We use cookies
We use technically necessary cookies as well as cookies for payment processing (Stripe) and optional push notifications (OneSignal). More info in our Privacy Policy.
Bee-ID · Version of 2 October 2026
This policy describes which data we process when you use Bee-ID — and equally, what happens when you scan someone else's code as a finder. It is deliberately specific: every retention period and every provider named here matches what our system actually does.
The controller responsible for processing your data is:
Bee-ID
Inhaber: Nico Rößler
Städtelner Str. 146, 04416 Markkleeberg
E-Mail: info@bee-id.com
We process personal data only to the extent required for the purpose at hand. At its core, Bee-ID is a channel between two people who are not meant to know each other: a finder does not learn who owns the item, and you do not learn who the finder is — unless one side chooses to share their details.
Wherever processing is optional, the form says so and the field can be skipped without making the service unusable.
When you open our pages, the server automatically records technical data (IP address, browser type, time, page requested). This is necessary to operate the service and to fend off attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and stability).
Hosting is provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, under a data processing agreement pursuant to Art. 28 GDPR.
Registering automatically starts your free 14-day HIVE-PASS trial.
Data processed: name and email address. We collect a postal address only if you order something that has to be shipped or invoiced.
No payment data: no payment details are collected during the trial.
Purpose: providing your account and its protective features. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
After 14 days nothing turns into a paid subscription by itself. If you want to keep the protection, you book it actively in your account. Only then is payment data processed.
Without a booking your account becomes dormant and the protective features switch off. We keep your settings for a further 3 months so you can reactivate at any time. After that the account is permanently deactivated and the personal data is deleted or anonymised, unless a statutory retention obligation applies — in particular the 10-year retention of invoices under German commercial and tax law.
This section describes what Bee-ID actually exists for, and it concerns two people: you as the owner and the finder.
When someone scans your code, they see none of your personal data — no name, no address, no phone number. They land directly on a finder form. To measure how often codes are scanned, we store the time, the language and a non-reversible checksum of the IP address. The IP address itself is not stored.
In the finder form, the finder provides the following. Only the item, the place it was found and a short message are mandatory (the message is pre-filled) — everything else is optional.
Everything the finder enters is shown to you, except their contact details. That is the purpose of the report — and it is stated above the form where the finder can see it. Legal basis for the report itself: Art. 6(1)(f) GDPR (both sides have a legitimate interest in the item being returned); for the optional additions: Art. 6(1)(a) GDPR.
If the finder chooses the chat, a conversation thread opens between you — without either side learning the other's contact details.
On the encryption, precisely: message content is encrypted in your browser with AES-256-GCM and reaches our server in that form only. The key is derived from your personal access link and is never transmitted to us. In normal operation, therefore, nobody on our team can read a conversation.
We deliberately do not call this end-to-end encryption: anyone who gained access to our database would find key material there alongside the encrypted messages and could make them readable. The protection is against interception in transit and against reading in normal operation — not against a full database breach. We consider that distinction important enough to state here, rather than making a stronger promise than the technology supports.
With Bee-Buddy you can name up to two people who are notified if you cannot be reached. The feature is part of your access — it is available to you while your trial is running or while you hold a HIVE-PASS.
How someone becomes a trusted person: you enter the email address or mobile number stored in that person's Bee-ID account. We then write to them by email, naming you. Only existing Bee-ID accounts can be asked — we do not contact people who never engaged us. The person must sign in and agree explicitly; only then are they listed. You can ask up to five people at once, but only the first two who agree get a place.
What is shared: if a finder triggers the emergency route, every trusted person on file is notified — by email and push, plus SMS if a mobile number is stored in their account. On the linked page they see your name, the location the finder described, and can write to the finder directly. Whoever opens the page first takes over the contact; the other one then only sees that someone is already looking after it. This is a disclosure of your data to a third person — it happens only because you deliberately chose that person. Legal basis: Art. 6(1)(a) GDPR.
The trusted person's rights: they can see in their own account, at any time, who they are listed for, and can end the role there with one click — without having to ask you. Their mobile number comes from their own account; we do not store it separately for this purpose.
Abuse protection: the emergency route is capped by volume (per code, per number, per day). If a trusted person is alerted repeatedly and nobody responds, the route switches itself off.
We do not sell data and do not pass it on for advertising. To run the service, however, we use providers who process data on our behalf and on our instructions (Art. 28 GDPR):
Beyond this we disclose data only where we are legally obliged to, or where it is necessary to enforce our rights.
We delete automatically, not on request. A daily job clears out:
We use technically necessary cookies for login state, sessions and protection against form abuse. We do not set advertising cookies.
Cookie beeid_last_ticket: stores your chat access locally on your device for 3 days so you can find your way back quickly.
Optional services — currently push notifications — are loaded only after you agree in the consent banner. You can change your choice there at any time.
Legal bases: § 25(2) TDDDG for technically necessary storage, § 25(1) TDDDG together with Art. 6(1)(a) GDPR for everything else.
You have the right to:
These rights apply to finders as well. Anyone who has submitted a finding report and wants to withdraw it can write to the address below; left alone, the report is deleted after 30 days in any case.
Contact for all data protection matters: privacypolicy@bee-id.com
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Saxon Data Protection Commissioner, Devrientstraße 5, 01067 Dresden, Germany.