This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on our website bonuslevel.com in accordance with the EU General Data Protection Regulation (GDPR / DSGVO).
1. Data Controller Rupert Ochsner
Walsenbachweg 16b
6370 Kitzbühel
Austria
Email: info@bonuslevel.com
Phone: +43 (0)664 52 62 206
2. Collection and Storage of Personal Data a) Server Log Files
When you visit our website bonuslevel.com, the browser used on your device automatically sends information to the server of our website/hosting provider. This information is temporarily stored in log files. The following data is processed:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (Referrer URL)
- Browser type and version, as well as operating system used
Legal Basis: Art. 6 (1) (f) GDPR (legitimate interest) to ensure system security, stability, and smooth operation.
b) Contact Form & Direct Contact
If you send us inquiries via our online contact form or via email/phone, your provided details (e.g., name, email address, message content, telephone number) will be stored for processing the inquiry and for potential follow-up questions.
Legal Basis: Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in processing user communications).
3. Cookies and Web Analytics a) Cookies & Consent Management
Our website uses cookies. Essential cookies are technically necessary for operating the website. Non-essential cookies (such as those for analytics or tracking) are only set if you give your explicit consent via our Cookie Consent Banner upon visiting the site. You can adjust your cookie preferences at any time through our website’s cookie banner or via your browser settings.
b) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC / Google Ireland Limited („Google“). Google Analytics uses cookies to analyze your use of our website.
- Data Processed: IP address (anonymized/masked prior to storage), usage statistics, device and browser information, pages visited, referrer URLs.
- IP Anonymization: IP anonymization is active on this website. Your IP address is truncated within member states of the European Union or other contracting states to the Agreement on the European Economic Area.
- Data Transfers: Data may be processed on servers in the United States. Where personal data is transferred to the USA, standard contractual clauses (SCCs) and/or the EU-U.S. Data Privacy Framework serve as legal guarantees.
- Legal Basis: 6 (1) (a) GDPR (your explicit prior consent via our cookie banner).
- Revocation / Opt-Out: You can withdraw your consent at any time in the cookie consent tool or install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout.
4. Newsletter
If you subscribe to our newsletter, we process your email address (and optional information, such as your name) to send you news, updates, and promotional content related to our services.
- Double Opt-In: Subscription takes place using a double opt-in procedure. You will receive a confirmation email to verify your ownership of the email address provided.
- Newsletter Analytics: Our newsletters may contain web beacons or tracking pixels that allow us to determine whether emails were opened and which links were clicked.
- Third-Party Email Service Providers: We may use external service providers (e.g., Mailchimp, Brevo, ConvertKit, Substack) to manage mailing lists and send newsletters. These providers process your data strictly on our behalf under Data Processing Agreements (DPAs).
- Legal Basis: 6 (1) (a) GDPR (your explicit consent).
- Unsubscribe / Revocation: You can unsubscribe from our newsletter at any time by clicking the „Unsubscribe“ link included in every newsletter email or by contacting us directly at info[at]bonuslevel.com.
5. Payment Providers & E-Commerce Processing
To process financial transactions for products or services offered on bonuslevel.com, we integrate secure third-party payment service providers (e.g., Stripe, PayPal, Klarna, bank providers).
When you make a purchase, payment details (e.g., name, payment amount, bank details, credit card numbers, billing address) are sent directly to and processed by the respective payment service provider. We do not store full credit card details on our own servers.
- Data Processed: Transaction data, purchase details, payment credentials, contact information.
- Purpose: Fulfillment of purchase contracts and processing payments.
- Legal Basis: 6 (1) (b) GDPR (contract performance).
- Third-Party Privacy Policies: For details on how these providers handle your data, please refer to their respective privacy statements (e.g., Stripe Privacy Policy, PayPal Privacy Statement).
6. Data Transfer to Third Parties
Your personal data will not be transferred to third parties for purposes other than those listed in this privacy policy. We only share personal data if:
- You have given explicit consent (Art. 6 (1) (a) GDPR),
- It is required for the performance of a contract with you (Art. 6 (1) (b) GDPR),
- There is a legal obligation to do so (Art. 6 (1) (c) GDPR), or
- It is necessary to safeguard legitimate interests (Art. 6 (1) (f) GDPR).
7. Data Retention
We process and store your personal data only for the period necessary to achieve the storage purpose or as required by legal retention requirements (e.g., tax and commercial record retention under Austrian tax law, which generally requires storing financial records for 7 years).
8. Your Rights under GDPR
Under the EU General Data Protection Regulation, you have the following rights:
- Right of Access (Art. 15 GDPR): Request information about your personal data processed by us.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate data or completion of incomplete data.
- Right to Erasure / „Right to be Forgotten“ (Art. 17 GDPR): Request deletion of your personal data stored by us, subject to statutory retention exceptions.
- Right to Restriction of Processing (Art. 18 GDPR): Request restricted processing under certain conditions.
- Right to Data Portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests.
- Right to Revoke Consent (Art. 7 (3) GDPR): Withdraw your consent at any time with future effect.
9. Supervisory Authority & Right to Lodge a Complaint
If you believe that the processing of your personal data infringes GDPR rules, you have the right to lodge a complaint with a supervisory authority. In Austria, the responsible authority is:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40-42
1030 Vienna
Austria
Website: https://www.dsb.gv.at
