Privacy Policy

BIBEX

Effective date: October 28, 2026

1. Who We Are

BIBEX is an online community offering Bible-related educational programs, virtual tours, live events, and digital content.

The controller responsible for processing personal data is:

Mgr. et Mgr. Viera Boumová
Registered office: Staňkova 373/16, 602 00 Brno, Czech Republic
Business ID (IČO): 75788837
Website: https://bibex.org
Email: vierka@bibex.org

In this Privacy Policy, “BIBEX,” “we,” and “us” refer to the operator identified above.

We process personal data in accordance with applicable data protection laws, including the European Union’s General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

Depending on how you interact with BIBEX, we may process the following information:

Account and membership information

  • Your email address and account username.

  • Your telephone number associated with your WhatsApp account, collected as a required field during registration for membership and event notifications.

  • Your securely stored password hash.

  • Your membership plan and subscription status.

  • Your account registration and membership dates.

  • Information necessary to manage your membership and access permissions.

Payment and transaction information

  • Payment and subscription identifiers.

  • Payment amounts, currencies, dates, and transaction status.

  • Billing information provided during checkout.

  • Records required for accounting and tax purposes.

Payments are processed through an external payment provider. BIBEX does not need to receive or store your complete payment card details.

Event participation information

  • Your display name when joining an online event.

  • Information about participation where necessary for event administration.

  • Messages or questions you voluntarily submit.

  • Your voice or image if you choose to speak or appear on camera during a recorded part of an event.

You may use a nickname or the display name already configured in your Zoom account. You are not required by BIBEX to display your legal name during an event.

Communications

  • Information you provide when contacting us.

  • Correspondence concerning your membership, payments, technical support, or participation in BIBEX activities.

Technical information

Our website and service providers may process technical information such as IP addresses, browser and device information, login activity, and security-related records.

Further information about cookies and similar technologies is provided in Section 9.

3. Why We Process Personal Data

We process personal data for the following purposes and legal bases:

Purpose Legal basis under GDPR
Creating and managing membership accounts Performance of a contract or steps requested before entering into a contract (Article 6(1)(b))
Processing subscriptions and providing paid access Performance of a contract (Article 6(1)(b))
Sending essential membership and event information Performance of a contract (Article 6(1)(b))
Maintaining accounting and tax records Compliance with legal obligations (Article 6(1)(c))
Protecting accounts, preventing misuse, and maintaining website security Legitimate interests (Article 6(1)(f))
Responding to general inquiries Legitimate interests or steps requested before entering into a contract, depending on the inquiry (Article 6(1)(f) or (b))
Using nonessential cookies, where applicable Consent (Article 6(1)(a))

Where processing is based on legitimate interests, we balance those interests against the rights and freedoms of the individuals concerned.

We do not use membership information to send unrelated marketing newsletters.

4. Membership Accounts

Members create accounts on bibex.org using an email address and password.

Account information is used to authenticate users, administer subscriptions, and control access to members-only content.

Passwords must be handled securely by the website’s authentication system and must not be stored in readable form.

Members are responsible for keeping their login credentials confidential.

If you wish to correct your account information or request account deletion, please contact vierka@bibex.org.

Account deletion may not result in the immediate deletion of records that we are legally required to retain.

5. Payments and Subscriptions

BIBEX uses Stripe to process membership payments and recurring subscriptions.

Stripe may process personal and payment information required to authorize transactions, prevent fraud, administer recurring payments, and comply with legal obligations.

BIBEX receives information necessary to identify successful payments, manage subscriptions, provide membership access, and maintain appropriate financial records.

Stripe may process personal data as an independent controller or as a processor, depending on the specific processing activity.

For more information, please consult Stripe’s privacy information:

https://stripe.com/privacy

6. Online Events and Zoom

BIBEX uses Zoom or other online meeting platforms to deliver live events.

When participating in a Zoom event, your display name may be visible to other participants.

You may participate using a nickname or your existing Zoom display name.

Depending on your participation and the platform’s settings, other participants may also see your video, hear your voice, or view messages you choose to share.

Selected events may be recorded when permitted by the relevant speakers and rights holders.

Participants will be informed when recording is taking place. Question-and-answer sessions and personal discussions are generally not included in recordings made available to members.

Where reasonably possible, BIBEX will take steps to avoid unnecessarily including identifiable participant information in published recordings.

Zoom processes personal data according to its applicable privacy terms:

https://explore.zoom.us/en/privacy/

7. Service Providers and Recipients

We use external providers to operate BIBEX and deliver its services.

These may include:

Websupport – website hosting and associated technical infrastructure.

WordPress and relevant plugins – website management, member registration, authentication, and access control.

Stripe – payment processing and subscription administration.

Zoom – online meetings and virtual events.

Email service providers – delivery of account notifications, payment-related messages, and essential program communications.

 WhatsApp – delivery of membership and event notifications to the telephone number provided during registration. 

WhatsApp’s privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

The exact personal data processed by each provider depends on the services and features used.

We share personal data only where reasonably necessary for the stated purposes or where required by law.

We do not sell members’ personal data.

8. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA), including in the United States.

Where GDPR requires safeguards for international transfers, we rely on an applicable legal transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, depending on the provider and processing activity.

Information about relevant safeguards may be requested by contacting vierka@bibex.org.

9. Cookies and Similar Technologies

BIBEX may use cookies and similar technologies to operate its website.

These may include cookies necessary for:

  • User authentication and maintaining login sessions.

  • Website security and protection against misuse.

  • Remembering essential website preferences.

  • Supporting the operation of membership and payment functions.

Additional cookies or similar technologies may be used by third-party services, depending on the features enabled on the website.

Where consent is legally required, nonessential cookies will be used only after the appropriate consent has been obtained.

Visitors will be able to review or change applicable cookie preferences through the website’s cookie settings, once configured.

10. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, subject to applicable legal obligations.

In particular:

  • Membership account data: generally retained while the account remains active and subsequently for a limited period where necessary for account closure, disputes, or legal claims.

  • Payment and accounting records: retained for the periods required by applicable Czech accounting and tax laws.

  • Support correspondence: retained for as long as reasonably necessary to resolve the matter and protect legitimate interests.

  • Security and technical logs: retained for a limited period appropriate to the relevant security purpose.

  • Event recordings: retained according to the event’s recording arrangements, permissions, and applicable retention requirements.

Recordings made available to members are generally accessible for approximately three days after the relevant live event, where permitted. This availability period does not necessarily correspond to the period for which an original recording or technical backup may be retained.

More specific retention periods will be established in accordance with the final technical configuration and applicable legal requirements.

11. Your Data Protection Rights

Subject to the conditions set out in applicable data protection law, you have the right to:

  • Request access to your personal data.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your personal data.

  • Request restriction of processing.

  • Object to processing based on legitimate interests.

  • Request data portability where applicable.

  • Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing.

To exercise these rights, contact:

vierka@bibex.org

You also have the right to lodge a complaint with a competent supervisory authority.

In the Czech Republic, the supervisory authority is:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Website: https://uoou.gov.cz

12. Security

BIBEX takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, and disclosure.

These measures may include secure connections, access restrictions, authentication controls, software updates, and appropriate arrangements with service providers.

No online system can guarantee absolute security. If you believe your BIBEX account has been compromised, please contact us promptly.

13. Children and Minors

BIBEX is primarily intended for adults.

Children and minors may participate in appropriate activities together with a parent or responsible adult, subject to the conditions of the relevant event or service.

We do not intentionally collect unnecessary personal information about children.

Where consent from a parent or legal guardian is required by applicable law, such consent must be obtained.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements, or data processing practices.

The current version will be published on bibex.org.

Where required by law, we will inform affected individuals of material changes.

15. Contact

For questions about this Privacy Policy or the processing of personal data, please contact:

Mgr. et Mgr. Viera Boumová
BIBEX
Email: vierka@bibex.org
Website: https://bibex.org