We welcome you to our website and appreciate your interest in our company. Protecting your personal data is a matter of great concern to us. We process your data in accordance with the applicable legal regulations for the protection of personal data, particularly the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementation laws applicable to our company.
For questions about data protection or to exercise your data protection rights, please contact us using the contact details provided above.
When you create a customer account on our website, we process the data you provide to set up, manage, and enable you to use the services we offer in connection with the customer account. The legal basis for processing your data is Article 6(1)(b) GDPR. Data related to the customer account will be deleted three months after the deletion of the account unless we are legally obligated to store it longer (e.g., for accounting obligations or legally required evidence) or we are legally entitled to retain it longer (e.g., due to ongoing litigation against the account holder).
By registering for Bonny, we process the data you provide for the conclusion and performance of the respective contract. The legal basis for processing is Article 6(1)(b) GDPR. Due to legal requirements, we have legal recording and retention obligations upon the conclusion of a contract. The legal basis for the respective processing is Article 6(1)(c) GDPR. We also process your data to detect and prevent fraud based on Article 6(1)(f) GDPR. Our goal is to protect ourselves from fraudulent transactions. Data will be deleted when a legal obligation to store them ceases unless we are entitled to further processing (e.g., in a legal dispute). Otherwise, we delete the data when it is no longer necessary to prove or disprove a claim.
When you use one of the contact options we offer, we process the data you provide to handle your inquiry. The legal basis for this is our legitimate interest in processing your request according to Article 6(1)(f) GDPR. If your inquiry relates to the conclusion of a contract with us, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your request has been processed unless we are legally obligated to store it longer. In this case, deletion will occur after the obligation expires.
You have the following rights regarding your personal data under the GDPR. For details, please refer to the legal provisions (especially Articles 15 ff. GDPR).
Under Article 15 GDPR, you have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to access this personal data and to further information listed in Article 15 GDPR.
Under Article 16 GDPR, you have the right to request the immediate correction of incorrect personal data concerning you. Considering the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of providing a supplementary statement.
Within the limits of Article 17 GDPR, you have the right to demand that personal data concerning you be deleted immediately. We are obligated to delete personal data immediately if the relevant conditions of Article 17 GDPR are met.
Under certain conditions stipulated by Article 18 GDPR, you have the right to request that we restrict the processing of your personal data. For details, please refer to Article 18 GDPR.
Under the conditions of Article 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format. According to Article 20 GDPR, you also have the right to transmit those data to another controller without hindrance from us, provided the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means.
According to Article 77 GDPR, irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. This right exists particularly in the member state of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.
Under Article 21 GDPR, you have the right to object to the processing of your personal data based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
If we process your personal data for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
You can delete your user account at any time by clicking on the profile icon at the top right of the app, then on "Delete Account," and then confirming with "Delete." Please note that deleting your user account will also delete all your account information. Restoration is not possible.