Privacy Policy
Last updated: 19 April 2026
1. Introduction
Bonvia ("we", "us", "our") operates the bonvia.io website and platform. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian/EU data protection laws.
2. Data Controller
The data controller responsible for your personal data is Bonvia. For contact details, please refer to our Impressum page.
3. Data We Collect
We collect the following types of personal data:
- Merchant data: Email address, business name, and payment information (processed by Stripe).
- Customer data: Buyer email address, recipient name, and personal messages included with voucher purchases.
- Technical data: IP addresses, browser type, and usage data collected through cookies and server logs.
4. How We Use Your Data
We use your personal data to:
- Provide and operate the Bonvia platform
- Process voucher purchases and payments
- Send transactional emails (magic links, voucher delivery)
- Improve our services and user experience
- Comply with legal obligations
5. Legal Basis for Processing
We process your data based on: contract performance (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR), and legal obligations (Art. 6(1)(c) GDPR).
6. Third-Party Services
We use the following third-party services that may process your data:
- Stripe: Payment processing (see Stripe's Privacy Policy)
- Resend: Email delivery
7. Data Retention
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Voucher data is retained for the duration required by applicable tax and commercial laws.
8. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
To exercise any of these rights, please contact us at privacy@bonvia.io.
9. Cookies
We use essential cookies for authentication (session cookies). We do not use tracking or advertising cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website.