RevDeBug Privacy & Cookie Policy

This Privacy Policy covers the processing of personal data by RevDeBug.com sp. z o. o. (hereinafter referred to as “RevDeBug”, “we”, “us” or “our”) when providing its services to its clients.

Summary

We use your data only when you consent to it directly or when we need to based on what you ask of us. If you’d like more details, we invite you to read on.

This information applies to our website visitors, clients and job applicants. We’ve broken it down into three main sections:

1. Sales & marketing
2. RevDeBug products and services
3. Recruitment & employment

If you feel something is not addressed in this Privacy Policy or have further questions, you can reach us at privacy@revdebug.com.

DATA ADMINISTRATOR AND CONTACT DETAILS

The administrator of your personal data is RevDeBug.com Sp. z o. o. (ul. Słowackiego 1, 85-008, Bydgoszcz, Kuyavia-Pomerania, Poland, support@revdebug.com)

Sales & Marketing

We collect data to communicate clearly and directly with every visitor, introduce new people to our product, and improve the quality of our services. We collect only important data that makes those processes effective and user friendly.

We collect visitors’ personal data, such as IP address, a cookie identifier and name, business title, email address, name, employer company & company details, office Location (Country & City), telephone number. We also collect non-personal data to learn how visitors found our website, what kind of device they’re using, how long they stayed, which pages they visited, etc. 

Providing data is voluntary but necessary to establish commercial cooperation, learn more about our product or services, and seek support. Without providing your data, it is not possible to access content on our website, get in touch with us or submit inquiries, conclude contracts or their performance.

Individual data subject right (Your rights)

Remember there are a number of rights you can exercise:

• Right of Access
• Right to Rectification
• Right to Restriction of processing
• Right to Erasure also known as the ‘Right to be Forgotten’.
• Right to Data Portability
• Right to Object

You have the right to lodge a complaint with a supervisory authority (in Poland, the President of the Data Protection Office).

PROCESSING OBJECTIVES	LEGAL BASIS	RETENTION
Using the website and ensuring its proper operation and quality improvements (analytics) necessary for the purposes of running a website improve site user interface, optimise sales and marketing content	Article 6 (1) (a) of the GDPR	3 years from the last visit to the website
Conversion tracking, A/B tests, content personalisation, improve site user interface, optimise sales and marketing, display our advertisements on other websites, content necessary to  improve site user interface, optimise sales and marketing content based on consent	Article 6 (1) (a) of the GDPR	3 years from the last visit to the website
Marketing of own services and marketing automation  is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR-  consisting in caring for the interests and good image of the entrepreneur	until an effective objection is raised / removal requests
Marketing of third party services/goods and partners processing is necessary for the purposes of the legitimate interests of the administrator	(Article 6 (1) (f) of the GDPR) – consisting in the sale of services and promotion of business partners	until an effective objection is raised / removal requests
Establishing commercial relations – sale with an entity represented by a given person processing is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR – consisting in seeking to sell services	until an effective objection is raised / removal requests
Registration of correspondence and providing answers necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR – complying with the timely response to letters, timely payments to suppliers, taking care of the quality of cooperation with contractors and other interested parties	10 years from sending or receiving correspondence
Establishing commercial relations (sales, purchasing) processing is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR consisting of the purchase or sale of goods and services necessary for business operations	Until an effective objection/removal request is made
Conclusion and performance of the contract processing is necessary to take action before the conclusion of the contract and perform the contract	Article 6 (1) (b) of the GDPR	Until an effective objection/removal request is made after the contract is terminated.
Submitting complaints, complaints, requests processing is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR) – consisting in taking care of the quality of deliveries	3 years from the date of filing a complaint, complaint, application
Keeping accounting and tax documentation processing is necessary to fulfil a legal obligation	Article 6 (1) (c) of the GDPR in connection with art. 74 of the Accounting and Other Tax Act	10 full years from the end of the calendar year
Pursuing claims, collection of receivables. and defending against claims processing is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR – defence of the entrepreneur’s interests	6 years from the end of cooperation

Tools we use for Sales & Marketing 

Google Analytics analytics and customer data platform which collects browsing history, data about website visitors based on cookies, IP and fingerprinting; calculates metrics based on user browsing history related to website usage such as bounce rate, depth of visits, page views etc. Data is retained for 26 months..

Piwik Pro Analytics analytics and customer data platform which collects browsing history, data about website visitors based on cookies, IP and fingerprinting; calculates metrics based on user browsing history related to website usage such as bounce rate, depth of visits, page views etc. Data is retained for 25 months..

HubSpot is an inbound marketing and sales platform for email marketing, marketing automation, website personalisation and integrating CRM data about leads with their behavioural data. HubSpot collects browsing history, data about website visitors based on cookies, IP and fingerprinting; calculates metrics based on user browsing history related to website usage such as bounce rate, depth of visits, page views etc.) and personal user data acquired via lead capture forms. HubSpot products are hosted in U.S.-based data centres. Data is retained as long as it is necessary for the relevant purpose.

Cognism is an inbound marketing and sales platform integrated with CRM data to conduct sales & marketing activities. Cognism products are hosted in EEA based data centres. Data is retained as long as it is necessary for the relevant purpose.

Hotjar is a tool for analysing and visually representing online user behaviour like heatmaps, polls and surveys to improve user experience and can be connected with other data collected on the website. It retains data for 365 days and stores it in Ireland. 

Google AdWords is an advertising system used to display ads in Google’s search results (or in the Google Display Network), run ads or remarketing campaigns, track conversions, and create campaign performance reports. Google AdWords collects cookie-based behavioural data about users. Data collected by Google AdWords is retained for 24 months. 

Facebook Ads is an advertisement system used to serve ads to Facebook users, run remarketing and ad campaigns in Facebook Ad Network, create campaign performance reports, and conversion tracking. Facebook Ads collects cookie-based behavioural data about users and retains data as long as it is necessary for the relevant purpose.

LinkedIn Ads is an advertisement system used to serve ads to Linkedin users, run remarketing and ad campaigns in Linkedin Ad Network, create campaign performance reports, and conversion tracking. Linkedin Ads collects cookie-based behavioural data about users and retains data for 180 days..

Twitter Ads is an advertisement system used to serve ads to Twitter users, run remarketing and ad campaigns in Twitter Ad Network, create campaign performance reports, and conversion tracking. Twitter Ads collects cookie-based behavioural data about users and retains data as long as it is necessary for the relevant purpose.

We also share your information with:

• Third-party platforms when you, your administrator, or other Service users choose to install or enable third-party apps, add-ons, or other platforms to use with the Service. This may allow the providers of those platforms to access your account and personal information, such as your name, email address, and any content you choose to link with those platforms. Please note that your use of third-party platforms will be governed by their own terms and privacy policies.
• Any law enforcement authority, regulatory body, government agency, court, or other third party when we believe it is necessary to disclose your information to comply with applicable laws or regulations, to assert, establish, or defend our legal rights, or to protect your vital interests or those of another person.
• A potential or actual buyer (and their agents and advisors) in relation to any actual or proposed sale, merger, or acquisition of part or all of our business, provided that we inform the buyer that your personal information must only be used in accordance with this policy.
• Any other person with your consent for the disclosure.

RevDeBug Products and Services

To communicate clearly and directly with everyone that uses our products and services and improve the quality of our services, we need data. We collect only important data that makes those processes effective and user friendly.

RevDeBug Services/Applications/Platform collects and transfers via secure socket layer usage statistics and basic information of the environment it is used within. In case of software failures, RevDeBug Services/Applications/Platform and this website might send us error logs containing information that may help us in fixing the error and improving user experience through our products and websites. We may connect those data with data already collected by us during previous interactions or sales & marketing activities to provide better services for you. We retain this data as long as it is necessary for the relevant purpose. 

We use your information for various purposes, including:

• providing, maintaining, and improving our RevDeBug Services/Applications/Platform;
• managing your account and sending related information;
• responding to your comments, questions, and requests;
• communicating about our Service, products, and other information;
• analyzing trends and activities;
• detecting and preventing fraudulent activities;
• personalizing and improving our RevDeBug Services/Applications/Platform;
• administering surveys, contests, and promotions;
• aggregating or de-identifying data for research and marketing purposes.

We do not collect or otherwise Personally Identifiable Information about:

• race or ethnicity, political opinions; 
• religious or philosophical beliefs;
• physical or mental health, sexual life; 
• any actual or alleged criminal offences or penalties.

Or any other information that may be deemed to be sensitive under GDPR in the ordinary course of our business.

Sign in via other platforms

Instead of setting up a new user account, you can log in through your existing account on other platforms (currently Google, GitHub, or Azure DevOps). We will not collect the password associated with those platforms, but we may gather information from your account, such as your username and email address.

Recruitment & Employment

We will gather and process personal data such as employment history, education, and projects you’ve worked on based on information, documents, and links you provided to us during recruitment. While submitting your application, you must first agree to the processing of your personal data. We can’t consider you for a position without the ability to process your personal data. 

We collect and use the personal information you have provided only for the purposes of the recruitment process. Only accounting, HR and team members who are directly involved in your recruitment process have access to your data. 

Throughout recruitment, we collect data only for communication with candidates to evaluate their qualifications and make a final hiring decision. During the recruitment process, we use software from external partners such as Google Suite, job boards, recruitment platforms and software supporting recruitment processes (e.g. ATS). 

PROCESSING OBJECTIVES	LEGAL BASIS	RETENTION
Taking part in recruitment process via dedicated HR tools or applying via jobs@revdebug.com based on consent	Article 6 (1) (a) of the GDPR – personal information provided for the purpose of the recruitment process	2 years from taking part in the recruitment process or until an effective objection is raised / removal requests
Registration of correspondence and providing answers necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR – complying with the timely response to letters, timely payments, taking care of the quality of cooperation	10 years from sending or receiving correspondence
Conclusion and performance of the contract processing is necessary to take action before the conclusion of the contract and perform the contract	Article 6 (1) (b) of the GDPR	10 full years from the end of the calendar year
Submitting complaints, complaints, requests processing is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR)	6 years from the date of filing a complaint, complaint, application
Keeping accounting and tax documentation processing is necessary to fulfil a legal obligation	Article 6 (1) (c) of the GDPR in connection with art. 74 of the Accounting and Other Tax Act	10 full years from the end of the calendar year
Pursuing claims, collection of receivables. and defending against claims processing is necessary for the purposes of the legitimate interests of the administrator	Article 6 (1) (f) of the GDPR – defence of the entrepreneur’s interests	6 years from the end of cooperation

Cookies

RevDeBug use cookies and similar technologies to recognise you when you visit our website (*.revdebug.com). 

What are cookies?

A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the site again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information.  

Cookies provide a convenience feature to save you time, or tell the Web server that you have returned to a specific page. Cookies can be set by RevDeBug (first party cookies) or by other parties (third party cookies).

Why do we use cookies?

We use cookies for technical reasons in order for our Website to operate and other cookies to track interested, interactions and enhance the experience. We use gathered data for advertising, analytics, providing customized content or promotions and other purposes. 

What types of cookies do we use and how do we use them?

Essential website cookies: These cookies are strictly necessary to provide you with services available through our website. 

Performance and functionality cookies: These cookies are used to enhance the performance and functionality of our website and services. They are non-essential, but without them part of the functionality may become unavailable.

Analytics and customisation cookies: These cookies collect information to help us understand how our websites are being used and how it affects the effectiveness of our marketing campaigns and personalization of our Websites for you.

Advertising cookies: These cookies are used to make advertising messages more relevant and effective.

Social networking cookies: These cookies are used to enable you to connect with third party social networking and other websites. They can also be used for advertising purposes.

Security

RevDeBug is committed to keeping your personal data safe and secure from unauthorised access to or unauthorised alterations, disclosure or destruction of information that we hold. We invest in all reasonable technical and organisational precautions to prevent unlawful access and usage of your data.

Our security measures include:

• hashing and encryption of our services and data;
• regular review of information collection;
• encryption of our services and data;
• restricted access of data to employees, contractors and agents; 
• internal policies setting out our data security.

Please be aware that, despite taking all precautions and following best practices, no security system can prevent all potential security breaches. We cannot guarantee absolute safety.

International Data Transfers

RevDeBug operates globally, and as a result, your personal data may be transferred to and processed in countries outside your residence, including the United States, where data protection laws may differ from those in your country.

Specifically, our Site and Service are hosted in countries such as the United States and within the European Union, while our affiliate companies and third-party service providers are located globally. This means that when we collect your personal data, it may be processed in any of these countries.

For transfers of personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries not recognized as offering adequate protection under relevant data protection regulations, we ensure that such transfers are made with appropriate safeguards. These safeguards include the European Commission-approved Standard Contractual Clauses (SCCs) or the UK’s International Data Transfer Addendum, ensuring your personal data remains protected in compliance with applicable laws.

We are committed to protecting your privacy and will use all necessary legal mechanisms to ensure that your personal data remains secure and processed according to this privacy policy, no matter where it is transferred.

If you require more information or have specific concerns about how your data is handled during international transfers, please feel free to contact us directly.

Third-party websites

Occasionally, at our discretion, we may include links to third-party products or services on our website. These third-party sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content and activities of these linked sites. 

Children’s Privacy

RevDeBug’s Site and Service are not designed for children under the age of 16. We do not knowingly gather personal information from children under 16. If you discover that a child has shared personal information with us without parental consent, please inform us immediately. If we find out that a child under 16 has provided personal data without parental consent, we will take action to delete the information and close the account.

If you are 16 or older, but not yet the legal age of majority in your area, you should only use the Service with the consent of a parent or guardian.

Changes to the Privacy Policy

We will occasionally update this Privacy Policy. When changes to this Privacy Policy will be posted, the date at the top of this Privacy Policy will be revised. We recommend checking the website from time to time to inform yourself of any changes in this Privacy Policy or any other policies.