Privacy Policy Website
1. Responsibility for the Data Processing:
Bug Bounty Switzerland AG (“we” or “us”) is committed to protecting your privacy and managing your personal information responsibly, securely, and in accordance with applicable data protection laws.
Bug Bounty Switzerland AG
Morgartenstrasse 3
6003 Lucerne, Switzerland
2. Scope of this Privacy Policy
This privacy policy applies only to data processing related to access to the Bug Bounty Switzerland website.
3. Data Collection and Usage
3.1 What Data Do We Process?
- Log Files: When you access our web pages, we store IP address, date, time, browser request, and general information about the operating system or browser in log files. This usage data is used for anonymous statistical evaluations to identify trends and improve our offerings.
- Data Provided and Collected: When you use our services, we sometimes collect your data without your active involvement. This includes data about your device and user behavior.
- External Services: Details of the external services we use are outlined below.
4. External Services
4.1 Google Analytics
We use Google Analytics on our website, a service of the provider Google Ireland Ltd, Google Building Gordon House, Barrow St, Dublin 4, Ireland, with headquarters at Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, both together referred to as ‘Google’.
- What Data Do We Process?
- Google Analytics is an analysis service for websites to collect information about the use of the website. In particular, the following information may be collected:
- IP address
- Technical information such as browser, operating system, or screen resolution
- Interactions on the website
- Duration of the visit
- Time and date of the website visit
- Referrer URL
- Google Analytics is an analysis service for websites to collect information about the use of the website. In particular, the following information may be collected:
The IP address is anonymized by Google Analytics so that a personal reference is no longer possible. When a visitor visits our website for the first time, Google Analytics can generate an identifier to recognize the visitor when they visit the website again. If you are logged in with your Google account, data processing can also take place across devices.
- Purpose of Data Processing
- Your IP address is used to determine your approximate location. We can use the information obtained to measure the relevance of our offers in different regions.
- We also use the IP address to determine where website visitors have come to our website from. The technical information is processed so that the website can be displayed satisfactorily on every device.
- The interactions, duration, time, and date are collected so that we can use this data to evaluate and optimize our marketing campaigns and offers.
- We can also use this data to determine how visitors interact with our website, i.e., which content is popular with which visitors. The referrer URL is processed for the purpose of measuring the effectiveness and analyzing various marketing channels.
4.2 HubSpot
We use functions of the HubSpot CRM tool. The website operator is HubSpot Germany GmbH (HubSpot), Am Postbahnhof 17, 10243 Berlin, Germany.
- Usage
- We use HubSpot for online marketing activities, including content management, email marketing, social media publishing, reporting, contact management, landing pages, and contact forms.
- Information collected is stored on servers operated by HubSpot and used solely for optimizing our marketing. This constitutes a legitimate interest.
- Certification
- HubSpot is certified under the “EU – U.S. Privacy Shield Frameworks” and the “CH – U.S. Privacy Shield.”
For more information, please refer to HubSpot’s privacy policy.
4.3 LinkedIn
- LinkedIn Ads
- LinkedIn Ads is used to create, publish, and manage advertising campaigns on the LinkedIn platform. These advertising campaigns can then be displayed on websites to reach more visitors, increase a company’s visibility, and reach more potential customers.
- LinkedIn Insight Tag
- On our website, we use the LinkedIn Insight Tag, a service of the provider LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, with headquarters at LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, both together referred to as ‘LinkedIn’.
- What Data Do We Process?
- The LinkedIn Insight Tag is an analytics service for websites to collect information for advertising campaigns on LinkedIn. In particular, the following information may be collected:
- Professional information (title, industry, skills, education, etc.)
- Age and gender
- IP address
- Technical information such as browser, operating system, or screen resolution
- Interactions with the website and adverts
- The LinkedIn Insight Tag is an analytics service for websites to collect information for advertising campaigns on LinkedIn. In particular, the following information may be collected:
Data processing may take place across devices, especially if you are logged in with your LinkedIn account.
- Purpose of Data Processing
- Your professional data is used to show you personalized ads in connection with your professional role.
- Age and gender are used for targeted ad placement with the aim of reaching a specific target group.
- The IP address is processed to determine your approximate location so that local adverts can be placed and the geographical reach of our campaigns can be measured.
- The technical information is processed so that the website and adverts can be displayed satisfactorily on every device.
- Interactions with the website are processed so that we can use this data to evaluate and optimize our marketing campaigns and offers.
- Who Do We Share the Data With?
- The transfer of data by us is based on our statements on data transfer. As LinkedIn is a transnational company, your data may be transferred from LinkedIn to anywhere in the world. In particular, it may be transferred to LinkedIn’s headquarters in the USA, a country where the legislation does not guarantee adequate data protection.
- How Can You Prevent the Processing of Your Data?
- You can prevent the processing of your data by not giving your consent to the use of the LinkedIn Insight Tag or by revoking it.
- You can also object to cross-device data processing by deactivating it in your LinkedIn account.
For more information, please refer to LinkedIn’s User Agreement and Privacy Policy.
4.4 Facebook Pixel
Our websites use the Facebook Pixel provided by the social network “Facebook” (Meta Platforms Inc., 1601 S. California Ave, Palo Alto, California 94304, USA).
- Usage
- This tool allows us to present interest-based advertisements to our website users when they visit Facebook or Instagram. The Pixel establishes a direct connection to Meta’s servers when our websites are accessed. During this process, Meta is informed that a user has visited our website, and this information is linked to the user’s personal Meta account.
- Purpose
- Display targeted ads based on the user’s interests and interactions with our website.
- Data Sharing
- As the provider of the websites, we do not have access to the content of the transmitted data or its use by Meta.
For more information on how Meta collects and uses data, as well as your rights and options to protect your privacy, please refer to Facebook’s privacy policy. Further details about your data protection rights and options for configuring your privacy settings can be found at:
5. Legal Basis for Data Processing
We process your data in good faith and in accordance with the purposes set out in this privacy policy. The legal bases for data processing include:
- Your Consent: When you have given consent for specific purposes.
- Performance of a Contract: Processing necessary for fulfilling a contract or pre-contractual measures.
- Legitimate Interests: Our legitimate interests, provided that your interests do not outweigh ours.
6. Rights of Data Subjects
You have the following rights regarding your personal data:
- Access: The right to access your personal data stored by us.
- Correction: The right to request correction of inaccurate or incomplete data.
- Deletion: The right to request the deletion of your personal data, subject to legal requirements.
- Restriction of Processing: The right to request the restriction of processing your personal data.
- Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: The right to object to the processing of your personal data.
- Withdrawal of Consent: If processing is based on consent, you can withdraw it at any time.
- Lodge a Complaint: The right to lodge a complaint with a supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner: http://www.edoeb.admin.ch.
6.1 Exercising Your Rights
To exercise your rights, please contact us using the Data Protection Request Template and send your request to one of the following addresses:
- Email: privacy@bugbounty.ch
- Postal Address: Bug Bounty Switzerland AG, Morgartenstrasse 3, 6003 Lucerne, Switzerland
We may need to verify your identity before processing your request. We will respond within a reasonable timeframe and in accordance with applicable data protection laws.
7. Data Security
We work closely with our hosting providers to protect our databases from unauthorized access, loss, misuse, or falsification. We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse, or alteration.
8. Sharing and Disclosure of Data
8.1 Third-Party Processors
We may use third-party service providers or affiliated companies to process your data, including:
- Accounting, fiduciary, and auditing companies
- Consultancy firms (legal advice, taxes, etc.)
- IT service providers (web hosting, support, cloud services)
- Payment service providers
- Providers of tracking, conversion, and advertising services
We ensure that these third parties comply with data protection requirements and treat your personal data confidentially.
8.2 Social Media Channels
Links to our social media channels are embedded on our website. If you click on the icons, the social media providers are informed that you have accessed their platform from our website. We do not control the use of this data by social media providers.
8.3 Transfer Abroad
Your personal data may be transferred to companies abroad for order processing. If the level of data protection does not correspond to that in Switzerland, we will carry out a risk assessment and ensure adequate protection (e.g., EU Commission’s standard contractual clauses). Additional technical measures may be taken if necessary.
9. Cookies and External Services
You can revoke your settings for the use of cookies for the future through our website using the Revoke Cookies button.
10. How to Withdraw Consent
If you have given us your consent to process your personal data for specific purposes, you can withdraw it at any time by sending an email to the address provided in the legal notice. Data processing that has already taken place is not affected by this.
11. Data Retention
We retain your personal data only as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time. Changes will be posted on this page, and the “Last Updated” date will be revised accordingly.
13. Contact Information
If you have any questions or concerns regarding this privacy policy or the processing of your personal data, please contact us at:
- Email: privacy@bugbounty.ch
- Postal Address: Bug Bounty Switzerland AG, Morgartenstrasse 3, 6003 Lucerne, Switzerland
- Phone: +41 41 562 05 65