Privacy Policy

1. Data We Collect

BaciScout collects the following types of data:

• Account Information: Name, email address, company details
• Usage Data: Tender profiles, matches, comments, activity logs
• Technical Data: IP address, browser type, device information
• Cookie Data: Your cookie preferences as outlined in our Cookie Policy

2. How We Use Your Data

We use your data to:

• Provide and improve our tender discovery service
• Send you relevant procurement opportunities
• Process subscription payments via Stripe
• Analyze usage patterns to enhance user experience
• Comply with legal obligations

3. Data Storage and Security

Your data is stored securely on EU-based servers (Hetzner, Germany). We implement:

• Encryption at rest and in transit
• Multi-tenant data isolation
• Regular security audits
• GDPR-compliant data processing practices

4. Data Sharing

We share data with:

• Stripe: Payment processing (PCI-DSS compliant)
• OpenAI/Anthropic: AI-powered tender analysis (encrypted API keys)
• EU TED API: Tender data retrieval (public data)

See our Subprocessor List for details.

5. Your GDPR Rights

You have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Objection: Object to processing of your data
• Restriction: Limit how we process your data

6. Cookies

We use cookies to:

• Essential: Authenticate your session and maintain security
• Analytics: Understand how you use our service (anonymized)
• Marketing: Track campaign effectiveness

You can manage your cookie preferences through your browser settings.

7. Data Retention

We retain your data for:

• Active accounts: Duration of your subscription
• Deleted accounts: 30 days (grace period), then permanently deleted
• Legal requirements: As required by EU law (e.g., tax records)
• Consent logs: For audit purposes (minimum 2 years)

8. Contact Us

For privacy-related inquiries, contact us at:

• Email: privacy@bacimo.net
• Address: Bacimo s.r.o., Karpatské námestie 10A, 831 06 Bratislava, Slovak Republic

9. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract: Fulfilling our service agreement
• Legitimate Interest: Improving our service and preventing fraud
• Consent: Marketing communications and analytics
• Legal Obligation: Tax, accounting, and other legal requirements