Privacy statement
Draft for legal review. Operator details, hosting information and retention periods must be completed and checked before launch.
Data controller
Favory AG, Im Höfli 6, 9425 Thal, Switzerland. Email: info@favory.ch. Send privacy requests to this address.
Data we process
For email magic-link login, we process your email address and sign-in data. We also process your Bonbon card ID, saved wallet vouchers (brand, offer, code, value, expiry, shop link and optional notes), gift links with sender, acceptance status and recipient account association, and language choice. Necessary technical data may include IP address, device and browser details, timestamps, requested URLs and server logs. Exact log fields must be confirmed with the hosting provider.
Purposes
We use this data to sign you in securely, save your card and vouchers, provide gift links, show the site in your language, and support security, operation and assistance. Expiry notices appear in the wallet; email reminders are not active yet.
Legal bases
The revised Swiss Federal Act on Data Protection (revFADP) applies, including proportionality, purpose limitation and data security. Where the GDPR applies, necessary contractual services rely on Article 6(1)(b), legitimate interests in secure operation on (f), legal obligations on (c), and processing requiring consent on (a). You can withdraw consent for the future.
Hosting and processors
Bonbon uses Lovable Cloud for hosting, sign-in and data storage, with its infrastructure provider: [Hosting provider, country]. Further subprocessors, storage locations and any international transfers must be confirmed before launch. Appropriate safeguards such as standard contractual clauses must be agreed where required; this draft does not confirm that safeguards have already been concluded.
Disclosure and gift links
Personal data is shared with listed partners only under separate prize-draw consent, never without it. Aggregated campaign reporting is planned. A valid unclaimed gift link shows the brand, offer, code and expiry, but no private notes. External shops have their own privacy rules.
Retention
Account, card and wallet data is retained while you use your account and it is needed for the service, unless you request earlier deletion. Gift records may remain necessary for acceptance status and history. We then delete or anonymise data unless legal duties or legitimate claims require retention. Exact periods for logs, backups and deleted accounts: [Retention periods and deletion process to be confirmed]. An expired voucher is not automatically deleted.
Your rights
You can request access, correction and deletion, and data delivery or portability where provided by law. You can object to processing and withdraw consent, subject to legal conditions and exceptions. Email info@favory.ch; we may request information needed to verify your identity. You can also contact the FDPIC or a competent data protection authority. Email requests do not imply a self-service export or account deletion button that is not yet available here.
Local storage and cookies
We use localStorage for your language choice and browser storage needed for sign-in and convenience functions. You can delete local entries in your browser; you may then need to sign in again. Bonbon currently uses no tracking cookies or advertising trackers.
Flyer parameter and brand clicks
The ?v= parameter is retained on scan pages and intended for aggregated campaign attribution. Clicks on brand links are also intended for aggregated statistics only. Dedicated collection and analysis of these events is not implemented yet; requested URLs may still appear in technical server logs. Procedures, retention and this text will be reviewed before activation.
Daily-game participation
For the daily game we store account, Zurich calendar day, participation time and result. Visits and streaks support bonus awards. A points ledger records credits and exchanges with reason and timestamp; balance is their sum. Coupon saves prevent duplicates. These records enforce daily limits, inventory and point use. They remain needed for account functions and abuse prevention; [exact retention periods to be confirmed]. Interests (optional); Postcode (optional). Maximum 5 per day. Self-reported redemption; brand confirmation pending. Presented by [Partner]: 15–30 s remaining.
Prize draw and partner sharing
For prize draws we process email, first name, contest and partner ID, account association, language, ticket count and the timestamps of accepting the terms and the partner consent, with the exact text version. Each draw has its own partner; consent to share your contact details with that partner is a condition for entering that specific draw and is requested separately for each draw, never pre-ticked. Coupons, the card wallet and your account remain usable without any consent. Withdraw at any time for the future in Account → My consents (per partner) or via info@favory.ch; previous lawful processing is unaffected, and contact the partner about its further processing. After withdrawal, no further tickets are possible for that draw. Retention: [Contest retention period].
Name and address
You can optionally store first name, last name, street, postcode and town in your account (+300 Bonbons, once). We use the address to deliver prizes and share it with the respective draw partner only with your consent. You can change these details or have them deleted at any time.
Partner list
[Partner A] – [Partner A AG, Adresse] – draw “Win 1 of 3 vouchers” [Partner B] – [Partner B AG, Adresse] – draw “Win a travel voucher” [Partner C] – [Partner C AG, Adresse] – draw “Win 1 of 10 shopping vouchers” These partners are placeholders. Before any real sharing, the partner’s company, address, purposes and privacy policy will be listed here.