We collect function data to be able to send you notifications with regards your submitted passwords and files. You are NOT obligated to provide your email address. The legal basis of collection is consent.
We collect log data to be able to protect ourselves from attacks, such as, but not limited to, (D)DoS or brute-force attacks. We may also use this data for forensic analyses, if we suspect any security incident to be linked to OneTime accesses.
Functional data is kept for a maximal duration of 7 days.
Log data is kept for a maximal duration of 90 days.
With regards to GDPR, the data processor is:
Broadcasting Center Europe S.A.
43, bd Pierre Frieden
L-1543 Luxembourg
contact@bce.lu
BCE is located in Luxembourg. All our datacenters are in Luxembourg, and we will not save your data on any server outside of Luxembourg.
BCE does not share any data with any external entity, unless it is required to by law, upon judiciary (or governmental) requests.
You can oppose to the data collection by not providing an email address or not visiting the BCE OneTime system.
You can delete the functional data, by retrieving the password or file. That way, your email address will be deleted immediately. You may also wait for the expiration (7 days) of the submitted password or file, after which your email address is also deleted.
You can be informed about any data collection by reading this page. If you have any questions with regards to our data handling, feel free to contact us.