Privacy Policy

Last updated: 19 April 2026

1. Introduction

Bonvia ("we", "us", "our") operates the bonvia.io website and platform. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian/EU data protection laws.

2. Data Controller

The data controller responsible for your personal data is Bonvia. For contact details, please refer to our Impressum page.

3. Data We Collect

We collect the following types of personal data:

  • Merchant data: Email address, business name, and payment information (processed by Stripe).
  • Customer data: Buyer email address, recipient name, and personal messages included with voucher purchases.
  • Technical data: IP addresses, browser type, and usage data collected through cookies and server logs.

4. How We Use Your Data

We use your personal data to:

  • Provide and operate the Bonvia platform
  • Process voucher purchases and payments
  • Send transactional emails (magic links, voucher delivery)
  • Improve our services and user experience
  • Comply with legal obligations

5. Legal Basis for Processing

We process your data based on: contract performance (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR), and legal obligations (Art. 6(1)(c) GDPR).

6. Third-Party Services

We use the following third-party services that may process your data:

7. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Voucher data is retained for the duration required by applicable tax and commercial laws.

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing

To exercise any of these rights, please contact us at privacy@bonvia.io.

9. Cookies

We use essential cookies for authentication (session cookies). We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website.