Bitly Privacy Policy
Bitly rewrote and heavily trimmed its privacy policy. The biggest change is that the entire section explaining who your data is shared with (payment processors, tax/legal advisors, service providers, marketing vendors, etc.) and the specific 3-year data retention schedule was deleted, leaving far less detail about these practices. Several smaller disclosures were also dropped, including notices about email-open tracking, sub-user data collection, content retention after you close your account, and your ability to unsubscribe from certain messages. The rest of the changes are formatting (headings, a cookie-policy link, table markup) with no effect on your rights.
Detailed list of who gets your data was deleted
Bitly removed the whole section that spelled out which kinds of outside companies receive your data and why — things like payment processors, tax/legal advisors, customer-support tools, email marketing vendors, and ad partners. That information is gone from the general policy now, so it's much harder to know who ends up with your data.
“The following categories of personal data generated through your use of the Services are shared publicly, within Bitly and with the following categories of third parties for the business purposes described below.”
What you can do — Email privacy@bit.ly and ask for the current list of third parties who receive your data if you want specifics.
DATA SHARING
The stated 3-year data retention limit was removed
The policy used to promise that your data gets deleted or anonymized after 3 years of no contact (or sooner if you ask). That promise, and the whole explanation of how long data is kept, has been deleted. There's no general retention time limit stated anymore.
“...or after 3 years following the last contact with the data subject, whichever occurs first.”
What you can do — Email privacy@bit.ly to ask how long your data will now be kept, or request deletion of your data directly.
DATA RETENTION
Warning about content being kept and shared after you close your account was removed
Bitly previously told you plainly that stuff you post could still be kept and shared with others even after you shut down your account. That warning is gone, so it's less clear what happens to your content when you leave.
“...all content submitted by you to the Services may be retained by Bitly, even after you terminate your Account and may continue to be shared by third parties, as described in this Privacy Policy.”
What you can do — If you close your account, email privacy@bit.ly to explicitly request deletion of content you previously submitted.
DATA RETENTION
Disclosure of sub-user data collection was removed
If you add other people as sub-users to your account, Bitly used to list exactly what data it collects about them (name, email, IP address, employer, phone number). That disclosure is now gone.
“If you create a sub-user, the following personal data of the sub-user will be processed: Name, email address, IP address of the user's device, date and time of sub-user creation, login information, employer, phone number.”
What you can do — If you manage sub-users, ask privacy@bit.ly directly what data is collected about them before adding anyone.
DATA COLLECTION
Email-open tracking disclosure removed
Bitly used to tell you that it tracks when you open their emails. That line was deleted, so you're no longer told about this specific tracking in the policy.
“We may receive a confirmation when you open an email from us. We use this confirmation to improve our customer service.”
DATA COLLECTION
Statement about unsubscribing from certain messages was removed
The policy used to tell you that you could turn off certain types of Bitly messages in your account settings. That explanation has been deleted, making it less clear how to control what Bitly sends you.
“You may unsubscribe from receiving certain types of these messages through your Account settings, although Bitly reserves the right to contact you when we believe it is necessary, such as for administrative and account management purposes.”
What you can do — Check your Account settings for message preferences, or email privacy@bit.ly to stop non-essential communications.
OTHER
| 1 | ## Updated: September 2024 | |
± CHANGEDRemoved 'last updated' date and reformatted headings The 'Updated: September 2024' banner was dropped and several section titles switched from bold text to markdown headings. This is just formatting. | ||
| 2 | ||
| 3 | 1 | This Privacy Policy outlines how we collect, use and share personal data of people who use or are connected to our services, are interested in Bitly or its services, or to whom we wish to market our services. This Privacy Policy also provides you with information on your rights as a data subject and how to reach us if you have any questions. |
| 4 | 2 | |
| 5 | 3 | This Privacy Policy does not apply to the practices of other businesses that Bitly does not own or control, including other companies' websites, services and applications ("Third Party Services") that you can access through the Services or to individuals that Bitly does not manage or employ. We encourage you to review the privacy policies of any Third Party Services you access or use. Please note that we cannot take responsibility for the content or privacy policies of Third Party Services, and any third party policies linked to this Privacy Policy are strictly for informational purposes only. |
| 6 | 4 | |
| 7 | 5 | Please note that our privacy practices are subject to the applicable laws of the regions in which we operate. Accordingly, some additional region-specific terms will only apply to individuals in those locations, or as required by applicable laws. _**If you are a United States resident of California, Virginia, Colorado, Connecticut or certain other U.S. states**_, please see the sections titled **California Privacy Rights**, and **Virginia/Colorado/Connecticut and certain other U.S. State Privacy Rights** for specific disclosures with respect to our collection, use, and disclosure of your information and additional rights you have under applicable U.S. laws. |
| 8 | 6 | |
| 9 | 7 | **ACCESSIBILITY:** IF YOU ARE HAVING ANY TROUBLE ACCESSING THIS PRIVACY POLICY, PLEASE CONTACT US AT [PRIVACY@BIT.LY](mailto:PRIVACY@BIT.LY). |
| 10 | 8 | |
| 11 | Contact Information | |
| 9 | #### Contact Information | |
| 12 | 10 | |
| 13 | This Privacy Policy describes the policies and procedures of **Bitly, Inc.**, DPT 5006, 601 W. 26th Street, Suite 357 (3rd Floor), New York, NY 10001, the United States, ("Bitly Inc."), and **Bitly Europe GmbH**, c/o BK Wirtschaftstreuhand GmbH, Spichernstraße 1, 10777 Berlin, Germany ("Bitly Europe"), (Bitly Inc. and Bitly Europe collectively "Bitly") for the collection, use, and disclosure of personal data about you for which either of us act as the data controller, or for which we act as joint controllers, in accordance with the European Data Protection Regulation ("GDPR") and other applicable laws. | |
| 11 | This Privacy Policy describes the policies and procedures of Bitly, Inc., DPT 5006, 601 W. 26th Street, Suite 357 (3rd Floor), New York, NY 10001, the United States, ("Bitly Inc."), and Bitly Europe GmbH, c/o BK Wirtschaftstreuhand GmbH, Spichernstraße 1, 10777 Berlin, Germany ("Bitly Europe"), (Bitly Inc. and Bitly Europe collectively "Bitly") for the collection, use, and disclosure of personal data about you for which either of us act as the data controller, or for which we act as joint controllers, in accordance with the European Data Protection Regulation ("GDPR") and other applicable laws. | |
| 14 | 12 | |
| 15 | If you have any questions or concerns regarding privacy when using the Services of Bitly wish to use your rights, such as to object to the processing or have your personal data removed, please send us a detailed message to: [privacy@bit.ly](mailto:privacy@bit.ly) for US matters and/or [privacy-eu@bit.ly](mailto:privacy-eu@bit.ly) for EU matters. We will make every effort to resolve your concerns. Please also see "**Rights of Data Subjects**" for more detailed information on your rights as the data subject. The designated data protection officer of Bitly Europe is **DataCo GmbH**, Nymphenburger Str. 86, 80636 Munich, Germany, [datenschutz@dataguard.de](mailto:datenschutz@dataguard.de), [www.dataguard.de](https://www.dataguard.de/). | |
± CHANGEDSimplified contact section The promise to 'make every effort to resolve your concerns' and the pointer to the 'Rights of Data Subjects' section were removed from the contact block; the core contact emails and DPO info stayed. | ||
| 13 | If you have any questions or concerns regarding privacy when using the Services of Bitly, or wish to use your rights, such as to object to the processing or have your personal data removed, please send us a detailed message to privacy@bit.ly for US matters and/or privacy-eu@bit.ly for EU matters. The designated data protection officer of Bitly Europe is DataCo GmbH, Nymphenburger Str. 86, 80636 Munich, Germany. | |
| 16 | 14 | |
| 17 | Bitly Group Services | |
| 15 | #### Bitly Group Services | |
| 18 | 16 | |
| 19 | **Bitly Services** Bitly collects personal data about you from the following sources, as described in this Privacy Policy, when you (i) register for the Site and the Services, through your user account with Bitly, including registering through a third-party service (your "Account"); (ii) use the Services; or (iii) view or interact with a Bitly link, QR Code, Link in Bio or other Bitly Product (either our bit.ly links or one of our branded domains) on a third-party website. We collect the following types of information from you, some of which might be considered personal data under applicable law: | |
| 17 | Bitly collects personal data about you from the following sources when you (i) register for the Site and the Services, through your user account with Bitly, including registering through a third-party service (your "Account"); (ii) use the Services; or (iii) view or interact with a Bitly link, QR Code, Link in Bio or other Bitly Product (either our bit.ly links or one of our branded domains) on a third-party website. | |
| 20 | 18 | |
| 21 | **When You Register for a Bitly Account** | |
| 19 | When You Register for a Bitly Account. When you create an Account, we collect personal data from you, such as your name, phone number, company name, industry, job title, company size, email address and sign-in information. If you create an Account using login information from a third-party account, such as Google, Facebook, Apple, or Twitter, we will access and collect the personal data about you that the third-party account provides. We use your contact information to send you information about our Services and communicate with you about your Account, your activities on our Site and Services and policy changes. | |
| 22 | 20 | |
| 23 | When you create an Account, we collect the personal data from you, such as your name, phone number, company name, industry, job title, company size, email address, phone number and sign-in information. If you create an Account using your login information from a third-party account, such as Google, Facebook, Apple, or Twitter, we will access and collect the personal data about you that the third-party account provides (which is based on your privacy settings with the third-party account), so that you can log into your Account with us. We use your contact information to send you information about our Services and communicate with you about your Account, your activities on our Site and Services and policy changes. You may unsubscribe from receiving certain types of these messages through your Account settings, although Bitly reserves the right to contact you when we believe it is necessary, such as for administrative and account management purposes. | |
− REMOVEDRemoved the unsubscribe notice for account messages The line telling you that you can turn off certain account messages in your settings (though Bitly can still contact you for administrative reasons) was deleted. | ||
| 21 | When You Create a Bitly Link, QR Code or Link in Bio. When you create a shortened link, QR Code, Link in Bio or other Bitly Product, Bitly collects and stores both the original URL and any shortened URL and, if you are logged in to your Account, we will associate that information with your Account. Bitly also collects and stores your IP address, your geolocation data (which we derive from your IP address), the time and date on which you shortened the original URL, and if you share a Bitly Product on a social networking platform, the name of the platform and your username on that platform. | |
| 24 | 22 | |
| 25 | We may receive a confirmation when you open an email from us. We use this confirmation to improve our customer service. | |
− REMOVEDRemoved email-open tracking disclosure The sentence disclosing that Bitly tracks when you open their emails, used to improve customer service, was deleted. | ||
| 23 | When You Interact With a Bitly Product. Bitly automatically collects personal data about the interaction (such as clicks or views) with every Bitly Product created through the Services. This information includes, but is not limited to: (i) the IP address and location derived from the IP address; (ii) internet or other electronic network activity information like the referring websites or services; (iii) the time and date of each access; (iv) device settings, such as browser type, operating system, and language; and (v) cookies, as described in our cookie policy, and mobile advertising identifiers. | |
| 26 | 24 | |
| 27 | You have the opportunity to add sub-users to your Account. If you create a sub-user, the following personal data of the sub-user will be processed: Name, email address, IP address of the user's device, date and time of sub-user creation, login information, employer, phone number. | |
− REMOVEDRemoved sub-user data collection disclosure The paragraph explaining what personal data is collected about sub-users you add to your account (name, email, IP address, employer, phone number, etc.) was deleted. | ||
| 25 | Usage Across Devices. We use the information we collect to make inferences that a unique individual has created or interacted with Bitly links, QR Codes or Links in Bio on different devices so that we can detect, deter and prevent malicious, fraudulent or unlawful activity and analyze how users use our Services. | |
| 28 | 26 | |
| 29 | Some features of the Services allow registered users to provide their own content to the Services, such as written descriptions of URLs, comments, images and video. Unless you request deletion of your personal data as described in this Privacy Policy, all content submitted by you to the Services may be retained by Bitly, even after you terminate your Account and may continue to be shared by third parties, as described in this Privacy Policy. | |
− REMOVEDRemoved notice about content retention after account closure The statement warning that content you submit may be kept by Bitly and shared with third parties even after you close your account was deleted. | ||
| 27 | Other Uses. We also may use personal data to pursue legitimate interests, such as direct marketing, research (including marketing research), network and information security, prevention of fraudulent, malicious and unlawful activities, or any other purpose, as disclosed to you at the time you provide personal data or we contact you for the first time. | |
| 30 | 28 | |
| 31 | **When You Create a Bitly Link, QR code or Link in Bio (collectively "Bitly Products")** | |
| 29 | #### Contracts, Purchase Orders and Invoicing | |
| 32 | 30 | |
| 33 | One feature of the Services is the ability to create shortened uniform resource locators (URLs) of websites, QR codes linking to a URL, or a Link in Bio linking to a URL ("Bitly Products"). When you create a shortened link, QR code, Link in Bio or other Bitly product, Bitly collects and stores both the original URL and any shortened URL and, if you are logged in to your Account, we will associate that information with your Account. Bitly also collects and stores your IP address, your geolocation data (which we derive from your IP address), the time and date on which you shortened the original URL and/or created the Bitly Product, and if you share a Bitly Product on a social networking platform, the name of the platform and your username on that platform. | |
| 34 | ||
| 35 | **When You Interact With a Bitly Product** | |
| 36 | ||
| 37 | Bitly automatically collects personal data about the interaction (such as clicks or views) with every Bitly Product created through the Services (either our bit.ly links or one of our branded domains) on a third-party website. This information includes, but is not limited to: (i) the IP address and location derived from the IP address; (ii) internet or other electronic network activity information like the referring websites or services; (iii) the time and date of each access; (iv) device settings, such as browser type, operating system, and language; and (v) cookies, as described in our cookie policy, and mobile advertising identifiers. As described in this Privacy Policy, we use this personal data to provide the Services, to understand and analyze how our Services are used and to identify trends, and to detect, deter and prevent malicious, fraudulent or unlawful activity, and in some cases we show a Destination Preview which contains information about the link or QR Code end destination, and may or may not include advertising from third parties. Please see the "Information We Share" section below for a description of how we may share information we collect when you create, view or interact with Bitly Products. | |
| 38 | ||
| 39 | **Usage Across Devices** | |
| 40 | ||
| 41 | We use the information we collect to make inferences that a unique individual has created or interacted with Bitly links, QR codes or Links in Bio on different devices so that we can detect, deter and prevent malicious, fraudulent or unlawful activity and analyze how users use our Services. For example, if you created a Bitly Product on a computer connected to your residential WiFi network, and you soon thereafter clicked on a Bitly Product on a mobile device connected to the same WiFi network, we may infer that a single individual created and clicked on the Bitly Product because both events were associated with the same IP address in the same time period. | |
| 42 | ||
| 43 | **Other Uses** | |
| 44 | ||
| 45 | We also may use personal data to pursue legitimate interests, such as direct marketing, research (including marketing research), network and information security, prevention of fraudulent, malicious and unlawful activities, or any other purpose, as disclosed to you at the time you provide personal data or we contact you for the first time. | |
| 46 | ||
| 47 | **Information We Share** | |
| 48 | ||
| 49 | The Services are designed to help you share information with others. The following categories of personal data generated through your use of the Services are shared publicly, within Bitly and with the following categories of third parties for the business purposes described below. | |
− REMOVEDDeleted the full 'Information We Share' section An entire section describing all the categories of third parties your data is shared with (payment processors, tax/legal advisors, service providers, email marketing vendors, trust & safety partners, etc.) and the legal basis for sharing was removed from the general policy. | ||
| 50 | ||
| 51 | **Bitly Group Companies -** Personal data related to your Account and possible subscriptions for Services of Bitly Europe will be shared within Bitly to be used for our joint purposes as described under "Data Sharing and Joint Processing within Bitly". Please note that if you hold a Bitly Account(s) and/or use Bitly Services managed by us or other Bitly entities, such personal data is combined with personal data collected in connection with Bitly Services. Sharing and combining the personal data is based on Bitly's legitimate interests in finding synergies generated from performing, planning, and developing business in group level, and in promoting sales by cross and up-selling complementary products of group companies. | |
| 52 | ||
| 53 | **Bitly Products You Create -** Much of your activity on and through the Services is public by default. For example, when you create a Bitly Product, the original URLs you have shortened and the corresponding Bitly Product are publicly available, including the possibly included personal data. | |
| 54 | ||
| 55 | **Account Information -** Where permitted by law, if you register a Bitly Account with an email address on a domain owned by an organization, (for example, an employer or educational institution where you have an email account), we may share your email address and information about your Account, such as the number of links you have created, with that organization to explore the organization's interest in creating or managing an enterprise account or for related purposes. | |
| 56 | ||
| 57 | **Customer Support -** We use various tools for communication and to provide you with customer support. To use customer support, you must provide at least one valid email address. This data processing can include the following data: Name, email address, contract information, job title, employer, customer ID, payment information, communication data. Data is processed to provide the services, offer customer support, communication with interested persons, responding to inquiries and customer relationship management. If the purpose of the contact is to conclude a contract or if you already have an account then we retain your information as needed to verify and provide you access to the services. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected, to the extent further storage is not permitted or required by law. Personal data collection in connection with customer support will be shared within Bitly to be used for our joint purposes as described under "**Data Sharing and Joint Processing within Bitly.**" | |
| 58 | ||
| 59 | **Email Verification -** We use an email verification service. The email address of a user is processed for the purpose of verification and to filter invalid and spam email addresses/domains. All email addresses which are provided to the verification service by us are automatically deleted after the verification process. | |
| 60 | ||
| 61 | **Email Marketing -** For some services, we use email marketing providers to send transactional emails. When you register for our services, the data you enter during registration is transferred to our email marketing provider. This enables us to send you relevant emails, e.g. to confirm your registration or unsubscribe from our services. Further personal data may be stored and evaluated as a result, especially the user's activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system). For this purpose, your data will also be stored by our email marketing provider. Your data will not be passed on to third parties for the purpose of sending mails within the scope of using our services, nor will the vendor obtain the right to pass on your data. | |
| 62 | ||
| 63 | **Information You Elect to Share -** When creating a Bitly Product, you can share that Bitly Product through Third Party Services. Any information that you elect to distribute through Third Party Services, such as a social network post you create, may then become accessible to users of those services. You can also access other Third Party Services through the Services, for example by clicking on links in the Statistics page for a Bitly Product. We recommend that you review the terms of services and privacy policies of such Third Party Services that you access through the Services since Bitly does not control and is not responsible for the privacy practices of these Third Party Services. | |
| 64 | ||
| 65 | **Information Shared with Service Providers -** We may employ and contract with third parties to perform certain tasks on our behalf and under our direction (our "Service Providers"). We may need to share information about you with our Service Providers in order to fulfill certain business purposes, like providing our product with research and analytics on user behavior and providing advertising products and services to users, processing payments, and providing email marketing and support services. Our agreements with these Service Providers authorize them to use your information only as necessary to provide services to us. Transfers to subsequent third parties are covered by our agreements with our service providers. | |
| 66 | ||
| 67 | **Payment Processing -** For the transmission and verification of purchases, the data processed include bank account details, billing/shipping address, card expiration date, customer name, CVC code, date/time/amount of transaction, device ID, email address, IP address/location, customer ID, payment card details, tax ID/status, unique customer identifier. We share your data in these cases to allow the payment processing services necessary to process the payments for your account. | |
| 68 | ||
| 69 | **Service Optimization -** We use a variety of third party vendors in order to optimize our service. Vendors are used to evaluate the flow of visitors to our online offerings and may include behavior, interests or demographic information about visitors as pseudonymous values. With the help of these analyses, we can recognize, for example, which online offer, content or functions of our products are most frequently used or invite re-use. Likewise, we can understand which areas need optimization. Software may be used for analyzing and optimizing online offerings based on feedback functions and pseudonymously performed measurements and analyses of user behavior. In addition to web analytics, we may also use testing procedures, for example, to test and optimize different versions of our online offering or its components. | |
| 70 | ||
| 71 | This processing may include IP address, random unique identifiers, experiment and event data associated with these identifiers (such as device type, variation and experiment IDs, browser and OS version and elements of the site being tested), device screen resolution, device type (unique device identifiers), operating system, browser type, geographic location (country only), preferred language, mouse events (movements, location and clicks), referring URL and domain, pages visited, date and time when website pages were accessed. The legal basis for the processing of personal data is the user's given consent. In certain cases, your data will be processed on the basis of our legitimate interests of providing efficient, economical and recipient-friendly services and the improvement of our service. | |
| 72 | ||
| 73 | **Single Sign On -** For some services, we allow users to elect to use single sign on services such as Google OAuth. Single Sign on Services allow users to log in to other online presences with their profile without having to create separate accounts. | |
| 74 | ||
| 75 | **Tax and Legal -** Your personal data may be transferred to third parties for tax and legal reasons. Possible recipients are professionals (e.g. lawyers, tax consultants and auditors). In addition, data may be transferred to authorities (e.g. tax authorities) for tax and legal reasons. Such data transfer only takes place to recipients who are legally bound to secrecy. | |
| 76 | ||
| 77 | The data may include the email address, IP address of the user's device, date and time of registration, login information, address, contract information, payment information. | |
| 78 | ||
| 79 | We have a legitimate interest in sharing personal data with professional consultants and auditors for the purpose of appropriate tax and legal consultation, and in some cases we are legally required to share this data. | |
| 80 | ||
| 81 | **Trust & Safety Compliance -** We may share certain Bitly links, QR Codes, Link in Bio and/or related URLs, and the data collected when you create or interact with a Bitly Product to help detect, deter and prevent malicious, fraudulent or unlawful activity. | |
| 82 | ||
| 83 | **With Your Consent -** We will share information about you when you direct or otherwise instruct us to do so, such as when you share QR Codes or content with others through the Services, if you intentionally use or direct us or the Services to interact with third parties, or if we notify you that the information you provide will be shared in a particular manner and you provide such information (like sharing/posting it with a third-party Service). | |
| 84 | ||
| 85 | The legal basis for processing of customer data for the Services and related communications is that the processing is necessary for performance of the requested service and management of the customer relationship subject to Bitly Terms of Service. The legal basis for other communications with the customer, such as marketing, is our legitimate interests to promote sales and increase awareness of Bitly Services, and communicate with our interest groups. Where such communications require consent, for example if we wish to market via email our Services to a new customer who is a natural person in the EU, the legal basis is your consent. The legal basis for improving, monitoring and analyzing the Services, and to prevent malicious, fraudulent or unlawful activity is our legitimate interests to ensure security and lawfulness of our Services, including protecting data of our customers and users, and preventing unauthorized or wrongful use. | |
| 86 | ||
| 87 | This personal data is used to authenticate users to allow access to Bitly's Services, to identify users to provide customer support, and store events and log information about your use of the Services for purposes of audit in case of a security or other incident to have a trail of actions performed by us and our users, to maintain support records, to promote sales and increase awareness of Bitly's Services, and for purposes of service and product improvement, and to prevent malicious fraudulent or unlawful activity. The data is removed upon request, except for data (such as user name) stored in application logs and audit trails, which are deleted according to our standard data management cycle. We retain the personal data we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable legal obligations. Aggregated data sets that do not contain personal data are stored for an indefinite period for the purpose of business analysis. The personal data is erased from or anonymized in our systems upon request of the data subject or the customer they represent, or if the data is detected as irrelevant in our automated or manual system maintenance, or after 3 years following the last contact with the data subject, whichever occurs first. | |
− REMOVEDDeleted the specific data retention schedule The explicit rule that personal data is erased or anonymized after 3 years of no contact (or sooner on request) was removed along with the section it was in, so no general retention limit is now stated. | ||
| 88 | ||
| 89 | Contracts, Purchase Orders and Invoicing | |
| 90 | ||
| 91 | 31 | For any individual that acts as the contact person for our customer, supplier, partner or other entity that we conduct or wish to conduct business with, we process the following information: |
| 92 | 32 | |
| 93 | 33 | - Basic information (such as name, title, company name, work location and contact information) |
| 94 | 34 | - Business connections |
| 95 | 35 | - Communications |
| 96 | 36 | |
| 97 | 37 | The individual acting as the contact person in a primary source of information, but the personal data may also be collected from your employees, your colleagues, and our (other) customers, suppliers and partners. The personal data is used to discuss business, pursue business opportunities, send notifications related to our services and otherwise communicate with you, contracting, invoicing and making payments. The processing is based on our legitimate interests to comply with contractual obligations, or the terms of agreements we have (or have had), maintaining relationships, and operating our business. In addition, the invoicing related personal data will be used in accounting and reporting, which processing shall be based on our obligations under the law. |
| 98 | 38 | |
| 99 | Website and Contact Requests | |
| 39 | #### Website and Contact Requests | |
| 100 | 40 | |
| 101 | 41 | Bitly Inc and Bitly Europe process personal data gathered when you use or access their respective websites, including any and all subdomains of the sites (each "Site", as applicable), respectively. |
| 102 | 42 | |
| 103 | 43 | Each time Site is accessed, our system automatically collects data and relevant information from the computer system of the calling device. |
| 104 | 44 | |
| 105 | 45 | The following data is collected: |
| 120 | 60 | Twitter: [https://twitter.com/de/privacy](https://twitter.com/de/privacy) |
| 121 | 61 | YouTube: [https://business.safety.google/privacy/](https://business.safety.google/privacy/) |
| 122 | 62 | LinkedIn: [https://www.linkedin.com/legal/privacy-policy](https://www.linkedin.com/legal/privacy-policy) |
| 123 | 63 | |
| 124 | 64 | Bitly may use third-party APIs and software development kits ("SDKs") to provide certain functions in our Services. We use cookies and similar technologies for the following purposes: Technically necessary; Comfort; Statistics; Marketing. When we use cookies and/ or similar techniques for processing personal data, the types of personal data processed may vary, depending on the categories of cookies or similar techniques. Non-essential cookies are used only with your consent. You have the option of preventing cookies from being |
| 125 | 65 | |
| 126 | Please see our [Cookie Policy](https://bitly.com/pages/cookies) and [EU Cookie Policy](https://www.qr-code-generator.com/company/cookie-policy/) to learn how Bitly and its partners use cookies or similar technologies to analyze trends, administer the website, track users' movements around the website, and to gather demographic information about our user base. | |
| 66 | Please see our [Cookie Policy](https://mkt.bitly.net/cookies) and [EU Cookie Policy](https://www.qr-code-generator.com/company/cookie-policy/) to learn how Bitly and its partners use cookies or similar technologies to analyze trends, administer the website, track users' movements around the website, and to gather demographic information about our user base. | |
± CHANGEDUpdated cookie policy link The link to Bitly's Cookie Policy now points to a different URL on Bitly's own domain. | ||
| 127 | 67 | |
| 128 | Newsletters, Events and Marketing | |
| 68 | #### Newsletters, Events and Marketing | |
| 129 | 69 | |
| 130 | 70 | If you subscribe to our newsletter or for other materials (such as blogs, newsletters available on our websites), we will process the given contact information to send the newsletter or provide the materials. Such processing is based on your consent and the necessity to fulfill our obligation to provide the subscribed material(s). The contact information is retained and possibly shared as described below. |
| 131 | 71 | |
| 132 | 72 | We use following information to communicate on and promote our services (as compatible with the original purposes, if data is collected in another occasion): |
| 133 | 73 | |
| 134 | 74 | - Basic information (such as name, title, company name, work location, contact information) |
| 144 | 84 | The personal data above is used to generate leads, target marketing activities to the contacts representing potential and current customers (for example to help our sales teams to target their efforts to contacts with potential interest in our services) and other stakeholders (including our suppliers and partners), and to retarget and customize our marketing. Naturally, the data is used to provide product and service updates, announce new materials, invitations to our events, and otherwise market our products and services and provide related information in different channels, such as emails, phone calls, on social platforms and over display. For example, we may retarget relevant contacts by serving new retail content on LinkedIn based on previous engagement with retail content on the Bitly Group websites. In addition, personal data is used, as applicable, for business intelligence, market and customer analysis, reporting and statistical purposes, and to better understand how people interact with our websites and services. |
| 145 | 85 | |
| 146 | 86 | Once we have obtained your consent, the processing is needed to carry out marketing and reach our current and potential customers. You have a right to prohibit use of your contact information in marketing at any time by using the available web-tools (such as the "unsubscribe" button at the end of newsletter) or by sending us a notice (you can find the Contact Information at the very end of this Privacy Policy). |
| 147 | 87 | |
| 148 | 88 | Personal data stored for marketing purposes are deleted upon request of the contact, if the data is identified as out of date, or if the contact is no longer deemed a suitable candidate for our services. |
| 149 | 89 | |
| 150 | Data Sharing and Joint Processing within Bitly Group | |
| 90 | #### Data Sharing and Joint Processing within Bitly Group | |
| 151 | 91 | |
| 152 | 92 | Please note that if you hold a Bitly Account(s) and/or use Bitly Services managed by other Bitly entities, personal data collected by us is combined with personal data collected in connection with such other Services. Sharing and combining the personal data is based on Bitly's legitimate interests in finding synergies generated from performing, planning, and developing business at the group level, and in promoting sales by cross and up-selling complementary products of group companies. The Bitly group companies have combined their customer support services to provide more effective global customer support. Your inquiries can be answered by both Bitly Europe and Bitly Inc. employees and collaborators. You can assert your data subject rights with Bitly Inc. as well as with us. The primary responsibility under GDPR for the processing of data lies with the entity which you are contracting or which is communicating with you. |
| 153 | 93 | |
| 154 | 94 | Bitly Europe and Bitly Inc. are joint controllers according to Art. 26 GDPR. Bitly Inc. and Bitly Europe GmbH have concluded a joint controller agreement in accordance with the GDPR, in which we have made arrangements about our joint responsibilities with regards to the processing of your personal data. To protect your personal data, we have concluded so-called standard contractual clauses ("SCCs"). SCCs are data protection regulations issued by the European Commission, the conclusion of which imposes legal obligations on the data importer and the implementation of which guarantees compliance with European data protection standards. |
| 155 | 95 | |
| 156 | 96 | Personal data may be transferred outside the European Union and the European Economic Area, including, but not limited to, the United States of America as well as other locations and jurisdictions in which we conduct our business or our service providers are located. Such transfers are performed subject to standard data protection clauses adopted by the EU Commission in accordance with the GDPR, which are made available to the data subject upon request. |
| 364 | 304 | The IP addresses of the users are also stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, in the context of web analysis, A/B testing and optimization, no clear data of the users (such as e-mail addresses or names) are stored, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures. |
| 365 | 305 | |
| 366 | 306 | The purposes of this processing are reach measurement (e.g. access statistics, recognition of returning visitors); tracking (e.g. interest/behavior-related profiling, use of cookies); provision of our online offering and user-friendliness. Your personal data will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes. |
| 367 | 307 | |
| 368 | 308 | Processing of personal data within Google products is based upon your consent. However, in some cases the use of a Google product may also form part of our (pre)contractual services, or our interest in providing our users with efficient, economical and recipient-friendly services and the improvement of our service. |
| 369 | 309 | |
| 370 | **Use of Google AdSense and/or Ads Manager | |
| 371 | ** | |
| 310 | **Use of Google AdSense and/or Ads Manager** | |
| 372 | 311 | |
| 373 | 312 | In connection with Destination Preview, there may be advertising delivered by Google AdSense (https://adsense.google.com/) or Ad Manager (https://admanager.google.com/). Google may use cookies to serve ads based on a user's prior visits to your website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to your users based on their visits of certain websites. If you are in the European Economic Area (EEA), the UK, and Switzerland, Bitly will obtain your consent for the use of cookies or other local storage related to any such advertising, where legally required, and for the collection, sharing, and use of personal data for any ads personalization (if any). |
| 374 | 313 | |
| 375 | 314 | **Possibility of Revocation of Consent and Removal from Google** |
| 376 | 315 | |
| 377 | 316 | You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation. You may prevent the collection and processing of your personal data by Google by preventing the storage of cookies by third parties on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker to Google and to prevent the processing of this data by Google by downloading and installing the browser plug-in available under the following link: [https://tools.google.com/dlpage/gaoptout?hl=en](https://tools.google.com/dlpage/gaoptout) |
| 378 | 317 | With the following link you can deactivate the use of your personal data by Google: [https://adssettings.google.de](https://adssettings.google.de/) |
| 379 | 318 | Further information on objection and removal options against Google can be found at: [https://business.safety.google/privacy/](https://business.safety.google/privacy/) |
| 380 | 319 | |
| 381 | 320 | For more information on terms of use and data protection in connection with Google Analytics, please visit [www.google.com/analytics/terms/de.html](http://www.google.com/analytics/terms/de.html) or [www.google.com/intl/de/analytics/privacyoverview.html](https://www.google.com/intl/de/analytics/privacyoverview.html). In addition, you can object to processing on the basis of legitimate interest by sending an email to [privacy@bit.ly](mailto:privacy@bit.ly). |
| 382 | 321 | |
| 383 | Rights under the GDPR | |
± CHANGEDRemoved 'Rights under the GDPR' subheading The heading introducing the list of GDPR rights was removed, but the rights themselves are still listed right below. | ||
| 384 | ||
| 385 | 322 | If you are a resident of the EEA or Switzerland, or otherwise subject to the GDPR, and we process your personal data, you have the right to ask for the following rights: |
| 386 | 323 | |
| 387 | 324 | - In all cases a right to be informed about processing by Bitly that pertains to personal data based on which you may be identified, and access to a copy of such personal data (Art. 15 GDPR). |
| 388 | 325 | - If the personal data that is being processed is incorrect or inaccurate, you are entitled to demand for the data to be corrected (Art. 16 GDPR). |
| 389 | 326 | - Subject to the conditions set in the GDPR, you may demand for the deletion or limitation of the processing and have the right to object to the processing altogether (Art. 17, 18, and 21 GDPR). |
| 390 | 327 | - If the processing is based on your consent or a contract and the processing of data is carried out using automated procedures, you may be entitled to data transferability (Article 20 GDPR). |
| 424 | 361 | Depending on your location, information about you may be transferred to the United States or other countries outside the EU or European Economic Area (EEA) or may be processed there. These data transfers are necessary to provide you with the Services and functionalities you have requested as outlined in this policy. |
| 425 | 362 | |
| 426 | 363 | To protect your personal data, we rely on appropriate legal basis for each data transfer. In particular, we use contractual safeguards such as Standard Contractual Clauses approved by the European Commission. Where applicable, we base data transfers also on adequacy decisions issued by the European Commission. |
| 427 | 364 | |
| 428 | 365 | Please feel free to contact us for further information about international data transfers, including to obtain access to a copy of applicable safeguards. |
| 429 | 366 | |
| 430 | California Privacy Rights | |
| 367 | #### California Privacy Rights | |
| 431 | 368 | |
| 432 | 369 | The California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020, provides you with specific rights regarding your "personal information," as that term is defined under the CCPA. This section describes the rights that California consumers have and explains how to exercise those rights. For the purposes of this section, personal information does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA. To be clear, these rights are granted only to the extent that you are a California consumer and we are acting as a "business" under the CCPA with respect to your personal information. The rights in this section are not intended to grant you additional rights, but only your rights under the CCPA. |
| 433 | 370 | |
| 434 | 371 | _Information We Collect; How We Collect It; How We Use It_ |
| 435 | 372 | |
| 436 | 373 | We have collected the following categories of personal information from consumers from the sources described in the Privacy Policy above, specifically the categories of sources identified in the subsection titled "Bitly Connections Platform Services" (under the section "Bitly Group Services"), and have shared such personal information with the following categories of third parties within the last twelve (12) months: |
| 437 | 374 | |
| 438 | <table><tbody><tr><td colspan="1" rowspan="1"><p><span>Category</span></p></td><td colspan="1" rowspan="1"><p><span>Examples</span></p></td><td colspan="1" rowspan="1"><p><span>Business or Commercial Purposes for Collecting Personal Information</span></p></td><td colspan="1" rowspan="1"><p><span>Disclosed in the Prior Twelve (12) Months for the Following Business Purposes</span></p></td><td colspan="1" rowspan="1"><p><span>"Sold" or "Shared" in the Prior Twelve (12) Months for the Following Purposes</span></p></td><td colspan="1" rowspan="1"><p><span>Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>A. Personal identifiers.</span></p></td><td colspan="1" rowspan="1"><p><span>A real name, postal address, online identifier, Internet Protocol address, email address, account name.</span></p></td><td colspan="1" rowspan="1"><p><span>To register your Bitly account or create a Bitly link</span></p><p><span>To communicate with you</span></p><p><span>To provide customer support</span></p><p><span>Marketing and advertising</span></p><p><span>Service optimization and analytics</span></p><p><span>To detect, deter and prevent malicious, fraudulent or unlawful activity</span></p></td><td colspan="1" rowspan="1"><p><span>For the security and integrity of our services, to verify or maintain the quality or safety of services, and to identify and repair errors</span></p><p><span>Undertaking internal research for service optimization</span></p><p><span>Providing advertising and marketing services</span></p><p><span>Auditing related to counting ad impressions to unique visitors</span></p><p><span>For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</span></p></td><td colspan="1" rowspan="1"><p><span>None</span></p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>B. Personal information covered by the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).</span></p><p><span>Some personal information included in this category may overlap with other categories.</span></p></td><td colspan="1" rowspan="1"><p><span>A name, physical characteristics or description, address, telephone number, credit card number, debit card number, or any other financial information, medical information.</span></p></td><td colspan="1" rowspan="1"><p><span>To register your Bitly account</span></p><p><span>To communicate with you</span></p><p><span>To provide customer support</span></p><p><span>Marketing and advertising</span></p><p><span>Service optimization and analytics</span></p><p><span>To detect, deter and prevent malicious, fraudulent or unlawful activity</span></p></td><td colspan="1" rowspan="1"><p><span>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors</span></p><p><span>Undertaking internal research for service optimization</span></p><p><span>Providing advertising and marketing services</span></p><p><span>Auditing related to counting ad impressions to unique visitors</span></p><p><span>For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</span></p></td><td colspan="1" rowspan="1"><p><span>None</span></p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>C. Protected classification characteristics under California or federal law.</span></p></td><td colspan="1" rowspan="1"><p><span>Age and gender.</span></p></td><td colspan="1" rowspan="1"><p><span>Marketing and advertising</span></p></td><td colspan="1" rowspan="1"></td><td colspan="1" rowspan="1"><p><span>None</span></p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>D. Commercial information.</span></p></td><td colspan="1" rowspan="1"><p><span>Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.</span></p></td><td colspan="1" rowspan="1"><p><span>To provide customer support</span></p><p><span>Marketing and advertising</span></p><p><span>Service optimization and analytics</span></p><p><span>To detect, deter and prevent malicious, fraudulent or unlawful activity</span></p></td><td colspan="1" rowspan="1"><p><span>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors</span></p><p><span>Undertaking internal research for service optimization</span></p><p><span>For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</span></p></td><td colspan="1" rowspan="1"><p>None</p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>F. Internet or other similar network activity.</span></p></td><td colspan="1" rowspan="1"><p><span>Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.</span></p></td><td colspan="1" rowspan="1"><p><span>To register your Bitly account or create a Bitly link</span></p><p><span>When you interact with a Bitly link, as needed to provide services to our customers</span></p><p><span>Marketing and advertising</span></p><p><span>Service optimization and analytics</span></p><p><span>To detect, deter and prevent malicious, fraudulent or unlawful activity</span></p></td><td colspan="1" rowspan="1"><p><span>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors</span></p><p><span>Undertaking internal research for service optimization</span></p><p><span>Providing advertising and marketing services</span></p><p><span>Auditing related to counting ad impressions to unique visitors</span></p><p><span>For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</span></p></td><td colspan="1" rowspan="1"><p><span>None</span></p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>G. Location data.</span></p></td><td colspan="1" rowspan="1"><p><span>Physical location.</span></p></td><td colspan="1" rowspan="1"><p><span>To create a Bitly link</span></p><p><span>When you interact with a Bitly link, to detect, as needed to provide services to our customers</span></p><p><span>Marketing and advertising</span></p><p><span>Service optimization and analytics</span></p><p><span>To detect, deter and prevent malicious, fraudulent or unlawful activity</span></p></td><td colspan="1" rowspan="1"><p><span>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors</span></p><p><span>Undertaking internal research for service optimization</span></p><p><span>Providing advertising and marketing services</span></p><p><span>Auditing related to counting ad impressions to unique visitors</span></p><p><span>For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</span></p></td><td colspan="1" rowspan="1"><p><span>None</span></p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr><tr><td colspan="1" rowspan="1"><p><span>H. Inferences drawn from other personal information for profiling purposes.</span></p></td><td colspan="1" rowspan="1"><p><span>Used to create a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.</span></p></td><td colspan="1" rowspan="1"><p><span>When you interact with a Bitly link, as needed to provide services to our customers</span></p><p><span>Marketing and advertising</span></p><p><span>Service optimization and analytics</span></p><p><span>To detect, deter and prevent malicious, fraudulent or unlawful activity</span></p></td><td colspan="1" rowspan="1"><p><span>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errors</span></p><p><span>Undertaking internal research for service optimization</span></p><p><span>Providing advertising and marketing services</span></p><p><span>Auditing related to counting ad impressions to unique visitors</span></p><p><span>For other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</span></p></td><td colspan="1" rowspan="1"><p><span>None</span></p></td><td colspan="1" rowspan="1"><p><span>Service providers who perform business services for us</span></p></td></tr></tbody></table> | |
| 375 | <table><tbody><tr><td>Category</td><td>Examples</td><td>Business or Commercial Purposes for Collecting Personal Information</td><td>Disclosed in the Prior Twelve (12) Months for the Following Business Purposes</td><td>"Sold" or "Shared" in the Prior Twelve (12) Months for the Following Purposes</td><td>Categories of Third Parties With Whom We Disclose, Sell, or Share Personal Information</td></tr><tr><td>A. Personal identifiers.</td><td>A real name, postal address, online identifier, Internet Protocol address, email address, account name.</td><td>To register your Bitly account or create a Bitly linkTo communicate with youTo provide customer supportMarketing and advertisingService optimization and analyticsTo detect, deter and prevent malicious, fraudulent or unlawful activity</td><td>For the security and integrity of our services, to verify or maintain the quality or safety of services, and to identify and repair errorsUndertaking internal research for service optimizationProviding advertising and marketing servicesAuditing related to counting ad impressions to unique visitorsFor other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</td><td>None</td><td>Service providers who perform business services for us</td></tr><tr><td>B. Personal information covered by the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).Some personal information included in this category may overlap with other categories.</td><td>A name, physical characteristics or description, address, telephone number, credit card number, debit card number, or any other financial information, medical information.</td><td>To register your Bitly accountTo communicate with youTo provide customer supportMarketing and advertisingService optimization and analyticsTo detect, deter and prevent malicious, fraudulent or unlawful activity</td><td>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errorsUndertaking internal research for service optimizationProviding advertising and marketing servicesAuditing related to counting ad impressions to unique visitorsFor other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</td><td>None</td><td>Service providers who perform business services for us</td></tr><tr><td>C. Protected classification characteristics under California or federal law.</td><td>Age and gender.</td><td>Marketing and advertising</td><td></td><td>None</td><td>Service providers who perform business services for us</td></tr><tr><td>D. Commercial information.</td><td>Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.</td><td>To provide customer supportMarketing and advertisingService optimization and analyticsTo detect, deter and prevent malicious, fraudulent or unlawful activity</td><td>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errorsUndertaking internal research for service optimizationFor other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</td><td>None</td><td>Service providers who perform business services for us</td></tr><tr><td>F. Internet or other similar network activity.</td><td>Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.</td><td>To register your Bitly account or create a Bitly linkWhen you interact with a Bitly link, as needed to provide services to our customersMarketing and advertisingService optimization and analyticsTo detect, deter and prevent malicious, fraudulent or unlawful activity</td><td>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errorsUndertaking internal research for service optimizationProviding advertising and marketing servicesAuditing related to counting ad impressions to unique visitorsFor other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</td><td>None</td><td>Service providers who perform business services for us</td></tr><tr><td>G. Location data.</td><td>Physical location.</td><td>To create a Bitly linkWhen you interact with a Bitly link, to detect, as needed to provide services to our customersMarketing and advertisingService optimization and analyticsTo detect, deter and prevent malicious, fraudulent or unlawful activity</td><td>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errorsUndertaking internal research for service optimizationProviding advertising and marketing servicesAuditing related to counting ad impressions to unique visitorsFor other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</td><td>None</td><td>Service providers who perform business services for us</td></tr><tr><td>H. Inferences drawn from other personal information for profiling purposes.</td><td>Used to create a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.</td><td>When you interact with a Bitly link, as needed to provide services to our customersMarketing and advertisingService optimization and analyticsTo detect, deter and prevent malicious, fraudulent or unlawful activity</td><td>Helping to ensure the security and integrity of our services, to verify or maintain the quality or safety of our services, and to identify and repair errorsUndertaking internal research for service optimizationProviding advertising and marketing servicesAuditing related to counting ad impressions to unique visitorsFor other business services performed on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services.</td><td>None</td><td>Service providers who perform business services for us</td></tr></tbody></table> | |
| 439 | 376 | |
| 440 | 377 | We do not use or disclose sensitive personal information, as that term is defined under the CCPA. The categories of personal information described above are anonymized or erased from our systems upon request, if the data is detected as irrelevant in our automated or manual system maintenance, or after 3 years following the last contact with the relevant individual, whichever occurs first. |
| 441 | 378 | |
| 442 | 379 | _Selling or Sharing of Personal Information_ |
| 443 | 380 | |
| 444 | 381 | Bitly does not "sell" or "share" your personal information to third parties, as those terms are used in the CCPA. |
| 493 | 430 | In addition to the above rights, under California Civil Code Section 1798.83 ("Shine the Light"), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties' direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us by email at [privacy@bit.ly](mailto:privacy@bit.ly). If you do not want your personal information shared with any third party who may use such information for direct marketing purposes, then you may opt out of such disclosures by sending an email to us at [privacy@bit.ly](mailto:privacy@bit.ly). |
| 494 | 431 | |
| 495 | 432 | _Contacting Us_ |
| 496 | 433 | |
| 497 | 434 | If you have questions or concerns about this privacy policy, your California privacy rights, or our information practices, please email us at [privacy@bit.ly](mailto:privacy@bit.ly). |
| 498 | 435 | |
| 499 | Virginia/Colorado/Connecticut and certain other U.S. State Privacy Rights | |
| 436 | #### Virginia/Colorado/Connecticut and certain other U.S. State Privacy Rights | |
| 500 | 437 | |
| 501 | 438 | The Virginia Consumer Data Protection Act, the Colorado Privacy Act, and the Connecticut Data Privacy Act and similar laws in other U.S. states ("State Privacy Laws") provide their consumers with specific rights regarding their personal data. To the extent that you are a resident of one of these states, this section describes your rights under the State Privacy Laws and explains how you may exercise these rights. |
| 502 | 439 | |
| 503 | 440 | The categories of personal data we process, our purposes for processing your personal data, the categories of personal data that we share with third parties, and the categories of third parties with whom we share it are set forth in the terms of the Privacy Policy above. |
| 504 | 441 | |
| 505 | 442 | _Rights to Your Information_ |
| 537 | 474 | If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. You will have the right to appeal within a reasonable period of time after you have received our decision. Within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general's office to submit a complaint. |
| 538 | 475 | |
| 539 | 476 | **Nevada Privacy Rights** |
| 540 | 477 | |
| 541 | 478 | If you are a resident of Nevada, you have the right to opt out of the sale of certain personal data that we have collected (or may collect) from you to data brokers or other third parties. You can exercise this right by emailing us at [privacy@bit.ly](mailto:privacy@bit.ly) with the subject line "Nevada Do Not Sell Request." |
| 542 | 479 | |
| 543 | Children's Privacy | |
| 480 | #### Children's Privacy | |
| 544 | 481 | |
| 545 | 482 | We do not knowingly collect personal data from children. If we learn that we have collected personal data of a child under 13 (or older as required by applicable law), we will take steps to delete such information from our systems as soon as possible. If you believe we might have any personal data from or about a child under 13, please contact us at [privacy@bit.ly](mailto:privacy@bit.ly). |
| 546 | 483 | |
| 547 | Data Privacy Framework (EU-US, UK Extension and Swiss-US) | |
| 484 | #### Data Privacy Framework (EU-US, UK Extension and Swiss-US) | |
| 548 | 485 | |
| 549 | 486 | Bitly complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Bitly has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Bitly has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit [https://www.dataprivacyframework.gov/](https://www.dataprivacyframework.gov/). |
| 550 | 487 | |
| 551 | 488 | In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Bitly commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS Data Privacy Framework Dispute Resolution, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit [https://www.jamsadr.com/DPF-Dispute-Resolution](https://www.jamsadr.com/DPF-Dispute-Resolution) for more information or to file a complaint. The services of JAMS Data Privacy Framework Dispute Resolution are provided at no cost to you. |
| 552 | 489 | |
| 553 | 490 | Bitly is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). Under certain conditions, individuals have the right to invoke binding arbitration related to their personal data. In some cases, we hold liability in cases of onward transfers of data to third parties. |
| 554 | 491 | |
| 555 | Changes to our Privacy Policy | |
| 492 | #### Changes to our Privacy Policy | |
| 556 | 493 | |
| 557 | 494 | We reserve the right to make changes to this Privacy Policy at any time. If we make material changes in the way we collect or use information, we will provide notice by posting an announcement on the Services or sending you an email, and we will indicate when those changes will become effective. You are agreeing to any changes to the Privacy Policy when you use the Services after those changes become effective. |
ALSO IN THIS CHANGE, NOT TIED TO ONE LINE
- ± CHANGEDReformatted the CCPA data-sharing table
The table listing categories of personal information and third-party recipients for California residents was reformatted (less nested markup) but the content is unchanged.