Privacy policy

Important: We take the protection of your personal data very seriously. This privacy policy informs you about the nature, scope and purpose of the processing of personal data within our online service and the associated browser extension.

1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Reboni non Profit
Hagedornstraße 26
45357 Essen
Germany

Email: kontakt@reboni.de
Telefon: 0178 / 9817483
Website: www.reboni.de

2. Collection and storage of personal data, nature and purpose

2.1 When visiting the website

When you access our website www.reboni.de, the browser on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

IP address of the requesting computer (anonymised after 7 days)
Date and time of access
Name and URL of the file accessed
Website from which access is made (referrer URL)
Browser used and, if applicable, your computer's operating system and the name of your access provider

We process this data for the following purposes:

ensuring a smooth connection to the website
ensuring convenient use of our website
evaluating system security and stability
other administrative purposes

The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the collected data to draw conclusions about your person.

2.2 When using the "Reboni" browser extension

When you install and use our browser extension, we collect the following data:

Registration data:

Email address (for creating the account and communication)
Time of registration
Hashed password (we do not store passwords in plain text)

Usage data (when the extension is actively used):

Visited shop URLs (domain only, e.g. "amazon.de", NO full URLs with products)
Time of shop visits
Vouchers displayed
Vouchers applied (anonymised ID)
Browser type and version
Extension version

WHAT WE DO NOT STORE:

NO full URLs (no product pages, no search terms)
NO shopping basket contents or product data
NO payment information
NO order details or purchase history
NO tracking of your browsing outside supported shops
NO personal information other than your email

Purpose of data processing:

Providing the functionality of the browser extension
Detecting available vouchers for visited online shops
Automatic application of voucher codes
Displaying your personal savings statistics
Processing commissions with partner shops (anonymised)
Improving our service
Technical support

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(a) GDPR (consent at installation).

2.3 SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the address bar of the browser changing from "http://" to "https://" and by the lock symbol in your browser bar.

3. Sharing data with third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only share your data with third parties if:

you have given your express consent in accordance with Art. 6(1)(a) GDPR
the disclosure is necessary under Art. 6(1)(f) GDPR to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed
there is a legal obligation to disclose under Art. 6(1)(c) GDPR
this is legally permitted and necessary under Art. 6(1)(b) GDPR for the performance of contractual relationships with you

3.1 Affiliate partners (online shops)

If you use a voucher via the extension and make a purchase, we receive a commission from the respective online shop. The following data is transmitted to the shop in anonymised form:

Anonymised user ID (no email, no name)
Voucher code used
Time stamp of the click

This transfer is based on Art. 6(1)(f) GDPR (legitimate interest in processing the transaction). The online shop receives NO information about you or your email address from us.

3.2 Affiliate networks (AWIN, Tradedoubler, Webgains)

We participate in the affiliate programme of AWIN AG. When you click on a partner link on our website, a cookie is set in order to track transactions and settle commissions.

Provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany

Purpose: Affiliate tracking and commission settlement

Cookie name: awc

Duration: 30 days

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in correct commission settlement)

Provider's privacy policy: https://www.awin.com/de/rechtliches/privacy-policy

In addition to AWIN, we work with the affiliate networks Tradedoubler and Webgains . If you click on a link to a shop connected via one of these networks, you are forwarded to the shop via the server of the respective network. The network records that the visit came from Reboni (e.g. via cookie or click ID) so that the shop can pay us a commission for a purchase. The price stays the same for you.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in correct commission settlement). The cookies are set by the networks or shops, not by Reboni. If you do not want this, you can block third-party cookies in your browser settings. Further information can be found in the networks' privacy policies.

3.2a Logos and product images

Shop logos are loaded from our own server wherever possible. Some logos and product images come directly from the servers of the affiliate networks or shops, and category cover images from the image service Unsplash. For technical reasons, your IP address is transmitted to these servers when they are displayed (Art. 6(1)(f) GDPR, legitimate interest in displaying the offers).

3.2b Fonts

The font used on this website is loaded from our own server. There is no connection to servers of Google or other providers.

3.3 Hosting providers

We use external service providers to host our website and database. They process data on our behalf (processors in accordance with Art. 28 GDPR). Corresponding data processing agreements have been concluded with all service providers.

The website is hosted by Strato (see section 13). The database with shops, vouchers and user accounts (login, favourites) is operated via Strapi Cloud .

4. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device. Your browser accesses these files.

4.1 Necessary cookies

We use technically necessary cookies to make our website user-friendly. These cookies are required for the basic functions of the website:

Session cookie (deleted at the end of the browser session)
Login cookie (stores login status for 30 days)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning website).

4.2 Analytics cookies

We only use analytics cookies with your express consent (see section 11 – Google Analytics). You can withdraw your consent at any time via our cookie banner.

5. Storage period

We only store personal data for as long as is necessary for the respective purposes:

Type of data	Storage period	Reason
Website log files	7 days	Security and error analysis
Account data (email)	Until the account is deleted	Performance of contract
Usage data (shop visits)	24 months	Statistics, commission processing
Support requests	3 years	Proof of performance

After the storage period has expired, the data is routinely deleted unless there are statutory retention obligations.

6. Your rights as a data subject

You have the following rights with regard to your personal data:

6.1 Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to access this personal data.

6.2 Right to rectification (Art. 16 GDPR)

You have the right to request the immediate correction of inaccurate personal data concerning you.

6.3 Right to erasure (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted without delay. You can delete your account yourself at any time in the extension settings or contact us by email at kontakt@reboni.de .

6.4 Right to restriction of processing (Art. 18 GDPR)

You have the right to request that we restrict processing.

6.5 Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

6.6 Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.

6.7 Right to withdraw consent (Art. 7(3) GDPR)

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.

6.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf
https://www.ldi.nrw.de

7. Data security

During your visit to the website we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser.

Our employees and everyone involved in data processing are obliged to maintain confidentiality and to comply with data protection regulations.

We take technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

8. Automated decision-making / profiling

We do not use automated decision-making or profiling in accordance with Art. 22 GDPR.

9. Changes to this privacy policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to reflect changes to our services.

The new privacy policy will then apply to your next visit. We will inform registered users of significant changes by email.

10. Contact for data protection questions

If you have questions about data protection, wish to exercise your rights or have complaints, please contact:

Data protection officer:
René Oliver Schneider
Email: kontakt@reboni.de
Address: Hagedornstraße 26, 45357 Essen, Germany

Quick ways to exercise your rights:

Request information: kontakt@reboni.de
Request deletion: kontakt@reboni.de
General questions: kontakt@reboni.de

We usually reply to data protection requests within 48 hours.

11. Google Analytics & cookies

Use of cookies

Our website uses cookies. Cookies are small text files that are stored on your device. We only use cookies with your express consent in accordance with Art. 6(1)(a) GDPR.

Google Analytics

This website uses Google Analytics, a web analytics service of Google LLC ("Google"). It is used on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

Scope of data processing:

IP address (anonymised)
Browser type and version
Operating system used
Pages visited and time spent
Referrer-URL

Purpose of data processing:
Google Analytics allows us to analyse how the website is used in order to improve usability and optimise our content.

Data transfer to third countries:
Google also processes data in the USA. There is an adequacy decision of the EU Commission for data transfers to the USA (EU-U.S. Data Privacy Framework).

Storage period:
The data we send is automatically deleted after 14 months.

Withdrawing your consent

You can withdraw your consent at any time. To do so, click the following button:

After withdrawal, no further data is collected by Google Analytics.

12. Cookie overview

The following table gives an overview of all cookies that may be used on our website:

Cookie name	Provider	Purpose	Duration	Type
cookieConsent	Reboni	Stores your cookie consent decision	Permanent	Necessary
_ga	Google Analytics	Distinguishing website visitors	2 years	Analytics
_ga_*	Google Analytics	Stores the session status	2 years	Analytics
awc	AWIN AG	Affiliate tracking and commission settlement	30 days	Marketing

Note on cookie types:

Necessary: These cookies are required for the basic functions of the website and cannot be disabled.
Analytics: These cookies help us analyse how the website is used. They are only set with your consent.
Marketing: These cookies are used for affiliate tracking. They are only set when you click on a link to a shop, and only by the respective affiliate network or shop (see section 3.2).

13. Hosting

Our website is hosted by the following service provider:

Provider: Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany

Purpose: Provision of the website and storage of data

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable operation of the website)

Data processing agreement: A data processing agreement in accordance with Art. 28 GDPR has been concluded with Strato.

Provider's privacy policy: https://www.strato.de/datenschutz/

14. Right to lodge a complaint with a supervisory authority