Privacy Policy

Home Privacy Policy
About This Privacy Policy

Tender Tiger Private Limited (“TenderTiger”, “TTPL”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit or use www.tendertiger.eu, register for an account, request information, subscribe to tender intelligence services, receive tender alerts, contact us, or otherwise interact with our services.

This Privacy Policy is specifically intended to provide information relevant to individuals in the European Union and European Economic Area and is designed to address the transparency requirements of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), where the GDPR applies.

This Privacy Policy should be read together with our Terms of Use and any product-specific or service-specific notices presented to you at the point of collection.

Website: https://www.tendertiger.eu/Home/PrivacyPolicy

Who Is Responsible for Your Personal Data?

Data Controller: Tender Tiger Private Limited

TenderTiger is established in India. Whether and to what extent the GDPR applies depends on the circumstances of the processing, including whether TenderTiger offers services to or monitors individuals in the EU/EEA. Where GDPR applies, we will respect and comply with the rights and obligations applicable to that processing.

What Personal Data We Collect

Depending on how you interact with TenderTiger, we may collect the following categories of personal data:

  • Identity and contact data: first name, last name, business email address, telephone/mobile number, business address and other contact details.
  • Account data: username, account identifiers, authentication information and subscription-related details. Passwords should be stored using appropriate security controls and should not be retained in readable form.
  • Business and organisation data: company/organisation name, job title, industry, business interests, tender categories, keywords, countries/regions of interest and related preferences.
  • Service usage data: searches, saved preferences, tender-alert settings, pages viewed, documents accessed or downloaded, and interactions with our services.
  • Technical and device data: IP address, browser type, operating system, device information, referring/exit pages, timestamps, approximate location derived from IP where used, and similar diagnostic information.
  • Communications: information contained in enquiries, support requests, emails, WhatsApp or other communications with TenderTiger.
  • Marketing preferences: consent or opt-out status and records of communications sent to you.
  • Public tender information: TenderTiger may collect and organize publicly available procurement, tender and contract-award information. Where such information contains personal data, TenderTiger will process it in accordance with applicable data protection law and the relevant legal basis.
How We Collect Personal Data
  • Directly from you when you register, submit a form, request a demo, contact us, subscribe to a service, configure tender alerts or communicate with our team.
  • Automatically through your browser or device when you use the website, subject to applicable cookie and consent requirements.
  • From publicly available sources, including public procurement and tender portals, where relevant to our tender intelligence services.
  • From business partners, service providers, referrals or other lawful sources where permitted by applicable law.

Where personal data is obtained from a source other than you, we will provide the information required by applicable law, subject to the exceptions provided by the GDPR.

Purposes for Which We Use Personal Data
  • Create and manage user accounts and subscriptions.
  • Provide tender intelligence, search, alerts, analytics and related services.
  • Respond to enquiries, support requests and customer communications.
  • Personalize tender searches, alerts and service recommendations based on information and preferences provided by the user.
  • Process payments, invoices, renewals and other contractual or financial administration.
  • Maintain website functionality, security, fraud prevention, troubleshooting and business continuity.
  • Analyze service usage and improve website performance, products and customer experience.
  • Send service communications, including account notices, security notifications and important changes to services.
  • Send marketing communications where permitted by applicable law and, where required, based on your consent or other lawful basis.
  • Comply with legal, regulatory, tax, accounting and law-enforcement obligations.
  • Establish, exercise or defend legal claims and protect our rights, users and property.
Legal Bases for Processing Under the GDPR

Where GDPR applies, we process personal data only where an applicable legal basis exists. Depending on the circumstances, this may include:

  • Performance of a contract: processing necessary to provide requested services, manage an account, administer subscriptions or perform contractual obligations.
  • Legitimate interests: processing necessary for legitimate business interests such as security, service improvement, fraud prevention, business administration and limited business-to-business communications, provided those interests are not overridden by your rights and freedoms.
  • Consent: We may rely on consent where required or appropriate, including for certain:
    • non-essential cookies;
    • marketing communications; and
    • other processing requiring consent under applicable law.
    Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.
  • Legal obligation: We may process Personal Data where necessary to comply with a legal obligation.
  • Vital interests: where exceptionally necessary to protect someone's vital interests.

The specific legal basis may vary depending on the processing activity and will be identified in a more specific notice where required.

Marketing Communications

We may send information about TenderTiger services, tender intelligence products, events or relevant business offerings where permitted by applicable law.

Where applicable law requires consent, we will obtain it before sending the relevant marketing communications. You can withdraw marketing consent or opt out at any time by using the unsubscribe mechanism in the communication or by contacting Care@TenderTiger.com. Opting out of marketing will not affect essential service or transactional communications.

We do not treat your use of the website as blanket consent to receive all forms of marketing communications where consent is legally required.

Cookies and Similar Technologies

TenderTiger uses cookies and similar technologies to operate and secure the website, remember preferences, understand website usage and, where applicable, support analytics or marketing functionality.

Cookies that are strictly necessary for the operation, security or requested functionality of the website may be used where permitted without consent. For non-essential cookies, such as certain analytics or advertising cookies, TenderTiger will obtain consent where required by applicable law.

Where a cookie consent mechanism is used, users should be able to accept or reject non-essential categories with comparable ease and should be able to change their preferences later.

The current website uses Google Tag Manager and may use other analytics or third-party technologies. The live cookie inventory, providers, purposes, retention periods and consent categories should be maintained in a separate Cookie Notice/Cookie Preference Centre and kept consistent with the technologies actually deployed on the site.

Sharing Personal Data

We may disclose personal data to the following categories of recipients where necessary and lawful:

  • Hosting, cloud, database, cybersecurity and IT service providers.
  • Email, communication, customer-support and messaging providers.
  • Payment processors, billing providers and financial service providers.
  • Analytics, website performance and technology providers.
  • Professional advisers, auditors, insurers and legal advisers.
  • Group companies and authorized business partners where necessary to provide services or where a lawful basis exists.
  • Government authorities, regulators, courts or law-enforcement bodies where disclosure is required or legally permitted.
  • A purchaser, investor or successor entity in connection with a merger, acquisition, restructuring or sale of relevant business assets, subject to applicable legal requirements.

We do not sell personal data as a commodity. Where a service provider processes personal data on our behalf, we will require appropriate contractual and security safeguards as required by applicable law.

International Transfers of Personal Data

TenderTiger is based in India, and some service providers or recipients may be located outside the EU/EEA. Where personal data is transferred from the EU/EEA to a country that does not benefit from an applicable adequacy decision, we will implement an appropriate transfer mechanism or safeguard where required, such as Standard Contractual Clauses or another mechanism recognized under applicable data protection law.

Information about relevant international transfers and safeguards may be provided upon request where disclosure is required by applicable law.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business and financial records, resolving disputes, enforcing agreements, preventing fraud and complying with legal obligations.

Retention periods vary according to the type of data and purpose. Where a specific retention period is not stated, we determine the period using criteria such as the nature and sensitivity of the data, the purpose of processing, legal requirements, limitation periods and legitimate business needs.

When personal data is no longer required, it will be securely deleted, anonymized or otherwise disposed of in accordance with applicable law and our retention procedures.

Your GDPR Rights

Where the GDPR applies, you may have the following rights, subject to applicable conditions and exceptions:

  • Right to be informed about how your personal data is processed.
  • Right of access to personal data and relevant processing information.
  • Right to rectification of inaccurate or incomplete personal data.
  • Right to erasure in circumstances provided by law.
  • Right to restriction of processing in specified circumstances.
  • Right to data portability where the legal requirements are met.
  • Right to object to certain processing, including direct marketing.
  • Right to withdraw consent where processing is based on consent.
  • Rights concerning automated decision-making and profiling where Article 22 or other applicable GDPR provisions apply.

These rights are not absolute and may be subject to statutory conditions and exceptions.

How to Exercise Your Rights?

To exercise a privacy or GDPR right, contact Care@TenderTiger.com with the subject line “GDPR / Data Protection Request”. You may request access, correction, deletion, restriction, portability or objection as applicable.

We may request reasonable information to verify your identity and protect against unauthorized disclosure of personal data.

We will respond without undue delay and generally within one month of receiving a valid request. Where permitted by the GDPR, the response period may be extended by up to two further months for complex or multiple requests, in which case we will inform you of the extension and the reasons.

Requests are generally handled free of charge. Where permitted by law, a reasonable fee may be charged or a request may be refused if it is manifestly unfounded or excessive.

Right to Lodge a Complaint

If you believe that your personal data has been processed in breach of applicable data protection law, you may lodge a complaint with the competent supervisory authority. For individuals in the EU/EEA, this may generally be the data protection authority in your habitual residence, place of work, or place of the alleged infringement, subject to applicable rules.

You may contact the relevant national Data Protection Authority directly. Information about EU data protection authorities is available through the European Data Protection Board and European Commission resources.

Data Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. Measures may include access controls, authentication, network and application security, logging, backups, monitoring and organizational controls appropriate to the risks.

No method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security, but we maintain safeguards appropriate to the nature and risk of the processing.

Data Breaches

If a personal data breach occurs, TenderTiger will assess the incident and take appropriate containment, investigation, remediation and notification measures as required by applicable law. Where the GDPR requires notification to a supervisory authority or affected individuals, we comply with the applicable statutory requirements.

Children

Our services are intended primarily for businesses and professional users. We do not knowingly seek to collect personal data from children where such collection is not necessary for the service. If you believe that a child has provided personal data to us without an appropriate legal basis, please contact us so that we can assess and take appropriate action.

Third-Party Websites and Services

Our website may contain links to third-party websites, tender portals, payment services, social platforms or other external services. Those third parties operate under their own privacy policies. TenderTiger is not responsible for their privacy practices, and you should review their policies before submitting personal data.

Automated Processing and AI Features

TenderTiger provides AI-driven search and tender intelligence features. These technologies may use information such as search terms, tender categories, business interests and user preferences to improve search relevance or recommendations.

Where any processing constitutes automated decision-making that produces legal effects or similarly significant effects on an individual, TenderTiger will comply with applicable GDPR requirements, including applicable safeguards concerning human intervention, contesting a decision and obtaining an explanation where required.

TenderTiger should document the actual logic, data inputs and effects of any AI or profiling functionality before making a claim that Article 22 does or does not apply to a specific feature.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, legal requirements or data-processing practices. The updated version will be published on www.tendertiger.eu with a revised effective date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing a material change.

Governing Law and Jurisdiction

This Privacy Policy and the processing of Personal Data by TenderTiger shall, to the extent permitted by applicable law, be governed by and construed in accordance with the laws of India.

Subject to any mandatory provisions of applicable data protection law, the courts at Ahmedabad, Gujarat, India shall have exclusive jurisdiction over any dispute, claim or proceeding arising out of or in connection with this Privacy Policy or the processing of Personal Data by TenderTiger.

Nothing in this clause shall limit or exclude any mandatory rights, remedies, supervisory authority rights, complaint mechanisms, or other protections available to individuals under applicable data protection law, including the GDPR, where applicable.