal data in accordance with the core principles established by the General Data Protection Regulation, including:
Privacy and data protection are incorporated into the design, development and operation of the Platform through the principles of Privacy by Design and Privacy by Default, taking into account the nature, scope, context and purposes of processing, together with the risks to the rights and freedoms of natural persons.
eBbizz continuously reviews and improves its privacy practices to maintain compliance with applicable European Union and Republic of Cyprus legislation while supporting the secure operation of its Business-to-Business Marketplace.
For any question regarding personal data protection, you can contact us.
Contact