Bitergium SL (“Bitergia” or “we/us”) is committed to protecting the privacy of the user (“You/r”) of our services (“Services”) and our website(“Website”). This Privacy Policy is part of the Bitergia Terms of Use and explains our practices regarding the use of personal data collected and processed through our Services and website. Defined terms set out herein shall have the same meaning as in Bitergia Terms of Use of which it forms part.

Personal Information we collect about you

Data controller

The entity responsible for processing the data in the website or through our services is Bitergium SL, located at Av. de Gregorio Peces Barba, 1 – 28918 Leganés, Madrid. All communications regarding the processing of your personal data shall be directed to info@bitergia.com.

Personal information we collect about you

Data collected

You can use our website without revealing any personal identifiable information about yourself other than as indicated in our cookie policy. However, in certain cases we collect and process the following data

• Contact us. If you submit any webform in order to contact us (Request a quote, Contact us) or otherwise communicate with us, we will collect the following:
  • Identity Data includes your name.
  • Contact Data includes your email address.
  • Professional Data includes your company.

  These data are mandatory and if they are not provided we cannot contact you and respond to your requests.

• Newsletter. If you want to subscribe to receive our newsletter, your email address will be collected in our webform “Get in Touch” in order to send you the latest news about our Service.
• Bitergia’s blog. When you are browsing the Blog of our website, Bitergia gives you the option to follow the blog. At the bottom right of the webpage a pop-up appears where, if you wish your email address will be collected in order to send you the latest articles published.

Bitergia automatically collects data regarding your browsing of the website, such as your IP address, the browser you are using, the site from which you came and the site to which you are going when you leave the site.

Purposes

We use your personal data to:

• Contact you and manage the professional and commercial relationship with you.
• Manage any request you are asking us and provide our services.
• Send you newsletters, event announcements, product notices including those announcing changes to our terms or policies, promotional offers and surveys.
• For clients, provide our services.

Data collected automatically from website use will be maintained and used in aggregate form only and it will not contain personally identifiable information. We may use such aggregate information to analyse trends, administer the site/s, and gather broad demographic information for aggregate use.

Legal Basis

The legal basis of this processing is your express consent indicated by you and our legitimate interest to contact you and respond to your requests. For clients, processing the personal data of your staff and contacts is necessary for entering into and performing our contract.

Data quality

It is important that the personal data we hold about you is accurate and current. You are responsible for the accuracy of the information you provide to us and you are expected to update any information you provide us with.

Commercial Communications

If you tick the corresponding box, you expressly consent to receive commercial communications from us regarding our services and products and any new features, newsletters, offers or promotions offered by us. If later you do not wish to receive commercial Information about Bitergia and our services, you can opt out by sending a notification to info@bitergia.com or by clicking the “unsubscribe” link in our email communications.

Data transfer / Disclosure

We treat your personal data with strict confidentiality in accordance with applicable law. However, we shall disclose any personal or other data you provide us in compliance with a legal obligation or in order to correctly deliver our Services or perform other obligations in accordance with our website terms or professional terms of engagement, or in the event of a corporate operation involving investment, merger or sale.

Except as indicated, we do not reveal any of your data unless it is necessary for the performance of our services, or to our professional suppliers who provide us their services (email, storage, etc.).

International transfers

We inform you that we use the following international third party services to provide our Services:

• Freshsales Inc (“Freshsales”): Bitergia uses Freshsales CRM tool in the provision of its services which may perform international transfers for which it has implemented appropriate safeguards (including SCC). For more information, please visit its privacy policy: https://support.freshsales.io/en/support/solutions/articles/233227-privacy-policy
• Google Inc (“Google”): we have contracted the services of Google Apps and Google Analytics to implement working tools as well as analytics in the provision of our Services. Google may perform international transfers, and for this purpose, we have formalised the corresponding Data Processing Agreement, which includes the required legal guarantees. For more information, please visit its privacy policy: https://policies.google.com/privacy?hl=en-US
• Gitlab Inc (“Gitlab”):. we use Gitlab services in order to be able to perform a tracking to give support to our clients. Gitlab may perform international transfers, and for this purpose, we have formalised the corresponding Data Processing Agreement, which includes the required legal guarantees. For more information, please visit its privacy policy: https://about.gitlab.com/privacy/
• WordPress, Inc (“WordPress”): we have contracted WordPress to build and integrate our platform. WordPress may perform international transfers, and for this purpose, we have formalised the corresponding Data Processing Agreement, which includes the required legal guarantees and which you can visit here. For more information, please visit its privacy policy: https://automattic.com/privacy/
• The Rocket Science Group (“Mailchimp”): we use Mailchimp’s marketing automation platform to send newsletters, and which may perform international transfers for which it has implemented appropriate safeguards (including SCC). For more information, please visit its privacy policy: https://mailchimp.com/legal/privacy/
• Zapier, Inc. (“Zapier”): we have contracted Zapier to integrate our platforms. Zapier may perform international transfers, and for this purpose, we have formalized the corresponding Data Processing Agreement, which includes the required legal guarantees and which you can visit here. For more information, please visit its privacy policy: https://zapier.com/privacy

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Data retention

We will retain the personal data submitted through our website and collected during the course of the services while we have commercial and professional relations with you. Once such personal data is no longer used for the purpose mentioned above, it will be deleted. We may retain personal data beyond the aforementioned periods for legal or administrative reasons, such as defending our responsibility and complying with mandatory legal obligations, subject to applicable law. For clients, we will retain your data during out engagement and 6 years thereafter (duly blocked) for tax and legal reasons. This period may be extended for the period of liability of Bitergia.

Note that we may retain the data collected from you in an anonymised and aggregated format.

Security measures

We implement security measures and personal data protection schemes as required by law to maintain the confidentiality and integrity of your data and protection against unauthorised access, modification or destruction.

Your rights

You have the following rights under data protection laws in relation to your personal data: Request access to your personal data (commonly known as a “data subject access request”), Request correction of the personal data that we hold about you, Request erasure of your personal data; Object to processing of your personal data where we are relying on a legitimate interest; Request restriction of processing of your personal data, Request the transfer to you or to a third party of personal data you have provided us (right to data portability), Withdraw consent at any time where we are relying on consent to process your personal data. Note that if you oppose or request erasure or restriction of processing, we may not be able to provide our services.

The aforementioned rights may be effective by contacting us at info@bitergia.com or at Bitergium SL, Av. de Gregorio Peces Barba, 1 – 28918 Leganés, Madrid. We may require proof of identity, e.g. a digital copy of your identification document such as your ID card or passport.

You also have the right to make any complaint to the competent authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/. Jorge Juan, 6, 28001 Madrid, Spain.

Link to third party websites

The website may provide links to other websites or resources over which Bitergia does not have control (“External Web Sites”). Such links do not constitute an endorsement by Bitergia of those External Web Sites. You acknowledge that Bitergia is providing these links to you only as a convenience, and further agree that Bitergia is not responsible for the content of such External Web Sites. Your use of External Web Sites is subject to the terms of use and privacy policies located on the linked to External Web Sites.

General

We reserve the right to amend the terms of this Privacy Policy and will notify you by providing a clear notice of these changes by email or on our Website, and in this Privacy Policy. If you continue to use our Services after such update, you will be deemed to accept the new terms. If you do not accept the update, please notify us and we will terminate your Account and remove any of your personal data (except as required to be maintained for legal purposes), and you will not be able to continue to use our services.

Unless a specific local regulation sets forth to the contrary, the Privacy Policy is governed by the laws of Spain.