1.Who is responsible
Reblys Tender Management is the data controller for the personal data described in this policy.
Reblys Tender Management
Lyngbyvej 83, 2100 Copenhagen, Denmark
Email: hello@reblys.com
Questions about privacy or requests to exercise your rights can be sent to the same address.
2.What we collect
- Access and digest requests. Name, company, work email, country, what you sell, an optional message, and whether you want the free weekly digest.
- Correspondence. The content of emails you send to us and our replies.
- Customer data. For paid plans: contact details, billing details such as company address and VAT number, your product profile and alert settings, and your subscription history.
- Technical data. Our hosting provider records standard server logs (IP address, browser type, time and requested page) to keep the website secure and running.
- Public tender data. Tender notices published by public buyers can contain names and contact details of procurement officers. We process these only as part of the notice, to show you where to direct questions about a tender.
We do not use analytics, advertising trackers or cookies on reblys.com. See our Cookie Policy.
3.Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering requests and setting up access | Steps prior to entering a contract, Art. 6(1)(b) |
| Providing the service to customers, including billing | Performance of a contract, Art. 6(1)(b) |
| Sending the free weekly digest | Your consent, Art. 6(1)(a), given via the checkbox. You can withdraw it at any time. |
| Keeping accounting records | Legal obligation, Art. 6(1)(c), under the Danish Bookkeeping Act |
| Website security and server logs | Legitimate interest, Art. 6(1)(f), in operating a secure service |
| Processing public tender notices | Legitimate interest, Art. 6(1)(f), in providing access to public procurement information |
4.AI and your data
AI reads and translates tender notices, and a human reviews what we send. Your personal data is not used to train AI models, and we do not make decisions about you based solely on automated processing.
5.How long we keep it
- Requests that do not lead to a subscription: up to 24 months after our last contact.
- Digest subscription: until you unsubscribe.
- Customer data: for as long as you are a customer, and accounting records for 5 years after the end of the financial year, as required by Danish law.
- Server logs: for a limited period set by our hosting provider.
6.Where your data is stored
We store and process personal data in the EU. Our website is hosted on Vercel with our deployment region set to Frankfurt, Germany. See GDPR & Data for the full list of providers.
Some of our providers are headquartered outside the EU. Where that is the case, they are bound by the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
8.Your rights
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Email hello@reblys.com and we will respond within one month.
You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.
9.Changes to this policy
We will update this page when our practices change and show the date of the latest version at the top. Material changes will be announced to customers by email.