Privacy Policy

The individual’s right to data protection and privacy is important to Bitebell. This Privacy Policy describes how we use and process your personal data when you use this website or enter into business relationship with Bitebell, provided in a clear and transparent manner, in accordance with Articles 12, 13 and 14 of the EU General Data Protection Regulation (“GDPR“), and Articles 21, 23 and 24 of the Law on Personal Data Protection of the Republic of Serbia (“Official Gazette of the Republic of Serbia”, no. 87/2018) (“Serbian DP Law“).

1. Information on data controller

BITEBELL TECHNOLOGIES DOO, a company with its seat at the address Veljka Dugosevica 54, 11000 Belgrade, Serbia, registered with the Serbian Business Registers Agency under the identification number 21643335, is responsible for the collection, processing and use of your personal data as specified in this Privacy Policy, pursuant to the GDPR and the Serbian DP Law (hereinafter referred to as: “Bitebell“, “data controller” or “we“).

2. Purpose and legal basis for data processing

If you entrust us with your personal data, we will use such data for the technical administration of the website, improving our offers and optimizing the content of our website, identifying which sections of our website are the most visited and on which the most time is spent, customer management, marketing, etc., but only to the extent that is necessary pursuant to the GDPR and the Serbian DP Law. Each particular purpose of data processing is further described below, in the relevant section of this Privacy Policy.

The legal basis for each data processing activity might be different, depending on the purpose of data processing in a particular case. Therefore, the legal basis is always specified in the relevant sections of this Privacy Policy below. In general, we use the following legal basis for the data processing activities described in this Privacy Policy:

• consent of the data subject given to the processing of its personal data for one or more specific purposes, pursuant to Article 6 paragraph 1) item a) of the GDPR and Article 12 paragraph 1 item 1) of the Serbian DP Law;
• performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6 paragraph 1) item b) of the GDPR and Article 12 paragraph 1 item 2) of the Serbian DP Law; and
• ensuring a legitimate interest of Bitebell or a third party, as long as such processing does not outweigh the interests, fundamental rights and freedoms of the data subject in question, pursuant to Article 6 paragraph 1 item f) of the GDPR and Article 12 paragraph 1 item 6) of the Serbian DP Law.

In the sections below, you can find further information on the purpose and legal basis for data processing, depending on the type of data processing in a particular case.

2.1. User registration

If you wish to become our customer, you are required to create an account on our website. We require and collect the following data during the registration process: your name and surname, e-mail address, telephone number, name and address of your business (including country), estimated number of orders, delivery platforms your business uses and, where applicable, other personal data.

User registration and related data processing is necessary for the purpose of provision of our services to future customers.

The legal basis for such data processing is stipulated in Article 6 paragraph 1 item b) of the GDPR and Article 12 paragraph 1 item 2) of the Serbian DP Law – processing is necessary in order to take steps at the request of the data subject prior to entering into a contract for provision of our services.

2.2.      Inquiries

Our website offers a possibility to send us general and business inquiries by using general contact form, special contact form designed for scheduling demos, special contact form designed for proposing partnerships, special contract form designed for support inquiries for our clients, our chatbot or e-mail address.

The following personal data is processed by Bitebell, depending on the channel you use for sending inquiries:

• general contact form or e-mail address – personal data you enter on the input screen: your e-mail address, message and your name and surname (where applicable);
• chatbot – personal data you enter by conversing with the chatbot, if any;
• special contact form designed for scheduling demos – personal data you enter on the input screen: your e-mail address, telephone number, name of your business, number of locations of your business, and name of POS vendor your business uses;
• special contact form designed for proposing partnerships – personal data you enter on the input screen: your name, e-mail address, telephone number, name and type of your business (e.g., delivery platform, POS provider, etc.), and your notes/question; and
• special contact form designed for support inquiries – your name, e-mail address, telephone number and any other personal data you provide us in relation to your support request.

Bitebell uses personal data you provide via general inquiries for the purpose of managing your request and answering your questions.

Bitebell uses personal data you provide via business inquiries for the purpose of:

• managing your request (scheduling a demo) and potentially offering you services in the future, should the reasons that initially prevented our cooperation cease to exist;
• managing your request (contacting you regarding partnership) and potentially offering you business cooperation in the future, should the reasons that initially prevented our cooperation cease to exist; and
• handling your support ticket in relation to our products, services and functionalities to which you have subscribed.

The legal basis for the above-described data processing is consent of the data subject, in accordance with Article 6 paragraph 1 item a) of the GDPR and Article 12 paragraph 1 item 1) of the Serbian DP Law.

2.3. Newsletters

Our website offers a possibility to subscribe for our newsletter, in which case you are required to provide us with your e-mail address. You can unsubscribe from our newsletter at any time, by clicking on the unsubscribe link at the bottom of any e-mail you receive from us.

We use this data solely for the purpose of sending newsletters to you.

The legal basis for the above-described data processing is consent of the data subject, in accordance with Article 6 paragraph 1 item a) of the GDPR and Article 12 paragraph 1 item 1) of the Serbian DP Law.

2.4. Downloading sales materials

Our website offers a possibility to download our sales materials (e.g., e-books, case studies, product sheets etc.). In order for you to download these materials, we require and collect your e-mail address and telephone number (optional).

By downloading our sales materials, you consent to our sales team potentially contacting you and offering our services. In order to stop receiving our offers, you can withdraw your consent at any time by informing us thereof.

The legal basis for the above-described data processing is consent of the data subject, in accordance with Article 6 paragraph 1 item a) of the GDPR and Article 12 paragraph 1 item 1) of the Serbian DP Law.

2.5. Feedback request and product surveys

If you are already our customer, we may contact you with requests for feedback and/or with satisfaction surveys in relation to the services we provide to you, relying on the contact information we already collected from you during the registration process.

In this case, we process your personal data for the purpose of improving our services.

The legal basis for such data processing is our legitimate interest related to keeping and improving the commercial relationship with our customer.

2.6. Processing personal data of representatives and contact persons of our customers, suppliers and business partners

We may process personal data of individuals authorized to sign contracts with us on behalf of our customers, suppliers and/or business partners, or other individuals who are appointed as contact persons of our customers, suppliers and/or business partners (“Authorized Persons“). In this respect, we may process personal data of the Authorized Persons that include name and surname, signature, e-mail address, telephone number and, where applicable, other personal information.

We process such personal data in order to be able to contact and communicate with our customers, suppliers and/or business partners, and to prepare, conclude and keep contracts we concluded with them.

The legal basis for the above-described data processing is stipulated in Article 6 paragraph 1 item b) of the GDPR and Article 12 paragraph 1 item 2) of the Serbian DP Law – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. In addition, we may rely on Article 6 paragraph 1 item f) of the GDPR and Article 12 paragraph 1 item 6) of the Serbian DP Law – legitimate interest of data controller, in case of data processing related to communication with and development of our business relationship with our customers, suppliers and/or business partners, or protection of our rights in court and other proceedings.

In the event we are obliged to collect the personal data of the Authorized Person, or if such data processing is necessary in order for Bitebell to be released from its duties towards the Authorized Persons, they are obliged to provide us with their personal data, as required from us.

In the event the Authorized Person refuses to disclose any of their personal data we required, we will consider whether it is possible to, under such circumstances, continue the business relationship with our customer, supplier and/or business partner, or their Authorized Person.

2.7. Job applications

Our website offers a possibility to apply for job vacancies at Bitebell. If you apply, we will process your personal data as specified in the Notice on Processing Personal Data of Job Candidates.

3. Data deletion and retention period

By default, personal data will be deleted as soon as it is no longer required for the purpose they were collected, whatever the purpose, including to meet any legal, accounting or reporting requirement.

In order to determine an appropriate retention period of your personal data, we take into account the nature and sensitivity of the personal data, the potential risk of unauthorized disclosure or use of your personal data, the reasons why we process your personal data, the possibility to pursue these purposes in other ways and the legal requirements in force.

In the sections below, you can find further information on the retention periods, depending on the type and purpose of data processing in a particular case.

3.1. User registration

As you cannot register your account on our website prior to reading and accepting our Terms of Services, we will retain your personal data we collect during the registration process, for as long as our business relationship is in force and upon expiration of six months following the date of termination of our business relationship.

After that, personal data might be stored only for the period indicated by provisions of applicable law or as long as you or we may assert any claims towards each other, in which case, we are relying on our legitimate interest as the legal basis for this type of data processing.

3.2. General inquiries

We will delete or anonymize your personal data collected through general inquiries after two years from the day when the subject of relevant inquiry was fully clarified or upon revocation of your consent, whatever comes first.

Your personal data might be stored upon expiration of the above specified retention periods, but only for the period indicated by provisions of applicable law or as long as you or we may assert any claims towards each other, in which case, we are relying on our legitimate interest as the legal basis for this type of data processing.

3.3. Business Inquiries

We will delete or anonymize your personal data collected through business inquiries for the duration of our business relationship and six months from the date of termination thereof or for a period of three years from the date of the relevant inquiry, or upon revocation of your consent, whatever comes first.

Your personal data might be stored upon expiration of the above specified retention periods, but only for the period indicated by provisions of applicable law or as long as you or we may assert any claims towards each other, in which case, we are relying on our legitimate interest as the legal basis for this type of data processing.

3.4. Newsletters

We will keep personal data collected via your newsletter registration until you cancel your subscription. You can unsubscribe from our newsletter at any time, by clicking on the unsubscribe link at the bottom of any e-mail you receive from us. The withdrawal of your consent shall not affect the lawfulness of processing based on consent before its withdrawal.

After that, personal data might be stored only for the period indicated by provisions of applicable law or as long as you or we may assert any claims towards each other, in which case, we are relying on our legitimate interest as the legal basis for this type of data processing.

3.5. Downloading sales materials

We will keep your personal data collected in relation to downloading our sales materials until you withdraw your consent to receive offers from our sales team. You can do this by sending e-mail to our e-mail address specified in Section 6 of this Policy. The withdrawal of your consent shall not affect the lawfulness of processing based on consent before its withdrawal.

After that, personal data might be stored only for the period indicated by provisions of applicable law or as long as you or we may assert any claims towards each other, in which case, we are relying on our legitimate interest as the legal basis for this type of data processing.

3.6. Personal data of the Authorized Persons

We will keep personal data of the Authorized Persons for the duration of the business relationship with the relevant customer, supplier and/or business partner and six months from the date of termination of such business relationship.

After that, personal data might be stored only for the period indicated by provisions of applicable law or as long as you or we may assert any claims towards each other, in which case, we are relying on our legitimate interest as the legal basis for this type of data processing.

4. Recipients of your personal data and international data transfer

We are likely to share your personal data with the Affiliates, service providers and third parties (such as state authorities, professional advisors, etc.).

4.1. Affiliates

We can disclose your personal data to any of the Affiliates, to the extent needed for the same purposes as the initial processing described in this Privacy Policy.

As the Affiliates are established in the countries of the European Union and/or the European Economic Area, which are ensuring the adequate level of data protection, data transfer to the Affiliates or between the Affiliates is based on Article 45 of the GDPR and Article 64 of the Serbian DP Law.

4.2. Service providers

We may share your personal data to our service providers (e.g., cloud providers, providers of marketing services, etc.), as defined below (“Service Providers“).

The Service Providers are the following:

• Amazon Web Services Inc, with its registered seat at the address 410 Terry Ave. North, Seattle, WA 98109, United States
• HubSpot Inc, with its registered seat at the address 2 Canal Park Cambridge, MA 02141, United States
• Google LLC, with its registered seat at the address 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
• Meta Platforms, Inc with its registered seat at the address 2 Canal Park Cambridge, MA 02141, United States
• Google LLC, with its registered seat at the address 1 Hacker Way, Menlo Park, CA, United States
• Pipedrive OÜ, with its registered seat at the address Mustamae tee 3a, Tallinn, 10615 Estonia
• DigitalOcean, LLC with its registered seat at the address 101 6th Ave, NY, United States
• API Hub, Inc. dba Clearbit with its registered seat at the address 548 Market St. #95879, San Francisco, CA 94104, United States
• LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, Clinics, United States
• GetEmails LLC, with its registered seat at the address 1701 Waterstone Avenue, Austin, TX 78703, United States

The Service Providers are established in the countries of the European Union and/or the European Economic Area, which are ensuring the adequate level of data protection, and therefore, data transfer to the Service Provider is based on Article 45 of the GDPR and Article 64 of the Serbian DP Law.

In the event where the Service Providers is not established in the European Union or the European Economic Area, we make sure that your personal data is kept on servers which are located in the European Union or the European Economic Area.

The Service Providers, as data processors, are contractually bound to guarantee the confidentiality and security of personal data and to only process your personal data on our instructions.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout

4.3. Third parties

We may disclose or share your personal data to comply with a legal requirement or with an explicit request of the competent authority (e.g., court, to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia or any other data protection authority in the European Union), or in order to protect our rights and property, or rights and property of our customers or others. In this context and to the extent that it is needed, we may share your personal data to any professional advisor (e.g., lawyers, auditors, insurers, etc.) who is bound by the duty of confidentiality.

5. DATA SECURITY

Bitebell has implemented organizational and technical measures to protect the confidentiality, security and integrity of your personal data.

Bitebell will ensure that your personal data is not altered or damaged and that unauthorized third parties cannot access it.

6. Individuals’ rights and how to exercise them

In relation to the processing of your personal data you have the following rights:

• right to access your personal data that we hold, pursuant to Article 15 of the GDPR and Article 27 of the Serbian DP Law;
• right to correct and/or update your personal data, pursuant to Article 16 of the GDPR and Article 29 of the Serbian DP Law;
• right to request deletion of your personal data, pursuant to Article 17 of the GDPR and Article 30 of the Serbian DP Law;
• right to restrict the processing of your personal data, pursuant to Article 18 of the GDPR and Article 31 of the Serbian DP Law;
• right to object the processing of your personal data, pursuant to Article 21 of the GDPR and Article 37 of the Serbian DP Law;
• right to data portability, pursuant to Article 20 of the GDPR and Article 36 of the Serbian DP Law; and
• right to withdraw your consent given for the processing of your personal data at any time, however, your withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

If you want to exercise any of the above-mentioned rights, please send an e-mail to: contact@bitebell.com. We will make sure to comply with your request as soon as possible, in line with the GDPR and the Serbian DP Law.

If you believe that your data protection rights are violated, you can lodge a complaint to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, at the address Bulevar kralja Aleksandra 15, 11000 Belgrade, Republic of Serbia or at the e-mail address: office@poverenik.rs. Further information in this respect can be found at https://www.poverenik.rs/sr/ .

7. Cookie policy

Our website uses small text files called “cookies” that are stored in or by an Internet browser on your computer system, assisting us to display you the content in our website that is more likely to be relevant and of interest to you. Cookies contain a distinctive character string that enables the unique identification of the browser when the same website is accessed again. Cookies cannot execute programs or transfer viruses to your computer.

All cookies (except for necessary cookies) need to be approved before they can be set in your browser. Even if you consent to the use of cookies on our website, you can always delete the cookie from your system after the termination of the visit to our website.

On the other hand, we also use the necessary cookies regardless of your consent because they are necessary for the website to function and cannot be switched off in our systems.

7.1. Types of cookies

We use the following categories of cookies:

• necessary cookies;session cookies; and
• performance and advertising cookies.

1. Necessary cookies

These cookies are necessary for our website to work and cannot be switched off in our systems. These are core website functionalities such as security, network management, cookie preferences, access management, which require necessary cookies to be enabled. You can disable these cookies, but some parts of the website will then not work.

1. Session cookies

The purpose of this cookies is to remember login information during your current visit. These cookies are of limited duration, and therefore you can be required to enter your login information after certain period of time. In addition, session cookies can be used to track the number of your visit of certain part of our website.

1. Performance and Advertising cookies

We use external service providers such as Meta and Google for delivering ads for relevant Bitebell services when you visit certain pages of our website. We may share a cryptographic hash of a common account identifier (such as email address) with a third party to help us tailor ads and services offered to you.

7.2. Legal basis for the data processing

The legal basis for the processing of personal data when using cookies is Article 6 paragraph 1, item a) of the GDPR and Article 12 paragraph 1 item 1) of the Serbian DP Law – website visitors’ consent, except for the necessary cookies, where we are relying on Article 6 paragraph 1, item f) of the GDPR and Article 12 paragraph 1 item 6) of the Serbian DP Law – legitimate interest.

7.3. Purpose of the data processing

Cookies that are necessary for technical reasons are used to make the website easier for users to use. A few functions on our website cannot be offered without using cookies. In addition, we are using cookies to better understand website visitors, analyze trends, recommend more suitable content or services, improve performance of our website and for advertising purposes.

7.4. Retention period

Cookies are stored on your device and communicated from said computer to our website. Thus, you have full control over the use of cookies. You can disable or limit the transmission of cookies by changing the settings in your Internet browser. However, disabling the necessary cookies used by our website may mean you will not have full access to all functions of our website.

8. Changes to our Privacy Policy

We may make changes to our policy from time to time. Any future changes to this policy will be published on this page.