Privacy policy and personal data protection

PRIVACY POLICY AND PERSONAL DATA PROTECTION

Last Updated: 28 June 2026

  1. Introduction

Welcome to Benefit Pass.

Protecting the privacy and security of our users' personal data is one of the fundamental priorities of Key4you j.d.o.o. (hereinafter referred to as "Benefit Pass," "we," "us," or the "Data Controller").

This Privacy Policy explains what personal data we collect, the purposes for which we process it, the legal basis for processing, how long we retain your data, and the rights you have as a data subject.

Benefit Pass processes personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
  • the Croatian Act on the Implementation of the General Data Protection Regulation; and
  • other applicable laws and regulations of the European Union and the Republic of Croatia.
  1. Data Controller

The Data Controller responsible for processing your personal data is:

Key4you j.d.o.o.

Address: Jurjenići 109 B, Kastav, Croatia

VAT / Personal Identification Number (OIB): 62309190286

Email: info@benefit-cards.com

Website: www.benefit-pass.com

  1. Personal Data We Collect

Depending on how you use the Benefit Pass platform, we may collect the following personal data:

  • first and last name;
  • email address;
  • telephone number (if voluntarily provided);
  • country of residence;
  • billing information required for issuing invoices;
  • information relating to the purchased Benefit Pass;
  • activation date;
  • information regarding the use of benefits;
  • IP address;
  • device and browser information;
  • information collected through cookies; and
  • communications with Customer Support.

We do not intentionally collect special categories of personal data unless required by law or voluntarily provided by the user.

  1. Purposes of Processing

We process your personal data only where there is a lawful basis for doing so.

This includes:

  • processing Benefit Pass purchases;
  • activating digital products;
  • issuing invoices;
  • enabling users to redeem partner benefits;
  • providing customer support;
  • handling complaints;
  • preventing fraud and misuse;
  • maintaining system security;
  • complying with legal obligations;
  • improving our services; and
  • sending marketing communications where the user has provided prior consent.
  1. Legal Basis for Processing

Personal data are processed on one or more of the following legal grounds:

  • performance of a contract;
  • compliance with legal obligations;
  • the legitimate interests of Benefit Pass; and
  • the user's consent where required.

Users may withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

  1. Sharing of Personal Data

Benefit Pass does not sell or disclose personal data to third parties.

Personal data may be shared only where necessary for:

  • the performance of contractual obligations;
  • payment processing;
  • invoice issuance;
  • IT service provision;
  • system maintenance;
  • compliance with legal obligations; or
  • requests from competent public authorities.

All data processors engaged by Benefit Pass are contractually required to implement appropriate measures to protect personal data.

 

  1. International Data Transfers

Where personal data are transferred outside the European Economic Area (EEA), Benefit Pass will ensure that appropriate safeguards are implemented in accordance with the GDPR.

  1. Data Retention

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected or for the period required by applicable law.

Once the applicable retention period expires, the data will be securely deleted or anonymised.

  1. Data Security

Benefit Pass implements appropriate technical and organisational measures to protect personal data.

These measures include:

  • access controls;
  • encryption where appropriate;
  • protection of information systems;
  • secure data backups;
  • monitoring of system access;
  • regular updates of security measures; and
  • employee training and awareness.

Although we take all reasonable steps to protect your personal data, no electronic storage or transmission system can guarantee absolute security.

  1. Your Rights

Under the GDPR, you have the right to:

  • access your personal data;
  • rectify inaccurate or incomplete data;
  • request the deletion of your personal data ("right to be forgotten");
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw your consent at any time; and
  • lodge a complaint with the competent supervisory authority.

To exercise any of these rights, please contact Benefit Pass using the official email address provided below.

  1. Cookies

Benefit Pass uses cookies for the following purposes:

  • ensuring the proper functioning of the website;
  • improving user experience;
  • website analytics;
  • maintaining system security; and
  • marketing activities, where appropriate consent has been obtained.

Users may manage their cookie preferences at any time through their web browser settings or the cookie consent management tool available on our website.

  1. Marketing Communications

Users who have provided their consent may receive information regarding:

  • new partners;
  • exclusive benefits;
  • promotional offers; and
  • updates relating to the Benefit Pass Programme.

Consent may be withdrawn at any time by clicking the unsubscribe link included in marketing emails or by contacting Benefit Pass directly.

  1. Children's Privacy

Benefit Pass is not intended for individuals under the age of 16 without the consent of a parent or legal guardian.

We do not knowingly collect personal data from children in violation of applicable laws.

  1. Changes to this Privacy Policy

Benefit Pass reserves the right to amend this Privacy Policy in order to comply with legal requirements, technological developments, or business improvements.

Any amendments will be published on our official website and shall become effective upon publication.

  1. Contact Information

If you have any questions regarding the processing of your personal data, please contact us:

Key4you j.d.o.o.

Email: info@benefit-cards.com

Website: www.benefit-pass.com

We will respond to your request within the time limits prescribed by applicable legislation.

By using the Benefit Pass website and services, you acknowledge that you have read and understood this Privacy Policy.

PRIVACY POLICY AND PERSONAL DATA PROTECTION

Last Updated: 28 June 2026

  1. Introduction

Welcome to Benefit Pass.

Protecting the privacy and security of our users' personal data is one of the fundamental priorities of Key4you j.d.o.o. (hereinafter referred to as "Benefit Pass," "we," "us," or the "Data Controller").

This Privacy Policy explains what personal data we collect, the purposes for which we process it, the legal basis for processing, how long we retain your data, and the rights you have as a data subject.

Benefit Pass processes personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
  • the Croatian Act on the Implementation of the General Data Protection Regulation; and
  • other applicable laws and regulations of the European Union and the Republic of Croatia.
  1. Data Controller

The Data Controller responsible for processing your personal data is:

Key4you j.d.o.o.

Address: Jurjenići 109 B, Kastav, Croatia

VAT / Personal Identification Number (OIB): 62309190286

Email: info@benefit-cards.com

Website: www.benefit-pass.com

  1. Personal Data We Collect

Depending on how you use the Benefit Pass platform, we may collect the following personal data:

  • first and last name;
  • email address;
  • telephone number (if voluntarily provided);
  • country of residence;
  • billing information required for issuing invoices;
  • information relating to the purchased Benefit Pass;
  • activation date;
  • information regarding the use of benefits;
  • IP address;
  • device and browser information;
  • information collected through cookies; and
  • communications with Customer Support.

We do not intentionally collect special categories of personal data unless required by law or voluntarily provided by the user.

  1. Purposes of Processing

We process your personal data only where there is a lawful basis for doing so.

This includes:

  • processing Benefit Pass purchases;
  • activating digital products;
  • issuing invoices;
  • enabling users to redeem partner benefits;
  • providing customer support;
  • handling complaints;
  • preventing fraud and misuse;
  • maintaining system security;
  • complying with legal obligations;
  • improving our services; and
  • sending marketing communications where the user has provided prior consent.
  1. Legal Basis for Processing

Personal data are processed on one or more of the following legal grounds:

  • performance of a contract;
  • compliance with legal obligations;
  • the legitimate interests of Benefit Pass; and
  • the user's consent where required.

Users may withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

  1. Sharing of Personal Data

Benefit Pass does not sell or disclose personal data to third parties.

Personal data may be shared only where necessary for:

  • the performance of contractual obligations;
  • payment processing;
  • invoice issuance;
  • IT service provision;
  • system maintenance;
  • compliance with legal obligations; or
  • requests from competent public authorities.

All data processors engaged by Benefit Pass are contractually required to implement appropriate measures to protect personal data.

 

  1. International Data Transfers

Where personal data are transferred outside the European Economic Area (EEA), Benefit Pass will ensure that appropriate safeguards are implemented in accordance with the GDPR.

  1. Data Retention

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected or for the period required by applicable law.

Once the applicable retention period expires, the data will be securely deleted or anonymised.

  1. Data Security

Benefit Pass implements appropriate technical and organisational measures to protect personal data.

These measures include:

  • access controls;
  • encryption where appropriate;
  • protection of information systems;
  • secure data backups;
  • monitoring of system access;
  • regular updates of security measures; and
  • employee training and awareness.

Although we take all reasonable steps to protect your personal data, no electronic storage or transmission system can guarantee absolute security.

  1. Your Rights

Under the GDPR, you have the right to:

  • access your personal data;
  • rectify inaccurate or incomplete data;
  • request the deletion of your personal data ("right to be forgotten");
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw your consent at any time; and
  • lodge a complaint with the competent supervisory authority.

To exercise any of these rights, please contact Benefit Pass using the official email address provided below.

  1. Cookies

Benefit Pass uses cookies for the following purposes:

  • ensuring the proper functioning of the website;
  • improving user experience;
  • website analytics;
  • maintaining system security; and
  • marketing activities, where appropriate consent has been obtained.

Users may manage their cookie preferences at any time through their web browser settings or the cookie consent management tool available on our website.

  1. Marketing Communications

Users who have provided their consent may receive information regarding:

  • new partners;
  • exclusive benefits;
  • promotional offers; and
  • updates relating to the Benefit Pass Programme.

Consent may be withdrawn at any time by clicking the unsubscribe link included in marketing emails or by contacting Benefit Pass directly.

  1. Children's Privacy

Benefit Pass is not intended for individuals under the age of 16 without the consent of a parent or legal guardian.

We do not knowingly collect personal data from children in violation of applicable laws.

  1. Changes to this Privacy Policy

Benefit Pass reserves the right to amend this Privacy Policy in order to comply with legal requirements, technological developments, or business improvements.

Any amendments will be published on our official website and shall become effective upon publication.

  1. Contact Information

If you have any questions regarding the processing of your personal data, please contact us:

Key4you j.d.o.o.

Email: info@benefit-cards.com

Website: www.benefit-pass.com

We will respond to your request within the time limits prescribed by applicable legislation.

By using the Benefit Pass website and services, you acknowledge that you have read and understood this Privacy Policy.