Privacy Policy

This Privacy Policy describes how Bitlog Nordic AB ("the Company," "we," "us," or "our") collects, uses, and shares information when you use our website at www.bitlogwms.com and our Bitlog WMS mobile application (together, the "Service"). Please read this policy carefully.

For the purposes of this policy, Personal Data means any information relating to an identified or identifiable individual. Usage Data refers to data collected automatically through your use of the Service. The Company is the Data Controller under the GDPR — the entity that determines the purposes and means of processing your Personal Data.

1.1 Information You Provide

When you use our Service, we may ask you to provide personally identifiable information, including:

• Email address
• First and last name
• Phone number
• Address, state, province, ZIP / postal code, city

1.2 Usage Data (Website)

We automatically collect Usage Data when you visit our website. This may include your device's IP address, browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other diagnostic data.

If you access the Service via a mobile browser, we may also collect your mobile device type, unique device ID, mobile operating system, and mobile browser type.

1.3 Mobile Application Data

The Bitlog WMS mobile application does not collect, store, or process any personal data beyond what is strictly necessary for the app's core operations.

We use Google Firebase and similar third-party services to monitor app functionality and troubleshoot issues. These services may collect anonymized technical information, including:

• Device specifications (model, operating system version)
• Application usage patterns
• Crash reports and performance data

This data is used solely to maintain app reliability and improve the user experience. For more information, see the Google Firebase Privacy Policy.

1.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies (beacons, tags, scripts) to collect information about how you use our website. The types of cookies we use include:

• Necessary / Essential Cookies — Session cookies required to provide core website functionality.
• Cookie Policy Acceptance Cookies — Persistent cookies that record whether you have accepted our use of cookies.
• Functionality Cookies — Persistent cookies that remember your preferences, such as language settings.
• Tracking and Performance Cookies — Persistent cookies administered by third parties to track traffic and usage. These may identify individual visitors through pseudonymous identifiers.

You can instruct your browser to refuse all cookies or to notify you when a cookie is being sent. Note that refusing cookies may limit some functionality of the Service.

We use the information we collect for the following purposes:

• To provide and maintain the Service, including monitoring usage and performance.
• To manage your account and your registration as a user.
• To fulfill a contract — developing and performing purchase or service agreements with you.
• To contact you by email, phone, SMS, or other forms of electronic communication about updates, service information, or support.
• To send marketing communications about products, services, and events similar to those you have purchased or inquired about, unless you have opted out. We use HubSpot to send marketing emails (HubSpot Privacy Policy). You can unsubscribe at any time using the link in any email we send.
• To deliver targeted advertising tailored to your interests and/or location, including behavioral remarketing after you have visited the Service. We use third-party services including Google Ads and Facebook for this purpose. You can opt out of interest-based advertising through the NAI opt-out platform, the EDAA opt-out platform, or the DAA opt-out platform. On mobile, use Limit Ad Tracking (iOS) or Opt Out of Ads Personalization (Android) in your device settings.
• For analytics — to understand how the Service is used, identify trends, and evaluate and improve our Service and marketing campaigns. We use Google Analytics for this purpose. You can opt out by installing the Google Analytics opt-out browser add-on.
• For business transfers — to evaluate or conduct a merger, acquisition, restructuring, or sale of all or part of our business.

We do not sell your personal data. We may share your information in the following circumstances:

3.1 Service Providers

We share data with trusted third-party companies that perform services on our behalf, including analytics, advertising, marketing, and customer support. These providers act as Data Processors under the GDPR and are contractually required to protect your data and use it only for the purposes we specify. Our current service providers include:

• Google Analytics — website analytics. Privacy Policy
• Google Ads — advertising and remarketing. Privacy Policy · Opt-out
• Google Firebase — mobile app analytics and diagnostics. Privacy Policy
• HubSpot — marketing email and CRM. Privacy Policy
• Facebook (Meta)— advertising and remarketing. Privacy Policy · Opt-out
• LinkedIn — advertising. Privacy Policy

3.2 Business Transfers

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

3.3 Affiliates and Business Partners

We may share your information with our parent company, subsidiaries, joint venture partners, or other companies under common control, who are required to honor this Privacy Policy. We may also share data with business partners to offer you certain products, services, or promotions.

3.4 Other Users

If you share information or interact in public areas of the Service, that information may be visible to other users.

3.5 Legal Disclosure

We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend the rights or property of the Company; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of users or the public; or protect against legal liability.

3.6 With Your Consent

We may share your information for any other purpose with your explicit consent.

3.7 Links to Other Websites

Our Service may contain links to websites not operated by us. We have no control over and assume no responsibility for the content or privacy practices of any third-party sites. We encourage you to review the privacy policy of any site you visit.

4.1 Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your Personal Data on one or more of the following legal bases:

• Consent — you have given consent for a specific purpose.
• Contract performance — processing is necessary to fulfill an agreement with you.
• Legal obligation — processing is required by law.
• Vital interests — processing is necessary to protect someone's life.
• Legitimate interests — processing is necessary for our legitimate business interests, balanced against your rights.

4.2 Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your Personal Data:

• Right to Access — request a copy of the Personal Data we hold about you.
• Right to Rectification — request correction of inaccurate or incomplete data.
• Right to Erasure — request deletion of your Personal Data, under certain conditions.
• Right to Restrict Processing — request that we limit how we use your data, under certain conditions.
• Right to Object — object to processing based on legitimate interests or for direct marketing purposes.
• Right to Data Portability — request a copy of your data in a structured, machine-readable format, where processing is based on consent or contract performance.
• Right to Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

4.3 How to Exercise Your Rights

To exercise any of the above rights, please contact us at hello@bitlog.se. We may verify your identity before responding and will make every effort to reply within 30 days.

4.4 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Sweden, the relevant authority is:

Integritetsskyddsmyndigheten (IMY)
Box 8114, 104 20 Stockholm, Sweden
www.imy.se

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data protection practices
• Incident response procedures

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.

We retain your Personal Data only for as long as necessary to fulfill the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining how long to retain data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.

Usage Data is generally retained for a shorter period, except when it is used to improve the security or functionality of the Service or we are legally obligated to retain it longer.

Your information, including Personal Data, may be transferred to and processed on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside Sweden and choose to provide information to us, please be aware that we transfer data to Sweden and process it there. By using our Service, you consent to this transfer. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page and revising the "Last updated" date. Where appropriate, we will also notify you by email or by a prominent notice on our Service prior to the change taking effect.

We encourage you to review this Privacy Policy periodically. Changes are effective when posted on this page.

If you have any questions about this Privacy Policy, please contact us:

• Email: hello@bitlog.se
• Phone: +46 (0)8-643 68 00
• Address: Bitlog Nordic AB, Vasagatan 52, 111 20 Stockholm, Sweden