Privacy Policy for Debitura

1. Policy Summary

Personal Data Processed:

• Invoice Data
• Debtor Data
• User Data

Purposes:

• Facilitating debt collection
• Managing and processing cases
• Providing and improving services

Services Used:

• Google Analytics, Facebook Pixel, LinkedIn Pixel for analytics and marketing
• Microsoft Azure for hosting
• Mandrill and Gmail for communication
• OpenAI for AI services

2. Data Collection and Usage

Types of Data Collected:

• Invoice Data: Includes details such as invoice numbers, amounts, due dates, and descriptions.
• Debtor Data: Includes debtor's name, contact information, outstanding debt amounts, and related contract information.
• User Data: Includes the full name and contact information of users created by the Client to manage cases.

Purpose of Data Collection:

• To facilitate the debt collection process between the Client and the Debt Collector.
• To manage and process debt collection cases efficiently.
• To provide users with access to our platform and its features.
• To comply with legal obligations and resolve any disputes.

3. Data Sharing and Disclosure

Third Parties:

• We share personal data with debt collectors (law firms and debt collection agencies) who manage the debt collection process on behalf of the Client.
• Subprocessors who assist in providing our services, such as Microsoft Azure for hosting, Mandrill for email sending, Gmail for support emails, and OpenAI for AI services.

Data Sharing Agreements:

• We have Data Processing Agreements (DPAs) with all our subprocessors to ensure they comply with GDPR and protect your data.

4. Data Storage and Security

Storage Locations:

• All data is stored within the European Union (EU).

Security Measures:

• We use Microsoft Azure for secure data hosting, which includes state-of-the-art security measures such as data encryption, access controls, and regular security audits.
• Internal policies and regular staff training ensure data protection.
• Limited data access is provided only to authorized senior staff members.

5. Data Retention

Retention Periods:

• Personal data is retained for as long as necessary to fulfill the purposes outlined in this Privacy Policy, taking into account statutory limitations.
• Data can be deleted upon the Client’s request or automatically once the Client deletes their account.

6. Data Subject Rights

Rights and Requests:

• Access: You have the right to request access to your personal data.
• Rectification: You can request corrections to any inaccurate or incomplete data.
• Erasure: You can request the deletion of your data under certain conditions.
• Data Portability: You have the right to request the transfer of your data to another organization.
• Restriction of Processing: You can request the restriction of the processing of your data.
• Objection to Processing: You have the right to object to the processing of your data under certain circumstances.

To exercise these rights, please contact us at lars@debitura.com.

7. Cookies and Tracking

Cookies and Tracking Technologies:

• We use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and support marketing efforts.
• Tools used include Google Analytics for website analysis and Facebook/LinkedIn pixels for targeted advertising.
• You can manage your cookie preferences through your browser settings.

Opt-Out Information:

• Users may opt-out of interest-based advertising through their browser settings or by using opt-out tools provided by services like Google and Facebook.

8. Contact Information

Contact Information for Privacy Inquiries:

• Email: contact@debitura.com

9. Mode and Place of Data Processing

Methods of Processing:

• Data is processed using computers and/or IT-enabled tools, following organizational procedures strictly related to the purposes indicated. Access to data is restricted to authorized personnel and subprocessors.

Place of Processing:

• Data is processed at our operating offices and any other places where the parties involved in the processing are located.

International Data Transfers:

• Depending on the User's location, data transfers may involve transferring the User's data to a country other than their own. We ensure that appropriate safeguards are in place to protect the transferred data.

10. Miscellaneous

Changes to the Privacy Policy:

• Any changes to this Privacy Policy will be posted on our website with an updated revision date.
• We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

By using our services, you acknowledge that you have read and understood this Privacy Policy. If you have any questions or concerns about our data practices, please contact us at contact@debitura.com.