1.Who is responsible
Reblys Tender Management is the data controller for the personal data described in this policy.
Reblys Tender Management
Lyngbyvej 83, 2100 Copenhagen, Denmark
Email: hello@reblys.com
Questions about privacy or requests to exercise your rights can be sent to the same address.
2.What we collect
- Access and digest requests. Name, company, work email, country, what you sell, an optional message, and whether you want the free weekly digest.
- Report requests. Your work email and, if you give it, your company, when you ask for our report. We email you the download link and may write once to ask what you thought. You only get the weekly digest if you tick that box and confirm.
- Correspondence. The content of emails you send to us and our replies.
- Customer data. For paid plans: contact details, billing details such as company address and VAT number, your product profile and alert settings, and your subscription history.
- Technical data. Our hosting provider records standard server logs (IP address, browser type, time and requested page) to keep the website secure and running.
- Business contact details for outreach. The company name and a company email address of suppliers that won public contracts, taken from published award notices, when we write to a company about Reblys. Every such email says how to opt out.
- Public tender data. Tender notices published by public buyers can contain names and contact details of procurement officers. We process these only as part of the notice, to show you where to direct questions about a tender.
We do not use cookies or advertising trackers on reblys.com. We count visits and report downloads anonymously, without cookies and without storing IP addresses. We also use Microsoft Clarity, without cookies, to see how pages are used (clicks, scrolling and anonymised session replays, with form input masked), and Google Analytics 4 in its cookieless mode (consent denied) to count visits and see where they come from. See our Cookie Policy.
3.Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering requests and setting up access | Steps prior to entering a contract, Art. 6(1)(b) |
| Providing the service to customers, including billing | Performance of a contract, Art. 6(1)(b) |
| Sending the free weekly digest | Your consent, Art. 6(1)(a), given via the checkbox. You can withdraw it at any time. |
| Sending a report you asked for, and one follow-up about it | Legitimate interest, Art. 6(1)(f), in answering your request. You can object at any time. |
| Keeping accounting records | Legal obligation, Art. 6(1)(c), under the Danish Bookkeeping Act |
| Website security and server logs | Legitimate interest, Art. 6(1)(f), in operating a secure service |
| Counting visits and downloads, and seeing how pages are used, without cookies | Legitimate interest, Art. 6(1)(f), in knowing which pages are useful |
| Writing to businesses about Reblys | Legitimate interest, Art. 6(1)(f), in direct marketing to businesses. You can object at any time and we will stop. |
| Processing public tender notices | Legitimate interest, Art. 6(1)(f), in providing access to public procurement information |
4.AI and your data
AI reads and translates tender notices, and a human reviews what we send. Your personal data is not used to train AI models, and we do not make decisions about you based solely on automated processing.
5.How long we keep it
- Requests that do not lead to a subscription: up to 24 months after our last contact.
- Outreach contacts: up to 12 months after our last email, or until you object.
- Digest subscription: until you unsubscribe.
- Customer data: for as long as you are a customer, and accounting records for 5 years after the end of the financial year, as required by Danish law.
- Server logs: for a limited period set by our hosting provider.
6.Where your data is stored
Our website is hosted on Vercel, our email lists are held by Brevo and our mailboxes by Zoho. Our GDPR & Data page lists every provider and where it processes data.
Some of our providers are based outside the EU. Where that is the case, they are bound by the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
8.Your rights
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Email hello@reblys.com and we will respond within one month.
You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.
9.Changes to this policy
We will update this page when our practices change and show the date of the latest version at the top. Material changes will be announced to customers by email.