Privacy Policy

Effective Date: October 5, 2026

This privacy policy for Bacula Systems SA  (“We”, “Us” or “Our”) tells you how we may collect, use and share your information when you visit our website www.baculasystems.com.

We appreciate your decision to use our website www.baculasystems.com and to trust us with your valuable personal information. In this document, we seek to explain in the clearest terms possible our privacy practices. We strongly encourage you to read this document (and any other related documents) carefully before using the website. If there are any terms or conditions in this document that you do not agree with, please do not use the website, or in case you are already using it, please discontinue the use immediately.

We encourage you to read this Privacy Policy carefully to understand how we process your personal information and the rights available to you. Where we rely on your consent for a particular processing activity, such consent will be requested separately where required by applicable law.

What information do we collect about you?

When we collect information, we do so to ensure that you get to experience our service seamlessly. For that, we collect the following information. Some are your personal information.The personal information that we collect about you are the following:

• name and contact information, including email address, telephone number and postal address;
• company, job title and other professional or business information;
• information contained in enquiries, support requests and other communications;
• IP address and approximate location information;
• browser, device and operating system information;
• cookie, pixel and advertising identifiers;
• website usage and interaction information; and
• information about interactions with our marketing communications and advertisements.

How do we collect such information?

We may use any of the following three ways to get information about you.

1. The information that you give us
2. The information that we automatically collect from you
3. Information that we collect from third parties

Before going into the reasons why we collect the information that we do, we want you to understand what the above three terms mean.

1. The information that you give us
   When you sign up for an account to use our service/product we will ask you certain questions like your name or email address. These are the information that you give us. This may not be limited to what we have mentioned and can change according to the nature of the service/product that we provide.
2. The information that we automatically collect from you
   When you access our service from a device, we may automatically collect information from your device, such as through the use of cookies. You will know more about automatic collection of personal information in the next section.
3. Information that we collect from third parties
   We may receive professional contact information from publicly available business sources, business partners, event organisers, data providers and other third-party sources. Where required by law, we will provide the relevant privacy information concerning such processing.

Cookies and similar technologies

Cookies are small packets of information that are placed on your device, so that we can retrieve the information about you, such as your login information, your choices on our websites and other information.

For more information about cookies and similar technologies, please visit our cookie policy.

Do not track requests

We respond to “do not track” requests in the following manner:

Some web browsers provide a “Do Not Track” (“DNT”) feature that allows users to signal a preference not to have their online activities tracked. Because there is currently no generally accepted industry standard for how websites should interpret or respond to DNT signals, our Website does not currently respond to DNT browser signals. You can manage your preferences regarding non-essential cookies and similar tracking technologies through our cookie consent settings.

Why do we collect information about you?

We collect information about you for a variety of reasons. It helps us, among other things, to serve you better. The following are the ways in which we use the information that we collect about you.

• To provide and maintain service
• To perform a contract with us
• To contact the user
• To manage your account
• To comply with legal and regulatory obligations
• To measure, personalise and, where permitted, deliver advertising and marketing communications
• To send marketing and promotional communications
• To evaluate and improve our products/services
• To examine the usage trends

How long do we retain your information?

We will only keep your personal information for as long as it is necessary, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). We retain personal information only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, contractual, security and compliance requirements. Retention periods vary according to the type of information and processing activity.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Do we share your information?

We may share your information with third parties in the following ways:

1. Sharing with your consent: When you give consent, we may share your information with third parties for the purposes that are mentioned in the consent notification.
2. Legal Obligations: We may disclose information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
3. For business transfers: We may share your personal information in connection with, or during the course of negotiations regarding merger, sale of business assets, financing or acquisition of all or a part of our business by another entity.
4. Service providers and processors: We may share personal information with service providers that perform services on our behalf, including hosting, CRM, analytics, communications, customer support, security, advertising and professional services.

GDPR Disclosures

Cross border data transfer

The information that we collect from you, including your personal data, may be processed in locations outside the European Union, where data transfer laws may differ from those in effect in your jurisdiction. In some cases, the transfer may be to countries classified as ‘adequate countries’ by the European Union (see here for details on adequate countries). Where personal data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of protection, we rely on appropriate safeguards where required, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where appropriate.

You may contact our Data Protection Officer at legal@baculasystems.com for further information about the safeguards applicable to international transfers of your personal data.

Automatic processing of data

We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Legal basis for the collection

The General Data Protection Regulation requires us to identify and set out the legal basis, or in other words, the legal justification, for processing your personal information. The following are the legal bases on which we process your personal data.

Where we rely on our legitimate interests, those interests may include operating and protecting our business and Website, responding to business enquiries, maintaining and developing relationships with customers and prospective customers, improving our products and services, preventing fraud and misuse, and conducting appropriate business-to-business marketing.

We consider and balance these interests against your rights and interests before relying on legitimate interests as a legal basis.

Your rights

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you may have the following rights in relation to your personal data:

1. Right of access
   You have the right to request confirmation as to whether we process your personal data and, where we do, to request access to that personal data and certain information about how it is processed.
2. Right to rectification
   You have the right to request that inaccurate personal data concerning you be corrected and that incomplete personal data be completed.
3. Right to erasure
   You may request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, subject to applicable legal exceptions.
4. Right to restriction of processing
   You may request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data that you have challenged.
5. Right to data portability
   Where our processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.
6. Right to object
   Where we process your personal data on the basis of our legitimate interests, you may object to that processing on grounds relating to your particular situation. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
7. Right to withdraw consent
   Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Rights relating to automated decision-making
   Where applicable, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except where such processing is permitted by applicable law.
9. Right to lodge a complaint
   If you believe that we have processed your personal data in breach of applicable data protection law, you have the right to lodge a complaint with the competent data protection supervisory authority. You may also contact us first so that we can try to address your concerns.

To exercise any of these rights, please contact our Data Protection Officer at legal@baculasystems.com.

We may need to verify your identity before responding to a request. We will respond within the time limits required by applicable law. In certain circumstances, some rights may be limited or may not apply, for example where we are required to retain personal data to comply with a legal obligation.

Is providing personal information mandatory?

Some personal information may be required in order for us to respond to your request, enter into or perform a contract, provide support, or comply with legal obligations. Where providing information is optional, we will indicate this where appropriate. If required information is not provided, we may be unable to provide the requested service or respond to the request.

Privacy of children

We do not knowingly provide our services to children. If you are a parent or legal guardian and believe that your child has provided us with information without your consent, please contact us. Upon verification that we have collected such information without parental consent, we will remove the information from our database.

CCPA disclosures

Sale or share of information

We do not sell personal information for monetary consideration.

However, we may use advertising, analytics and similar technologies, including pixels and cookies provided by third-party advertising platforms. Through these technologies, certain information about your device and interactions with our Website may be disclosed to advertising partners for purposes such as measuring advertising performance, understanding the effectiveness of our marketing campaigns and delivering or improving relevant advertising.

Under the California Consumer Privacy Act (“CCPA”), some of these disclosures may constitute “sharing” of personal information for cross-context behavioural advertising, even where no money is exchanged.

The categories of personal information that may be shared in this way can include:

• internet or other electronic network activity information, such as pages viewed, links clicked and interactions with our Website;
• device and browser identifiers;
• IP address and approximate location derived from it;
• cookie, pixel and advertising identifiers; and
• information about interactions with our advertisements and marketing campaigns.

The categories of third parties with whom this information may be shared can include advertising and marketing platforms, analytics providers and similar technology providers.

California residents have the right to opt out of the sale or sharing of their personal information. You can exercise this right through our “Your Privacy Choices” or cookie privacy preference settings available on our Website.

Sharing information with authorised partners

Where appropriate to respond to your enquiry, provide local sales support or fulfil your request, we may share the contact and business information you provide with authorised Bacula Systems resellers, distributors or business partners.

We disclose such information only where reasonably necessary for these purposes and subject to applicable data protection requirements.

Your rights

The California Consumer Privacy Act grants consumers the following rights:

1. The right to know what personal information a business has collected about them, including:
   1. the categories of personal information collected;
   2. the categories of sources from which the personal information is collected;
   3. the business or commercial purposes for collecting, selling, or sharing personal information;
   4. the categories of third parties to whom the business discloses personal information; and
   5. the specific pieces of personal information the business has collected about the consumer.
2. The right to delete personal information that the business has collected from the consumer, subject to certain exceptions.
3. The right to correct inaccurate personal information that a business maintains about the consumer.
4. The right to opt out of the sale or sharing of personal information, if the business sells or shares such information.
5. The right to limit the use or disclosure of sensitive personal information if the business uses or discloses it for purposes other than those permitted under the CCPA or its regulations.
6. The right to non-discrimination, meaning consumers will not receive discriminatory treatment for exercising their CCPA rights, including protection against retaliation for employees, applicants, or independent contractors who exercise such rights.

California residents may submit requests to exercise their applicable privacy rights by contacting us at legal@baculasystems.com, by calling our US toll-free number at +1 800 256 0192, or through any privacy request mechanism made available on our Website.

We may need to verify your identity before processing certain requests and may request information reasonably necessary to do so.

Security of your personal information

We take reasonable measures to ensure that the information we collect from you is stored securely and protected to the best extent possible. However, no method of internet transmission or digital storage is completely secure, and we cannot guarantee absolute security. While we use commercially reasonable and appropriate security measures to protect your information, we cannot promise that it will be 100% secure.

Links to other websites or apps

On our website, we may provide links to external websites, apps, or services. These are not operated by us and therefore are not governed by our Privacy Policy or practices. We strongly recommend that you review the privacy policies of such websites or services before engaging with them to ensure that you do not provide personal information that you do not wish to share.

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in the law or our privacy practices. We recommend that you review this privacy policy periodically to ensure it remains in line with your expectations.

The privacy policy will be effective from the date it is posted on this page.

Contact us

For any questions or concerns regarding your privacy, or to exercise any of your rights, you may contact us using the following details: