Legal
Privacy notice
What BE Associates collects through this website and the emails it sends, why, who sees it, how long we keep it, and your rights.
Version 1, last updated 24 October 2026.
Who we are
BE Associates is the trading name of BALDEGGER EJUPI ASSOCIATES SH.P.K., a company registered in Kosovo, at Rruga Vicianum, Prishtinë 10000, Kosovo. We decide how the information in this notice is used, so we are its controller. We handle it under Kosovo’s Law No. 06/L-082 on the Protection of Personal Data and, for people in the United Kingdom, the UK GDPR.
For anything about your information, email contact@be-associates.com or write to us at the address above.
This notice covers be-associates.com, its forms and the emails our systems send. It does not cover other websites we link to.
What we collect and why
We collect what you type into a form or send us, and the little our servers need to run safely. Nothing else.
Enquiries
- What we collect
Your name and email, and whatever else you give us: your company and role, the capability and timeline you choose, what you need, and the make-up of any pod you configured.
- Why
To reply to your enquiry and, if you want one, arrange a conversation. We email you an acknowledgement, and your enquiry goes to our team’s mailbox.
- Legal basis
Our legitimate interest in answering requests for our services.
- How long
Twenty-four months from your enquiry. Then your name, email, company, role and message are removed; the figures of any quote stay, with nothing that identifies you. The copies in our team’s mailboxes are deleted within twenty-four months too.
Your cost model
- What we collect
Your name, work email and company, and the roles and seats you chose.
- Why
To email you the full cost model and arrange a conversation. Not for marketing lists.
- Legal basis
Our legitimate interest in answering requests for our services.
- How long
As for enquiries: twenty-four months, then your details are removed.
Job applications
- What we collect
Your name, email and the role, your CV (a PDF), and, if you give them, your phone number, a LinkedIn or portfolio link and a note. We also record the consent sentence you agreed to and the version of this notice you saw.
- Why
To consider you for the role you chose, or for any suitable role if you applied generally, and to contact you about it.
- Legal basis
Your consent, which you give with the box on the form. You can withdraw it at any time, and we then delete your application and CV.
- How long
Twelve months from your application, then the application and your CV are deleted; ask us and we delete them sooner. On a day we receive more applications than we can handle, later ones are held for a person to look at, and deleted after 30 days unless we take them forward. CVs emailed to careers@be-associates.com are deleted from that mailbox within twelve months.
Please leave out of your CV anything about your health, religion, ethnicity, political views or other sensitive matters. We do not need it.
Keeping the site safe
- What we collect
Your IP address, while your request is handled. For applications only, two scrambled keys made from your address and your network, which cannot be turned back into either. Our servers’ logs record each request (the page and the result) without your IP address.
- Why
To limit how often a form can be sent from one connection, to stop abuse, and to find faults.
- Legal basis
Our legitimate interest in keeping the site and our team safe from abuse.
- How long
Your IP address is held in memory only, never stored. The scrambled keys are deleted within about a day, the logs after 35 days.
Page visit counts
- What we collect
How many times each page is viewed each day, and nothing else: no cookie, no identifier, no IP address. We cannot tell who viewed a page, or whether two views were by the same person. Browsers that send Global Privacy Control or Do Not Track are not counted.
- Why
To know which pages people read.
- Legal basis
These counts are not information about you.
- How long
400 days.
Error reports
- What we collect
When our systems hit an error, a technical report of it. Reports carry no form contents, no cookies and no IP addresses.
- Why
To find and fix faults.
- Legal basis
Our legitimate interest in a service that works.
- How long
30 days.
Who sees your information
Only the people at BE Associates who need it: enquiries are read by the team that answers them, applications only by our recruiting team and the business’s owners. Every download of a CV is recorded.
And the companies that run our services for us, each only for that purpose:
- Hostinger, which runs our servers, in Germany.
- Backblaze, which stores CVs and our backups, in the EU.
- Resend, which sends our emails, from the EU (Ireland).
- Google, whose Google Workspace is our team’s email: enquiries and emailed CVs arrive there. Google keeps email in its data centres, which can be outside the EU.
- Sentry, which receives our error reports, in the EU (Germany).
We do not sell your information or use it for advertising, and we give it to no one else unless the law requires it.
Where it is kept
Our servers and storage are in the European Union, and our team reads your information in Prishtina, Kosovo, where we are based.
Google and Resend are US companies. Where they handle your information outside Europe, they do so under the European Commission’s standard contractual clauses, which are part of their data processing terms with us.
How long we keep it
- Enquiries and cost-model requests: twenty-four months, then your details are removed.
- Applications and CVs: twelve months, then deleted; held applications, 30 days.
- Page visit counts: 400 days.
- Server logs: 35 days.
- Error reports: 30 days.
Information we delete can stay in our backups for up to 35 days, and in our email provider’s records of the emails we sent for up to 30 days, until those expire.
Your rights
You can ask us:
- for a copy of the information we hold about you;
- to correct it, or to delete it;
- to restrict how we use it, or object to our using it on the basis of our legitimate interest;
- for the information you gave us in a form you can take elsewhere.
Where we rely on your consent, you can withdraw it at any time; that does not undo what we did with it before.
To ask, email contact@be-associates.com. We reply within one month, and there is no charge.
If you are unhappy with how we handle your information, you can complain to Kosovo’s Information and Privacy Agency or, if you are in the United Kingdom, the Information Commissioner’s Office.
How we protect it
Everything travels over encrypted connections. CVs are kept in private storage in the EU, never at a public link: our recruiting team opens them through our own system, which records each download. Each member of staff has only the access their role needs.
Automated decisions
We make no decision about you by automated means alone: no application is scored or turned down by a machine. To stop abuse, our forms refuse to be sent too often from one connection. If that happens to you, email us instead.
Changes to this notice
When what we do changes, we update this notice and its version number. The version you saw is recorded with your application.