Back to the homepage
Privacy Policy
1. Responsible
Enock Studios UG (limited liability)
Opitzstraße 36
22301 Hamburg
Germany
Email: hello@joinbonuzo.com
Represented by: Henoch Munzimba (Managing Director)
2. Scope
This privacy policy informs you about the processing of personal data when visiting our website (https://www.joinbonuzo.com) and when using our SaaS platform "Bonuzo".
3. Legal Bases, Purposes & Storage Duration
We process personal data only in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
Purposes: To provide our website, fulfill contracts, communicate, ensure security, and – if you have given your consent – for marketing and analysis.
Legal Bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract/pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interests).
Storage Duration: We retain data only as long as necessary for the respective purposes or as required by legal retention obligations.
4. Data collection during website visits
Server log files
When you access our website, data is automatically transmitted to our server by your browser. This includes, among other things:
IP address
Date and time of the request
accessed page/file
referrer URL
Browser type and version
Operating system
This data is used solely to ensure the operation, security, and optimization of our website. The legal basis is Article 6(1)(f) GDPR.
Hosting
The hosting of our website is carried out by an external service provider (processor). A data processing agreement (DPA) exists with this party.
5. Further data processing
Cookies & Tracking
Our website uses cookies. To the extent that these are necessary for operation, the legal basis is Art. 6 Para. 1 lit. f GDPR. For all other cookies or analysis tools, we obtain your consent in advance (Art. 6 Para. 1 lit. a GDPR).
Contact
If you contact us via email or a form, we process your information to handle your request. Legal basis: Art. 6 Para. 1 lit. b GDPR.
Newsletter
If you subscribe to our newsletter, we use your email address solely for sending it. Registration is carried out using the double opt-in procedure. Legal basis: Art. 6 Para. 1 lit. a GDPR. Revocation is possible at any time.
Payment processing
If you book paid services, we transfer data to payment service providers for payment processing (e.g., credit institutions or external payment providers). Legal basis: Art. 6 Para. 1 lit. b GDPR.
6. Recipient & Transfer to Third Countries
Your data will only be passed on to third parties if this is necessary for the fulfillment of the contract or if there is a legal obligation. Transfer to third countries only occurs if an adequate level of data protection is in place or you have consented.
7. Rights of the data subjects
You have the following rights under the GDPR:
Information about your stored data (Art. 15 GDPR)
Correction of incorrect data (Art. 16 GDPR)
Deletion of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of consent given (Art. 7 para. 3 GDPR)
To exercise your rights, you can contact us at any time via email. You also have the right to lodge a complaint with a data protection supervisory authority.
8. Obligation to Provide
The provision of personal data is partially required by law or contract. Without this data, we may not be able to provide our services or may only be able to provide them to a limited extent.
9. Automated decision-making
Automated decision-making or profiling does not take place.
10. Data Protection Officer
A Data Protection Officer has not been appointed as there is currently no legal obligation to do so. Should this change, the information in this statement will be supplemented.
11. Changes to the Privacy Policy
We reserve the right to amend this privacy policy as necessary. The current version is always available on our website.