Data Privacy Declaration

(Effective: November 2023)

1. Responsible Entity

The entity responsible for data processing in connection with the operation of the BON BON website and the sale of restaurant vouchers is:

PayNowEatLater GmbH
Schulterblatt 58
20357 Hamburg
Germany
Email: info@bon-bon.de
Website: www.bon-bon.de

2. Data We Collect

We collect and process the following types of personal data:

  • Contact data (e.g., name, email address, delivery address).
  • Order data (e.g., purchased vouchers, payment details).
  • Usage data (e.g., website interaction, IP address, browser information).
  • Communication data (e.g., inquiries via our contact form or email).
3. Purpose of Data Processing

Your personal data is processed for the following purposes:

  • To fulfill and process your voucher orders.
  • To provide customer support and respond to inquiries.
  • To optimize and analyze our website for user experience improvement.
  • To comply with legal obligations (e.g., tax regulations).
4. Legal Basis for Data Processing

The processing of your personal data is carried out based on:

  • Article 6(1)(b) GDPR: To perform a contract or take steps prior to entering a contract.
  • Article 6(1)(c) GDPR: To comply with legal obligations.
  • Article 6(1)(f) GDPR: For our legitimate interests in providing a functional and secure online service.
5. Data Sharing and Recipients

We only share your personal data with third parties if necessary for contract fulfillment or required by law:

  • Payment service providers for processing payments (e.g., PayPal, credit card companies).
  • Shipping companies for delivering physical vouchers.
  • IT service providers for maintaining and hosting our website.

Data will not be shared with unauthorized third parties or sold for advertising purposes.

6. Data Retention

Your personal data will be retained as follows:

  • For contract-related data: Until the end of the statutory retention periods (e.g., tax and commercial law).
  • For customer inquiries: Until the inquiry is resolved.
  • For website analytics: As long as anonymized data is used or consent is given.
7. Your Rights

As a data subject, you have the following rights:

  • Access (Art. 15 GDPR): Request information about your stored personal data.
  • Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
  • Erasure (Art. 17 GDPR): Request deletion of your data, subject to legal retention requirements.
  • Restriction (Art. 18 GDPR): Request restriction of data processing under certain conditions.
  • Data portability (Art. 20 GDPR): Request transfer of your data to another controller.
  • Objection (Art. 21 GDPR): Object to data processing for legitimate interests or direct marketing.
  • Withdraw consent: Withdraw consent for data processing at any time with future effect.

To exercise your rights, contact us at: info@bon-bon.de

8. Data Security

We take appropriate technical and organizational measures to ensure the security of your personal data against unauthorized access, loss, alteration, or destruction. All payment data is transmitted securely via SSL encryption.

9. Cookies and Analytics

We use cookies to optimize our website and analyze usage behavior. You can control the use of cookies through your browser settings. For analytics purposes, we may use services like Google Analytics, which process data based on user consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time.

10. Contact

If you have questions about this Data Privacy Declaration or your personal data, please contact us:

PayNowEatLater GmbH
Schulterblatt 58
20357 Hamburg
Email: info@bon-bon.de
Website: www.bon-bon.de

11. Updates to this Data Privacy Declaration

We reserve the right to amend this Data Privacy Declaration at any time to reflect changes in the law, our services, or data processing. The current version is always available on our website.