Privacy Policy

Tenderlobby GmbH

Französische Straße 20, 10117 Berlin, Germany

Phone: +49 170 2871522 · Email: info@tenderlobby.com

Managing Director: Sophie Saggau

We process personal data of our users exclusively in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

The TenderLobby platform is intended exclusively for business users (B2B). Nevertheless, personal data of individual contact persons may be processed.

a) When visiting our website

• IP address
• Date and time of the request
• Time zone difference
• Requested content
• HTTP status code
• Browser type and version
• Operating system
• Referring website

Purpose: Ensuring stable operation, security, and error detection (Art. 6(1)(f) GDPR).

b) Registration and account creation

• Company name
• Contact person (first/last name)
• Professional email address
• Telephone number
• Company address
• Login credentials
• Assigned roles and permissions

Purpose: Contract fulfilment and provision of platform services (Art. 6(1)(b) GDPR).

c) Use of the platform — tenders & bidding

• Creating and managing tenders
• Submitting bids
• Documentation of procurement processes
• Optional payment-related processes

Purpose: Execution of the contractual relationship (Art. 6(1)(b) GDPR).

d) Contacting us

When contacting us by email or phone, we process the information provided to respond to your inquiry. Purpose: Legitimate interest in handling inquiries (Art. 6(1)(f) GDPR).

e) Error analysis (Sentry)

To detect and fix technical errors, we use Sentry, a service of Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Only when an error occurs are the error message and program flow, the requested address, time, browser type and version, operating system and a pseudonymous user ID transmitted. IP addresses are not stored and no cookies are set. The data is stored in the EU (Frankfurt am Main) and deleted after 90 days at the latest. A data processing agreement is in place with Sentry; transfers to the USA are based on the EU-U.S. Data Privacy Framework, alternatively on the EU Standard Contractual Clauses.

Purpose: Ensuring stable operation and analysing error reports (Art. 6(1)(f) GDPR).

f) Google Tag Manager, Google Analytics and LinkedIn Insight Tag

Only if you consent in the cookie banner do we load Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself sets no cookies; when it loads, Google processes your IP address and technical data about your browser. Depending on your choice, Tag Manager loads the following services:

• Analytics: Google Analytics 4 (Google Ireland Limited) — pseudonymous usage statistics: pages viewed, time on page, traffic source, device and browser data, approximate location. Google Analytics does not store IP addresses. The data is deleted after 14 months.
• Marketing: LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) — measuring the success of our LinkedIn campaigns. If you are logged in to LinkedIn, LinkedIn can link the data to your account.

Google and LinkedIn may transfer data to the USA. Google LLC and LinkedIn Corporation are certified under the EU-U.S. Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

Legal basis: your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings” in the page footer.

• IT service providers (hosting, maintenance, cloud services)
• Payment service providers (if used)
• Buyers and suppliers as required for tender processes

Data is transferred to third countries only when GDPR safeguards (e.g. SCCs, adequacy decisions) are in place.

We use strictly necessary cookies and, only with your consent, analytics and marketing cookies (see section 3 f). Please refer to our Cookie Policy for details.

• For as long as the user account is active
• According to applicable statutory retention periods (e.g., commercial and tax law: 6–10 years)
• Until a consent (if applicable) is withdrawn

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Please send requests to: info@tenderlobby.com

We use appropriate technical and organizational measures, including encryption (SSL/TLS), access restrictions, and secure server infrastructures, to protect personal data against loss, misuse, or unauthorized access.

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The current version is always available on our website.