1. Overview & Controller

Controller:
Biturai L.L.C‑FZ, Dubai (Contact: info@biturai.com)

2. Processing Purposes & Legal Basis

• Website: Security logs (IP, Time). Legal basis: Art. 6 (1) lit. f GDPR (Legitimate Interest).
• Contact: Processing email inquiries. Legal basis: Art. 6 (1) lit. b GDPR (Contract/Pre-contract) or lit. f (Legitimate Interest).
• Newsletter: Updates. Legal basis: Art. 6 (1) lit. a GDPR (Consent).

3. Newsletter

Double-opt-in subscription.

Provider: Brevo (Sendinblue). EU servers. DPA in place.

Tracking: Open rates may be tracked if active.

Withdrawal: Link in every email.

3a. Telegram Community

Link: t.me/biturai_chat

• Controller: Telegram is an independent controller.
• Biturai Processing: We moderate content (Legitimate Interest).

3b. Skool Community

Community Platform: skool.com.

• Platform: Skool is the controller for platform operation.
• Merchant of Record: Skool handles payments.
• Biturai Processing: We manage access and support (Performance of Contract / Legitimate Interest).
• Transfer: Skool is a US provider (Data transfer to USA).

3c. Community Invitation (Join Form)

When you join the community via the form on our website ("Join Community"/"Join the Dojo"), we process the following data:

• Data Categories: Email address (Required), Timestamp, IP Address, Language (EN).
• Purpose: Automated dispatch of an invitation to the Biturai Skool Community via email.
• Processors / Recipients:
  • Zapier (USA/Global): We use Zapier for automation (Data reception from form → Triggering invitation). Standard Contractual Clauses (SCCs) are in place.
  • Skool (USA): The email invitation is technically sent by the Skool platform. Your email address is transferred to Skool for this purpose.
• Legal Basis: Your explicit consent by checking the box in the form (Art. 6 (1) lit. a GDPR).
• Retention: Data in the automation log (Zapier) is deleted after operational necessity expires. In Skool, data is permanently processed only if you accept the invitation and register there.
• Withdrawal: You can withdraw your consent at any time before submitting the form or by contacting us.

4. Affiliate Links

We use affiliate links to exchanges (Bitget, Toobit, Bitunix). If you click, referral codes are passed. We receive commissions based on aggregated data. We do not receive your clear ID data from exchanges.

5. Cookies, Tracking & Consent

Consent Management (Usercentrics)

We use Usercentrics to manage your consents. (Legal Obligation).

Tracking / Tag Management

We use Google Tag Manager (GTM). If you consent (Opt-in via Usercentrics), we use pixels from:

• Meta (Facebook)
• X (Twitter)

Purpose: Conversion tracking. Transfer: USA. Withdrawal: Via settings/footer.

6. International Transfer

Biturai is in Dubai (UAE). Data is transferred to a third country. We take measures to ensure data security.

7. Storage Duration

We store data only as long as necessary for the purpose or legal obligations. Afterwards, it is deleted.

8. Your Rights

Access, Rectification, Erasure, Restriction, Portability, Objection (GDPR Art. 15-21).

Contact: info@biturai.com