Privacy policy

1. Responsibility for the Data Processing

Bug Bounty Switzerland AG ("we" or "us") is committed to protecting your privacy and managing your personal information responsibly, securely, and in accordance with applicable data protection laws.

Bug Bounty Switzerland AG
Morgartenstrasse 3
6003 Lucerne, Switzerland

2. Scope of this Privacy Policy

This privacy policy applies only to data processing related to access to the Bug Bounty Switzerland website.

3. Data Collection and Usage

3.1 What Data Do We Process?

Log Files: When you access our web pages, we store IP address, date, time, browser request, and general information about the operating system or browser in log files. This usage data is used for anonymous statistical evaluations to identify trends and improve our offerings.

Data Provided and Collected: When you use our services, we sometimes collect your data without your active involvement. This includes data about your device and user behavior.

External Services: Details of the external services we use are outlined below.

4. External Services

4.1 Google Analytics

We use Google Analytics on our website, a service of the provider Google Ireland Ltd, Google Building Gordon House, Barrow St, Dublin 4, Ireland, with headquarters at Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, both together referred to as ‘Google’.

What Data Do We Process?
Google Analytics is an analysis service for websites to collect information about the use of the website. In particular, the following information may be collected:

  • IP address
  • Technical information such as browser, operating system, or screen resolution
  • Interactions on the website
  • Duration of the visit
  • Time and date of the website visit
  • Referrer URL

The IP address is anonymized by Google Analytics so that a personal reference is no longer possible. When a visitor visits our website for the first time, Google Analytics can generate an identifier to recognize the visitor when they visit the website again. If you are logged in with your Google account, data processing can also take place across devices.

Purpose of Data Processing
Your IP address is used to determine your approximate location. We can use the information obtained to measure the relevance of our offers in different regions. The technical information is processed so that the website can be displayed satisfactorily on every device. The interactions, duration, time, and date are collected so that we can use this data to evaluate and optimize our marketing campaigns and offers. The referrer URL is processed for the purpose of measuring the effectiveness and analyzing various marketing channels.

4.2 HubSpot

We use functions of the HubSpot CRM tool. The website operator is HubSpot Germany GmbH (HubSpot), Am Postbahnhof 17, 10243 Berlin, Germany.

Usage
We use HubSpot for online marketing activities, including content management, email marketing, social media publishing, reporting, contact management, landing pages, and contact forms. Information collected is stored on servers operated by HubSpot and used solely for optimizing our marketing. This constitutes a legitimate interest.

Certification
HubSpot is certified under the "EU – U.S. Privacy Shield Frameworks" and the "CH - U.S. Privacy Shield." For more information, please refer to HubSpot's privacy policy.

4.3 LinkedIn

LinkedIn Ads
LinkedIn Ads is used to create, publish, and manage advertising campaigns on the LinkedIn platform.

LinkedIn Insight Tag
On our website, we use the LinkedIn Insight Tag, a service of the provider LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, with headquarters at LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, both together referred to as ‘LinkedIn’.

What Data Do We Process?
The LinkedIn Insight Tag is an analytics service for websites to collect information for advertising campaigns on LinkedIn.

  • Professional information (title, industry, skills, education, etc.)
  • Age and gender
  • IP address
  • Technical information such as browser, operating system, or screen resolution
  • Interactions with the website and adverts

Purpose of Data Processing
Your professional data is used to show you personalized ads in connection with your professional role.

4.4 Facebook Pixel

Our websites use the Facebook Pixel provided by the social network “Facebook” (Meta Platforms Inc., 1601 S. California Ave, Palo Alto, California 94304, USA).

5. Legal Basis for Data Processing

We process your data in good faith and in accordance with the purposes set out in this privacy policy. The legal bases for data processing include:

  • Your Consent: When you have given consent for specific purposes.
  • Performance of a Contract: Processing necessary for fulfilling a contract or pre-contractual measures.
  • Legitimate Interests: Our legitimate interests, provided that your interests do not outweigh ours.

6. Rights of Data Subjects

You have the following rights regarding your personal data:

  • Access: The right to access your personal data stored by us.
  • Correction: The right to request correction of inaccurate or incomplete data.
  • Deletion: The right to request the deletion of your personal data, subject to legal requirements.
  • Restriction of Processing: The right to request the restriction of processing your personal data.
  • Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: The right to object to the processing of your personal data.
  • Withdrawal of Consent: If processing is based on consent, you can withdraw it at any time.
  • Lodge a Complaint: The right to lodge a complaint with a supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner: http://www.edoeb.admin.ch.

6.1 Exercising Your Rights

To exercise your rights, please contact us using the Data Protection Request Template and send your request to one of the following addresses:

Email: privacy@bugbounty.ch
Postal Address: Bug Bounty Switzerland AG, Morgartenstrasse 3, 6003 Lucerne, Switzerland

7. Data Security

We work closely with our hosting providers to protect our databases from unauthorized access, loss, misuse, or falsification. We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration.

8. Sharing and Disclosure of Data

8.1 Third-Party Processors

We may use third-party service providers or affiliated companies to process your data, including:

  • Accounting, fiduciary, and auditing companies
  • Consultancy firms (legal advice, taxes, etc.)
  • IT service providers (web hosting, support, cloud services)
  • Payment service providers
  • Providers of tracking, conversion, and advertising services

9. Cookies and External Services

You can revoke your settings for the use of cookies for the future through our website using the Revoke Cookies button.

10. How to Withdraw Consent

If you have given us your consent to process your personal data for specific purposes, you can withdraw it at any time by sending an email to the address provided in the legal notice. Data processing that has already taken place is not affected by this.

11. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be posted on this page, and the "Last Updated" date will be revised accordingly.

13. Contact Information

If you have any questions or concerns regarding this privacy policy or the processing of your personal data, please contact us at:

Email: privacy@bugbounty.ch
Postal Address: Bug Bounty Switzerland AG, Morgartenstrasse 3, 6003 Lucerne, Switzerland
Phone: +41 41 562 05 65