Privacy Policy
PRIVACY POLICY – M2M SERVICES
Last updated: 01 January 2026
1. Introduction
This Privacy Policy explains how M2M Services (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit or interact with our websites, platforms, applications, products, and services (collectively, the “Services”).
We are committed to protecting personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), and other applicable privacy regulations worldwide.
2. Data Controller
For the purposes of applicable data protection laws, the data controller is:
M2M Services
Registered in Bulgaria
Unless explicitly stated otherwise in a specific agreement, Residence Control EOOD (dba M2M Services) acts as the data controller for personal data processed in connection with the Services.
In certain customer or partner arrangements, M2M Services may act as a data processor on behalf of its customers, in accordance with contractual instructions.
3. Scope of This Policy
This Privacy Policy applies to:
- Visitors to M2M Services websites
- Customers, partners, and users of M2M Services platforms and products
- Individuals who communicate with M2M Services electronically
This policy does not apply to third‑party websites or services that are not operated or controlled by M2M Services.
4. Principles of Data Protection
M2M Services processes personal data in accordance with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
These principles guide our technical, organizational, and governance measures.
5. Personal Data We Collect
Depending on how you interact with M2M Services, we may collect the following categories of personal data:
5.1 Information You Provide
- Name, email address, telephone number
- Business contact and account information
- Communications, inquiries, and support requests
5.2 Information Collected Automatically
- IP address and device identifiers
- Browser type, operating system, and technical data
- Usage logs, diagnostic data, and performance metrics
5.3 Information from Third Parties
- Information received from customers, distributors, or business partners
- Publicly available information, where legally permitted
We collect only personal data that is necessary for defined and legitimate purposes.
6. Purposes and Legal Bases for Processing
M2M Services processes personal data for purposes that include:
- Providing, operating, and supporting our Services
- Managing customer, partner, and reseller relationships
- Communicating with users and responding to requests
- Improving functionality, reliability, and security
- Preventing fraud and misuse
- Complying with legal, regulatory, and contractual obligations
Processing is based on one or more of the following legal grounds, as applicable:
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests, balanced against individual rights
- Consent, where required by law
7. Cookies and Similar Technologies
M2M Services uses cookies and similar technologies to ensure proper operation of websites, analyze usage, and improve user experience.
Where required by law, users are provided with choices regarding the use of cookies and similar technologies. Cookie preferences may be managed through browser settings or other available controls.
8. Data Sharing and Disclosure
Personal data may be shared with:
- Authorized service providers and processors acting on our behalf
- Affiliates and business partners where necessary to deliver Services
- Public authorities, regulators, or law enforcement where legally required
All third parties are required to process personal data in accordance with confidentiality, security, and purpose‑limitation obligations.
9. International Data Transfers
M2M Services operates internationally. Personal data may be transferred to and processed in countries outside your country of residence.
Where international transfers occur, appropriate safeguards are implemented in accordance with applicable data protection laws.
10. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods are determined based on legal requirements, contractual obligations, and operational needs.
11. Information Security and Privacy Management Standards
M2M Services maintains a structured approach to information security and privacy management aligned with internationally recognized standards.
Information security practices are based on ISO/IEC 27001, which establishes risk‑based controls to protect information against unauthorized access, loss, alteration, or disclosure.
Privacy management practices are aligned with ISO/IEC 27701, which provides a framework for managing personally identifiable information and supporting compliance with applicable data protection laws. Alignment with these standards supports confidentiality, integrity, availability, transparency, and accountability.
12. Automated Decision‑Making
M2M Services does not engage in automated decision‑making, including profiling, that produces legal or similarly significant effects on individuals, unless explicitly disclosed and permitted by applicable law.
13. Your Privacy Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of personal data
- Restrict or object to processing
- Withdraw consent where processing is based on consent
- Request data portability, where applicable
- Opt out of the sale or sharing of personal data, where applicable
Requests can be submitted using the contact details below and will be handled in accordance with applicable legal timelines and verification requirements.
Where applicable, you also have the right to lodge a complaint with a competent data protection authority.
14. Children’s Privacy
M2M Services’ Services are not directed at children. We do not knowingly collect personal data from children as defined under applicable law without appropriate legal authorization or parental consent.
15. Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements, technology, or M2M Services’ data processing practices. Updates will be published with a revised “Last updated” date.
16. Contact Information
For questions, concerns, or requests related to privacy or personal data, please contact:
M2M Services EOOD
Email: info@m2mservices.com
Address: 1 Kukush Str, Building M8, 1309 Sofia, Bulgaria