[placeholder: this Privacy Policy describes how EMPA, Data & Management Consulting GmbH ("KIVO", "we") collects, uses, and protects personal data of users of this platform.]
[placeholder: controller name and address, see Imprint]
[placeholder: categories of personal data processed, e.g. account details, working time records, expense documents]
[placeholder: purposes of processing and applicable GDPR Art. 6 legal basis]
[placeholder: processors and third parties data may be shared with]
When something in KIVO fails, for example a screen that stops working or a background job that cannot finish, KIVO sends an error report to GlitchTip, an error tracking service we run ourselves on our own servers in France (Scaleway, Paris region). Reports reach it through Cloudflare, which carries all of KIVO's traffic; nobody else receives them. We use them to find and fix faults, which is our legitimate interest in keeping the platform working (GDPR Art. 6(1)(f)).
A report contains the technical description of the fault (the error message and where in the code it happened), the address of the page or service involved and of the pages visited just before it, each without its query string, the browser and operating system, the version of KIVO, and, for a failed request made while signed in, your internal user ID. It does not contain cookies, form contents, uploaded documents, request bodies or the data shown on screen, and KIVO does not record your screen or your clicks. Email addresses and IBANs that appear in an error message are removed before a report leaves KIVO. Reports sent from your browser pass through KIVO's own address first, so your IP address is not passed on.
Error reports are deleted after 30 days. Backups of the error tracker are kept for 14 days.
[placeholder: retention periods per data category]
[placeholder: GDPR data subject rights (access, rectification, erasure, restriction, portability, objection) and how to exercise them]
Questions about this policy: support@kivo.co [placeholder: confirm data protection contact / DPO if applicable]