GDPR, PII, SPD and Subprocessors

Information updated Jun 24th 2020

---

Rebrandly as a data processor

Personally Identifiable Information (PII), Sensitive Personal Data (SPD) Security, Subprocessors

As a data processor, Rebrandly does NOT collect any PII or SPD, specifically, we do NOT collect: ID number, Geolocation PII, IP address. IP addresses coming from the clicks are processed on Amazon AWS cloud services and anonymized before they are stored. 

---

Rebrandly as a data controller

Personally Identifiable Information (PII)
As Data Controller we mainly collect, process and store the following PII.

A) In order to login to the platform and receive communications:

• Company name
• Name
• Surname
• Password
• Avatar image
• Email Address
• Phone number

B) For billing and payments:

• Credit card data (are processed through external subprocessors following the SCA requirements)
• Billing Address
• Company name
• VAT ID

Sensitive Personal Data (SPD) Security

As Data Controller we do NOT collect or store Sensitive Personal Data such as Medical data, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, genetic data, biometric data, sex life or sexual orientation, criminal convictions etc.

Subprocessors
As Data Controller we mainly collect, process and store data using the following subprocessors. 

This article is about:

• GDPR PII
• Personally Identifiable Information in the link tracking
• Sensitive Personal Data (SPD) Security for branded links
• Link retargeting GDPR

See also: 

• Rebrandly URL Shortener is GDPR Compliant
• Rebrandly and CCPA (California Consumer Privacy Act)
• Rebrandly's 99.9% Uptime SLA