Voucherbox is using cookies in order to provide a better service for our users. If you continue to browse and use this website, you are agreeing to our cookie-policy. More infos here: Privacy-Policy.

Preamble

Welcome to our website! We take the protection of your data and your privacy very seriously. The purpose of this document is to provide you with information on what types of data we process and when, for what purpose and on what legal basis we process data. In the process, we would like to explain to you how our services work and how we protect your personal data.

In accordance with Article 4 (1) of the GDPR, personal data means all information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified, either directly or indirectly. For further information, please refer to Article 4 (1) of the GDPR.

This privacy policy may be accessed, stored and printed at any time via the URL https://www.voucherbox.co.uk/privacy-policy.

If we use our legitimate interest or the legitimate interest of a third party as the legal basis for processing your personal data (Article 6 (1) point f) of the GDPR), you have the right to object to this processing pursuant to Article 21 of the GDPR:

Under Article 21 of the GDPR, you have the right to

object to the processing of your personal data at any time. We shall then no longer process your personal data for purposes of direct marketing or related profiling.

Likewise, we shall then no longer process your personal data for any other purpose, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to enforce, exercise or defend legal claims (see Article 21 (1) of the GDPR, the so-called ‘Limited right of objection’). In this case, you have to explain the reasons for the objection that relate to your particular situation.

Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) of the GDPR, you have the right to object to the processing of your personal data for reasons relating to your particular situation, unless processing is required to carry out a task for reasons of public interest (see Article 21 (6) of the GDPR).

Where applicable, we shall advise you again separately of your right to object to processing of your data in the relevant sections of this document (e.g. by stating: ‘You have the right to object’). There you will also find additional information on how to exercise your right to object.

To make the following privacy policy easy to follow, we use links at various points to refer to information and privacy policies found on external websites (cf. section on ‘Social networks and external links’ in this privacy policy). We make every effort to keep the links that we list in this privacy policy up-to-date. Nevertheless, it is possible that, due to constant updating of websites, the links may not function correctly. If you come across a broken link, we would appreciate if you notified us so that we can update it.  

 

Controller

The controller for the processing of personal data within the meaning of Article 4 (7) of the GDPR is:

Webgears GmbH
Am Garnmarkt 4
6840 Götzis, Austria


Telefon: +49 (0) 30 - 398 215 34

E-Mail: info@voucherbox.co.uk

 

Contact partner for data protection

If you have any questions regarding the processing of your personal data or your rights with respect to data protection, please contact:

Alexander Bitsche
Webgears GmbH
Am Garnmarkt 4
6840 Götzis, Austria

Telefon: +49 (0) 30 - 398 215 34

E-Mail: info@voucherbox.co.uk


Logfiles

Every time you visit our website, we automatically collect data and information from the system of your device and store it in so-called ‘server logfiles’. This is data that relates to an identified or identifiable natural person (in this case: website visitors). The data is automatically transmitted by your browser when you visit our website. The following data is collected:

  • time our website is accessed (request to host provider server);
  • referring website URL which directed you to our website;
  • your operating system;
  • your browser type and version; and
  • your computer’s IP address.

We process this data to ensure that our website is accessible from your device, and that it displays correctly on your device or in your browser. In addition, the data is used to optimise the website and to ensure the security of our systems. We do not analyse this data for marketing purposes.

The legal basis for processing is Article 6 (1) point f) of the GDPR. We have a legitimate interest in presenting you with a website that is optimised for your browser, and to facilitate communication between our server and your device. The latter, in particular, requires your IP address to be processed.

We only store processed data for as long as necessary for the intended purpose or as required by law.

The recipient of the data is our server host, who works on our behalf under the terms of a commissioned data processing agreement.

Right to object

You have the right to object. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.

 

Cookies

Our websites uses cookies. Cookies are text files that are saved on your device to make the use of this website more convenient, for example, or to recognise a user’s device and save settings, etc. Input into and settings for a website can be saved in cookies so that you do not have to re-enter anything or change the settings every time your revisit a website. Cookies contain a so-called cookie ID, which is used to assign a device on which the cookie is saved. Specifically, we use the following cookies:

  • Cookies that contain a randomly generated and specific ID number that make you or your device identifiable on our website during your visit. These are automatically deleted at the end of your visit.
  • Cookies that contain a randomly generated and specific ID number that make you or your device identifiable on our website. These cookies are used to store the source URL (referrer), closed pop-ups and info bars, and favourite vouchers. These cookies are automatically deleted after a maximum period of one year.

The purpose of this type of processing is to make your use of our website convenient and to give you the option of saving your settings.

The legal basis for processing is Article 6 (1) point f) of the GDPR. We have a legitimate interest in presenting you with a website that saves your personal settings and makes your visit to our website easier.

Right to object

You have the right to object.

You can restrict the use of cookies or completely disable them in your browser settings. You can also enable automatic deletion of cookies when you close your browser window.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.

Other services that we use also use cookies. We shall draw your attention separately to the use of cookies when dealing with those individual services.

 

Information about Google services

We use various services from Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

You can find more information about each of the specific Google services that we use on this website in the additional privacy policy.

In some circumstances, embedding Google services means that Google collects and processes information (including personal data). In this regard, we cannot rule out the fact that Google may also transmit the information to a server in a third country.

As outlined in Google’s Privacy Shield certification (available at https://www.privacyshield.gov/list by searching for ‘Google’), Google is obliged to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework with respect to the collection, use and storage of personal data from EU member states and Switzerland. Google, including Google LLC and its wholly owned subsidiaries in the USA, has certified that it adheres to Privacy Shield principles.

You can find further general information at https://policies.google.com/privacy/frameworks?gl=en.

We have no influence over the information that Google actually collects and processes. However, Google states that it can generally only process the following information (including personal data): 

  • Protocol data (particularly the IP address)
  • Location-related information
  • Unique application numbers
  • Cookies and similar technologies 

You can find further detailed information at https://policies.google.com/privacy/update?hl=en#infocollect.

If you are signed in to your Google account, Google may add the processed information to your account, depending on your account settings, and treat it as personal data; see in this connection https://www.google.com/policies/privacy/partners/.  

Google explains in this connection:

‘In some circumstances, we associate personal information from one service with information and personal data from other Google services. We do this to make it easier for you to share content with friends and acquaintances, for example. Depending on your account settings, your activities on other sites and apps may be associated with your personal information in order to improve Google’s services and the ads displayed by Google.’ (https://policies.google.com/privacy?hl=en)

You can prevent this data from being directly added to your account by logging out of your Google account or changing your account settings accordingly. You can also prevent cookies from being installed – if used by Google – by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features fully.

You can learn more about how to delete cookies in the most common browsers, etc. here:

You can find more information in Google’s privacy policies, which can be accessed here:

You can find information about Google’s privacy settings at https://privacy.google.com/take-control.html

 

Use of Google Web Fonts

We use external fonts, so-called ‘Google Fonts’, on our website. Google Fonts is a service of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The web fonts are integrated through an interface (‘API’) with the Google services. In some circumstances, embedding Google Fonts means that Google collects and processes information (including personal data). In this regard, we cannot rule out the fact that Google may also transmit the information to a server in a third country.

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under the section ‘Information about Google services’.

We ourselves do not collect any data as part of providing Google Fonts.

We integrate Google Fonts for the purpose of being able to display standardised fonts on your device.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the great benefit gained from a standardised display of fonts. By providing a standardised display, we minimise the time and effort spent on design, which would be considerably higher if we had to create our own graphically adapted websites in order to respond to the font standards of various operating systems and browsers. Google also has a legitimate interest, inter alia, in the collected (personal) data to improve its own services.

Right to object

You have the right to object. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so you may not be able to use our website or all the features of the website fully and the display of the website may change.

You can find more information in Google’s privacy policies, which can be accessed here:

 

Google Analytics

We use Google Analytics, an analysis service of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

Google Analytics uses so-called ‘cookies’, text files which are stored on your device and permit analysis of your use of the websites you visit. Google Analytics can also use so-called web beacons (invisible graphics). Web beacons are used to analyse information such as traffic on websites. Information created by cookies and web beacons about the use of our website (including the users’ IP addresses) is transferred to and stored on a server operated by Google which may be located in the USA or other third countries. This information may be passed on by Google to its contract partners. 

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under section ‘Information about Google services’.

Google processes the following types of data:

  • Online identifications (including cookie identifiers)
  • IP address
  • Device identifiers
  • ‘Customer-assigned identifiers’

You can also find further detailed information about the processed data at https://policies.google.com/privacy/update?hl=en#infocollect and https://privacy.google.com/businesses/adsservices/

We employ Google Analytics only with ‘anonymize IP’ activated. Google thereby truncates your IP address in the member states of the European Union or other states that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will Google send the complete IP address to one of their servers in the USA and truncate it there.  

Furthermore, we have concluded a commissioned data processing agreement with Google for the use of Google Analytics (Art. 28 GDPR). Google processes the data on our behalf to evaluate your use of the website in order to draw up reports on website activities for us and to provide us with other services associated with the use of the website and the Internet. Google may transfer that information to third parties, if it is required by law or if third parties have been commissioned by Google to process that data.

We integrate Google Analytics for the purpose of analysing user behaviour on our website and allowing us to respond to this behaviour. This enables us to improve the services we offer continually.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the great benefit that the features described above have for our online content. The statistical evaluation of user behaviour, in particular, allows us to respond and optimise our online content based on interests.

For the purpose of processing data on our behalf, Google is entitled to employ subprocessors. You will find a list of such subprocessors at https://privacy.google.com/businesses/subprocessors/.

Right to object

You have the right to object. You can also prevent Google from processing your data by downloading and installing a browser plug-in from the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

Click the following link to prevent Google Analytics from collecting your data. An opt-out cookie will be activated which prevents your data from being collected in the future when you visit our website: Disable Google Analytics.

You can also prevent cookies from being installed by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features to their full extent.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

The information processed is saved for 26 months and is then automatically deleted after this storage period.  

You can find more information about how data is handled in connection with Google Analytics in Google’s privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de

You can find information about Google’s privacy settings at https://privacy.google.com/take-control.html?categories_activeEl=sign-in

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully. 


Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a service of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The Google Tag Manager helps us to integrate various codes and services on our website in an organised and simplified manner. The Google Tag Manager implements the tags and ‘triggers’ the integrated tags. When tags are triggered, Google can in certain cases collect and process information (including personal data). In this regard, we cannot rule out the fact that Google may also transmit the information to a server in a third country.

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under section ‘Information about Google services’.

In particular, the following personal data is processed by the Google Tag Manager:

  • Online identifications (including cookie identifiers)
  • IP address

You can also find further detailed information about the Google Tag Manager at https://www.google.com/analytics/tag-manager/use-policy/.  

Furthermore, we have concluded a commissioned data processing agreement with Google for the use of the Google Tag Manager (GDPR Art. 28). Google processes the data on our behalf in order to trigger the stored tags and display the services on our website. Google may transfer that information to third parties, if it is required by law or if third parties have been commissioned by Google to process that data.

If you have disabled individual tracking services (e.g. by activating an opt-out cookie), every relevant tracking tag integrated through the Google Tag Manager remains disabled.

We integrate Google Tag Manager for the purpose of providing various services in an organised and simplified manner. In addition, integrating the Google Tag Manager optimises the loading times of the various services.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the great benefit gained from integrating various services through the Google Tag Manager. Integrating the Google Tag Manager reduces the time and effort required for maintenance, and allows us to embed various services efficiently. In addition, Google has a legitimate interest in the collected (personal) data to improve its own services. 

Right to object

You have the right to object.

You have the option to prevent the Google Tag Manager from sending any tags. In order to do so you only have to click on this opt-out link and activate a Google Tag Manager disable cookie on your browser.

We would like to point out, however that by disabling this cookie you may not be able to use our website or to use all the features of the website fully.

We store processed data only for as long as necessary for the intended purpose or as required by law.

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.

 

DoubleClick by Google (DoubleClick Bid Manager)

We use DoubleClick Bid Manager, a web analysis service of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

DoubleClick Bid Manager uses so-called ‘cookies’, text files which are stored on your device and permit analysis of your use of the websites you visit. DoubleClick Bid Manager also uses so-called web beacons, i.e. small pixels or graphics. The information generated by the cookie in connection with the web beacon about your use of this website (including your IP address) is transferred to and stored on a server operated by Google which may be located in the USA or other third countries.

The cookies installed by DoubleClick Bid Manager are used to analyse user behaviour for marketing purposes, for example, to display relevant ads and evaluate the success of advertising campaigns.

In certain circumstances, the cookies may also contain so-called cookie IDs. These are individual character strings used to classify the cookie. This allows, for example, so-called ‘conversions’ to be recorded. Conversions make it possible to determine the extent to which subsequent browser activities relate to ads if, for example, a purchase is made at a later date through the same browser on which the ad in question was shown.

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under the section ‘Information about Google services’.

Google processes the following types of data:

  • Online identifications (including cookie identifiers)
  • Internet Protocol addresses and device identifiers
  • Precise location data.

Furthermore, we have concluded a commissioned data processing agreement with Google for the use of the DoubleClick Bid Manager (Art. 28 GDPR). Google processes the data on our behalf in order to display services on our website and to evaluate the cookies/beacons. Google may transfer that information to third parties, if it is required by law or if third parties have been commissioned by Google to process that data.

We integrate DoubleClick Bid Manager for the purpose of developing a picture of user behaviour and to react to user behaviour, and to analyse user behaviour for marketing purposes, for example to display relevant, user-specific vouchers.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the great benefit that the features described above have for our online content. The statistical evaluation of user behaviour allows us to respond to user interests and optimise our online content, etc.  In addition, Google has a legitimate interest in the collected (personal) data to improve its own services.

Right to object

You have the right to object.

You can change your settings for personalised advertising and activate the respective opt-out cookies at https://adssettings.google.com.

You can also prevent cookies from being stored by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features to their full extent.

You can learn more about how to delete cookies in the most common browsers, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

We store processed data only for as long as necessary for the intended purpose or as required by law.

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.


Google reCAPTCHA

This website uses Google reCAPTCHA (hereinafter referred to as reCAPTCHA), a captcha service of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google reCAPTCHA ensures that entries made on our website come from real people and are not automated e.g. using software (so-called robots).

For this purpose, reCAPTCHA displays a clickable checkbox ‘I am not a robot’. After clicking the checkbox, you may also be shown various pictures which you must click on if they match a particular motif (e.g. clicking all pictures that show a car).

reCAPTCHA is integrated through an interface (‘API’) with the Google services. In some circumstances, integrating reCAPTCHA means that Google collects and processes information (including personal data). In this regard, we cannot rule out the fact that Google may also transmit the information to a server in a third country.

reCAPTCHA uses so-called ‘cookies’, text files which are stored on your device and permit an analysis of your use of the websites you visit. reCAPTCHA also uses so-called web beacons, i.e. small pixels or graphics. The information generated by the cookie in connection with the web beacon about your use of this website (including your IP address) is transferred to and stored on a server operated by Google which may be located in the USA or other third countries.

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under the section ‘Information about Google services’.

You can find additional information about how reCAPTCHA works at:

https://developers.google.com/recaptcha/

You can find further general information at https://policies.google.com/privacy/update?hl=en#infocollect.

We integrate reCAPTCHA for the purpose of determining whether entries on our website are made by a real person or by a bot.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the great benefit derived from the function described above for our online content. Automatic verification of whether a real person or a bot has made the entries accelerates and simplifies our workload and raises the level of reliability of the entries made. Furthermore, it prevents misuse.   In addition, Google has a legitimate interest in the collected (personal) data to improve its own services.

Right to object

You have the right to object.

You can also prevent cookies from being stored by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features to their full extent.

You can learn more about how to delete cookies in the most common browsers, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

We store processed data only for as long as necessary for the intended purpose or as required by law.

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.

 

Google AdWords

This website uses Google AdWords and, within the scope of Google AdWords, Conversion Tracking, an online marketing service of Google LLC (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdWords and Google Conversion Tracking are analytical services provided by Google. When clicking on an advertisement placed by Google, a so-called ‘cookie’, a text file, is stored on your device permitting an analysis of your use of the websites you visit. The information generated by the cookie about your use of this website (including your IP address) is transferred to and stored on a server operated by Google which may be located in the USA or other third countries. These cookies lose their validity after 30 days. If you visit certain pages on our site before the stored cookie has expired, we and Google can recognise that somebody has clicked on the advertisement and has been redirected to our website.

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under the section ‘Information about Google services’.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. The potential to evaluate the success of individual offers allows us to respond specifically to market behaviour and to place our offers in the best position for interested users. Google also has a legitimate interest, inter alia, in the collected (personal) data to improve its own services.

Right to object

You have the right to object.

You can disable the settings for personalised advertising at https://support.google.com/ads/answer/2662922?hl=en. You can also prevent cookies from being installed by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features to their full extent.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of our website or use them to their full extent.

 

Google Remarketing

We use the service Google Remarketing provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Remarketing installs a cookie on your computer. This cookie allows Google to recognise you when you access other sites within the Google advertising network. This makes it possible to recognise your device on other websites of the Google advertising network and to show you personalised advertisements. In the context of this process, information (including personal data) is transferred to Google. This may also mean transferring data to countries outside the EU, especially to the USA.  In some circumstances, Google may share information with third parties.

The collected information is used by Google in particular to show you advertisements within the Google advertising network which are aimed at your interests. We will not receive any information which allows us to draw conclusions about you as a person at any time.

Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under the section ‘Information about Google services’.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. The potential to evaluate the success of individual offers allows us to respond specifically to market behaviour and to place our offers in the best position for interested users. In addition, Google has a legitimate interest in the collected (personal) data in order to market personalised advertisements and to improve its own services.

Right to object

You have the right to object.

You can disable the settings for personalised advertising at https://support.google.com/ads/answer/2662922?hl=en.

You can also prevent cookies from being installed by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features to their full extent.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.

 

Facebook Connect (Facebook login plugin)

We offer you the option of logging in to our website or app via Facebook using your Facebook account. We use the Facebook Connect plugin on our website in order to make this option available. The operator of the plugin is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. When accessing the site in Germany, Facebook also specifies its address as Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, in its legal notice (https://www.facebook.com/legal/terms?ref=pf).

The Facebook Connect Plugin lets you transfer data to us using your existing Facebook profile. You do not have to have to sign up again on our website or create a user account when you use Facebook Connect to register with us.

If you click on Facebook’s ‘Sign up with Facebook’ button on our registration page, for example, you will be redirected to Facebook’s login form which is provided by Facebook. You can log in to your existing Facebook profile or create a new Facebook profile on this page.

After you have logged in to your Facebook profile, a connection is established between our website and your Facebook profile. After completing the process, your profile data will be transferred to our site.

In particular, Facebook transfers to us the following data from your public Facebook profile which we then process:

  • Name
  • Age
  • Gender
  • Date of birth
  • Language
  • Country
  • City

The data transferred to us may vary depending on the user or may also include other data.

As a result, additional data may be transferred to us beyond the above list, if, for example, individual data is grouped together under collective headings or your Facebook account contains corresponding settings (if, for example, other data in your profile is marked as public).

An interface (API) with Facebook is used to integrate the plugin. In some circumstances, integrating plugins means that Facebook collects and processes information (including personal data). We have no influence over the information that Facebook actually collects and processes. It can be assumed, however, that the device information (browser type, operating system, etc.) and the IP address is processed by Facebook. In this regard, we cannot rule out the possibility of Facebook transferring the information to a server in a third country.

As outlined in Facebook’s Privacy Shield certification (available at https://www.privacyshield.gov/list by searching for ‘Facebook’), Facebook is obliged to comply with the EU-US Privacy Shield Framework set out by the US Department of Commerce and the Swiss-US Privacy Shield Framework with respect to the collection, use and storage of personal data from EU member states and Switzerland. Facebook Inc. has certified that it adheres to Privacy Shield principles.

You can find information on the data that Facebook collects at https://www.facebook.com/about/privacy/update?ref=old_policy under ‘What types of information do we collect?’.

The plugin is initially set to inactive to prevent Facebook from collecting data without your knowledge. As a result, you must first activate the plugin if you wish to use it. By activating (clicking on) the plugin, you enable Facebook to collect or process data.

If you are logged in to Facebook at the same time, the information collected by Facebook (including personal data) will be assigned to your Facebook account.

This makes it possible, in particular, for Facebook to obtain information about your use of our website. This will be saved in your user profile and possibly posted on Facebook.

The purpose and scope of Facebook collecting and further processing data, as well as the use of data and your rights in this respect, are described in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.

Facebook may also transfer some of the data sent to it to others.

The purpose of processing the data is to complete the registration process and to integrate your profile data.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the goal of using the Facebook profile data to make our website more user-friendly and to facilitate and accelerate user registration.

Facebook also has a legitimate interest in collecting and processing (personal) data pursuant to Article 6 (1) point f) of the GDPR. Facebook can, in particular, develop and improve its services by processing this data. Further information about the interests of Facebook can be found at https://www.facebook.com/about/privacy/ under the section ‘How do we use this information?’.

We will store the data only as long as it is necessary for the use of our service.

With regard to how long information is saved, Facebook specifies that data is saved for as long as necessary to provide you or others with products and services (https://www.facebook.com/about/privacy/ under ‘How can I manage or delete information about me?’).

Right to object

You have the right to object. You can log out of your account at any time. No further transmissions will then be carried out.

You also have the option to implement the corresponding settings on Facebook (you must be logged in to your account) at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

In addition, you can generally use global opt-out sites (http://www.youronlinechoices.com/de/praferenzmanagement/ or http://optout.aboutads.info/#!/ to check which providers have ‘opt-out’ cookies and to object to future processing of your data.

Further details about how Facebook Connect works are available at:

https://developers.facebook.com/docs/facebook-login

Further details about the cookies used by Facebook can be found at:

https://www.facebook.com/policies/cookies/

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of our website or use them to their full extent.

 

Use of Bootstrap

We use Bootstrap on our website. Bootstrap is a free front-end CSS framework under the MIT license, which was originally developed by Twitter, is now available as an open source project, and will be developed further in this context.

We integrate Bootstrap via the Content Delivery Network (CDN) servers of NetDNA (now MaxCDN/StackPath). A CDN is a network of data centres that distributes content. The library is made available through this CDN and loaded by an appropriate command on our website so that our website can use the library.

An interface (API) with Bootstrap is used to integrate the libraries. In some circumstances, integrating Boostrap means that NetDNA collects and processes information (including personal data). In this regard, we cannot be rule out that NetDNA may transfer the information to a server in a third country.

As outlined in StackPath, LLC.’s Privacy Shield certification (available at https://www.privacyshield.gov/list by searching for ‘StackPath’), StackPath is obliged to comply with the EU-US Privacy Shield Framework set out by the US Department of Commerce and the Swiss-US Privacy Shield Framework with respect to the collection, use and storage of personal data from EU member states and Switzerland. StackPath, LLC. has certified that it adheres to the relevant Privacy Shield principles.

You can find further general information at https://www.stackpath.com/privacy-statement/.

Information on which data the NetDNA/MaxCDN/Stackpath primarily collects and processes can be found at:

We store processed data only for as long as necessary for the intended purpose or as required by law.

We use Bootstrap for the purpose of integrating the library required to ensure smooth operation of the site.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest lies in the great benefit gained from integrating Bootstrap. We are able to reduce our costs/efforts associated with maintaining/loading the website by using the option to integrate the library via NetDNA/MaxCDN/Stackpath. In addition, NetDNA/MaxCDN/Stackpath has a legitimate interest, inter alia, in the collected (personal) data to improve its own services.

Right to object

You have the right to object.

You have the option to prevent NetDNA/MaxCDN/Stackpath from installing cookies.

Furthermore, you can prevent cookies from being installed by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features to their full extent.

You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings, etc. here:

Google Chrome: Website
Mozilla Firefox: Website
Apple Safari: Website
Microsoft Internet Explorer: Website

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use our website or to use all the features of the website fully.

 

Newsletter

You have the option of subscribing to our newsletter on our website.

We use the service MailChimp to send you our newsletter. The service provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service which organises and analyses the distribution of newsletters, etc.

If you provide data (e.g. your e-mail address) to subscribe to the newsletter, it will be stored on MailChimp servers in the USA.

As outlined in The Rocket Science Group LLC’s (MailChimp) Privacy Shield certification (available at https://www.privacyshield.gov/list by searching for ‘MailChimp’), MailChimp is obliged to comply with the EU-US Privacy Shield Framework set out by the US Department of Commerce and the Swiss-US Privacy Shield Framework with respect to the collection, use and storage of personal data from EU member states and Switzerland. Rocket Science Group LLC (MailChimp) has certified that it adheres to the relevant Privacy Shield principles.

We have also entered into a ‘Data Processing Agreement’ with MailChimp. This is a contract in which MailChimp pledges to protect the data of our users and to process it only in accordance with the privacy policy on our behalf and on our instruction. You can find further general information at: https://mailchimp.com/legal/privacy/

If you subscribe to our newsletter, we process the following information (including personal data) belonging to you:

  • Object and profile reference
  • E-mail address
  • Date and time
  • IP address
  • Action type (registration, update, permission change)
  • Action metadata
  • Interest group

To be able to provide evidence that you have given consent or that you have unsubscribed, we retain the following data concerning registration, changes, confirmation and cancellation of the newsletter for each user profile created using the e-mail address confirmed via the double opt-in process:

  • Date and time
  • IP address

In the context of your use of our newsletter, we also process the following information (including personal data) belonging to you:

  • Object and profile reference
  • E-mail address
  • Date and time
  • IP address
  • Action type (registration, update)
  • Permission change
  • Action metadata

Processing of the data is carried out by us, MailChimp and subcontractors of MailChimp within the framework of data processing. Subcontractors process data as MailChimp does in accordance with instructions and on our behalf.

The MailChimp service enables us to analyse the success and reach of our newsletter (campaigns). For example, we evaluate in particular whether you open a newsletter or what you otherwise do with the newsletter.

For this purpose, MailChimp activates and stores cookies and web beacons, for example, to enable statistical surveys and to create interest profiles. This makes it possible for us to understand how you react to individual newsletters (e.g. whether you have opened the newsletter).

When you register for the newsletter, you are explicitly providing consent to the processing of your personal data (Article 6 (1) point a) of the GDPR). We secure the registration through a double opt-in procedure:

In the first step, you provide mandatory information (e.g. e-mail address), and consent to processing of your personal data by clicking on the checkbox designated for this. In the second step, you receive an automated e-mail containing a confirmation/activation link that you are asked to confirm or activate. We use this process to ensure that the e-mail address you provided on our website belongs to you.

User e-mail addresses are collected and processed for the purpose of sending newsletters. Other personal data is collected and processed as part of the subscription process to prevent the misuse of our newsletter or the e-mail address used. The processing described above also allows us to provide evidence of the consent you have given.

The cookie and measurement data is processed to track the success and reach of our newsletters.

The legal basis for processing personal data required for technical purposes to send the newsletter and for processing cookie and measurement data is your consent, pursuant to Article 6 (1) point a) of the GDPR.

The legal basis for processing other personal data is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in providing evidence of the consent you have given. We also have a legitimate interest in preventing the misuse of our newsletter, and/or being able to demonstrate such misuse.

 

Your rights:

1. Right of withdrawal

Right of withdrawal

You have the right to withdraw your consent with future effect at any time, without affecting the legality of processing completed before withdrawal and based on your consent. You can send or communicate your withdrawal of consent to us any time (e.g. by e-mail to info@voucherbox.co.uk).

You can withdraw your consent by simply clicking on the link provided in our newsletter.

2. Right of objection

If the processing of your data is not covered by your consent (with particular reference to logfiles), you have a right to object.

Right to object

You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

Data is erased as soon as it is no longer required for the purpose for which it was originally collected. Your registration data is then stored only for as long as the newsletter subscription is active. We store processed data only for as long as necessary for the intended purpose or as required by law.

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, we shall not be able to send you any newsletters.

 

Registration

You have the option of creating a user account on our website.

This includes the following mandatory information (marked with a *):

  • E-mail address
  • Password

You can also add more data on a voluntary basis at a later point, in particular

  • Master data
  • Gender

We treat mandatory and voluntary information equally. The mandatory information is necessary to create a user account. When you send a message, we also store the following data:

  • the date and time of submitting the request.

The purpose of processing the personal data provided on a mandatory or voluntary basis is to provide you with a user account.

The legal basis for processing the personal data provided by you is Article 6 (1) point b) of the GDPR.

We use the so-called double opt-in process for registration.
After registration, we send you an activation link to the e-mail address you specified to confirm or activate your registration. We use this process to ensure that the e-mail address you provided on our website belongs to you.

When you click on the activation link, we process the following data as part of the double opt-in process:

  • The date and time of submission

The purpose of processing the personal data is to provide the user with a personal user account. The purpose of processing the double opt-in data is, in particular, to prevent misuse of the registration.

Other personal data processed on submission of the contact form (IP address, date and time of submission) serves to prevent misuse of our registration function. This is also our legitimate interest pursuant to Article 6 (1) point f) of the GDPR.

We store processed data only for as long as necessary for the intended purpose or as required by law. Personal data provided on the registration form will only be processed if it is necessary for the provision of these features.

The recipient of the data is our server host, who works on our behalf under the terms of a commissioned data processing agreement.

Right to object

You have the right to object.

You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so you may not be able to create a user account.
 

Form for requesting a forgotten password

We offer a form on our website which you can use to request a forgotten password. When you use this form, we process the e-mail address entered in the input field.

When you submit your query, we also store the following data:

  • the date and time of submission

The purpose of processing the personal data is to process your query regarding a forgotten password, and to get in touch with you (the sender) for the purpose of answering your query. Other personal data processed on submission of the contact form (IP address, date and time of submission) serves to prevent misuse of this function.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time so that we can send you a new password.

Personal data will only be processed if it is necessary for the provision of this feature.

The recipient of the data is our server host, who works on our behalf under the terms of a commissioned data processing agreement.

Right to object

You have the right to object to the processing of your personal data at any time. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk)

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to request a new password.

 

Voucher form

You can inform us about or send us vouchers which you know of.

If you send us your vouchers or vouchers which you know of, we will process the data you provide to verify the voucher and make it available to our other users. The name which you provide is used to document you as the sender of the voucher. If you provide your e-mail address to us this will make it easier for us to verify the voucher because we can consult you, if necessary.

We process the data only to set up the respective voucher in our system and, if necessary, to consult with you during the verification process (provided that you have given us the relevant data).

The purpose of processing is to be able to offer our users up-to-date and well-functioning vouchers. The legal basis for processing is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in providing our users with the best possible selection of vouchers. The voucher form makes it possible for us to expand our range of vouchers continually.

Personal data will be processed only if it is necessary for the provision of the voucher.

Right to object

You have the right to object. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so we may not be able to process your request.

 

Cashback function

You have the option of using our cashback function. We process your specified e-mail address, name and invoice for this purpose.

The personal data processed on submission of your request (date and time of submission, e-mail, name and invoice) serves to prevent misuse of our contact form.

Once you have selected a shop and entered your e-mail address, you can start your purchase in the shop you have selected. You will be directed to the respective shop via a special link, and we record and process your user activities (e.g. activation of a cookie and processing of online identifiers). As a result, we are able to identify if you actually made the purchase through us.

Once your purchase has been successfully assigned, payment is made via PayPal and we transfer the amount directly to your PayPal account (via your e-mail address).

The legal basis for processing is Article 6 (1) point (b) of the GDPR.

We only store personal data for as long as necessary for the intended purpose or as required by law.

While the provision of personal data is not a statutory or contractual requirement, it is, however, required for carrying out the cashback function.

 

Best Coupon Promise

As part of our ‘Best Coupon Promise’, you have the option of sending vouchers to us.

If you send us your vouchers, we will process the data you provide to us to verify the voucher and make it available to our other users. Your e-mail address is required so that we can ask questions regarding the coupon you have sent us (if necessary), inform you of the results of our verification and whether we have activated it.

We process the data only to set up the respective voucher in our system and, if necessary, to consult with you during the verification process or to inform you about progress.

The purpose of processing is to be able to offer our users up-to-date and well-functioning vouchers. The legal basis for processing is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in providing our users with the best possible selection of vouchers. The voucher form makes it possible for us to expand our range of vouchers continually.

Personal data will be processed only if it is necessary for the provision of the voucher.

Right to object

You have the right to object. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so we may not be able to process your request.


Contact form

We offer a contact form on our website, which you can use to communicate with us online. When you use the contact form to communicate with us, we process the data entered in the input fields.

This includes the following mandatory information:

  • Name
  • E-mail address
  • Message

The mandatory information is necessary to contact you and to be able to process your request.

When you send a message, we also store the following data:

  • the date and time of submission

The purpose of processing the personal data is to process the contact request and to communicate with the user for purposes of answering his/her query. The other personal data processed on submission of the contact form (date and time of submission) serves to prevent misuse of our contact form.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time to allow us to respond to your queries.

We store the data provided only for as long as necessary for the intended purpose or as required by law.

The other data is erased as soon as it is no longer required for the purpose for which it was originally collected.

The recipient of the data is our server host, who works on our behalf under the terms of a commissioned data processing agreement. The data is transferred by e-mail to the relevant employee at Webgears GmbH.

Right to object

You have the right to object. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so you may not be able to use our contact form.


Contacting us

You have the choice to contact us by mail, phone, fax, or e-mail.

If you contact us by mail we may process, in particular, your address details (e.g. surname, first name, street, place of residence, postcode), the date and time of receipt of your mail and information gathered from the content of your letter.

If you contact us by phone, we may process, in particular, your phone number and information requested during the conversation such as your name, your e-mail address, the time of your call and details of your query.

If you contact us by fax, we may process, in particular, the fax number and/or the source identifier and other details contained in your fax.

If you contact us by e-mail, we will process, in particular, your e-mail address, the time of the e-mail and the data contained in the e-mail (including attachments if any).

The purpose of processing the above data is to deal with the contact inquiry and to enable us to contact the person submitting the query in order to answer it.

The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our legitimate interest is to give you the opportunity to contact us at any time to allow us to respond to any queries you may have.

Personal data is erased as soon as it is no longer required for the purpose for which it was originally collected.

Right to object

You have the right to object. You can send or communicate your objection to us any time (e.g. by e-mail to info@voucherbox.co.uk).

The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use the option available for getting in touch with us or we may not be able to get in contact with you.


Social networks and external links

Apart from this website, we also maintain a presence in various social media, which you can access by clicking on the corresponding command buttons on our website. If you visit such a site, it may be possible that personal data is transferred to the provider of the social network. It is possible that, apart from storage of the data you specifically enter in this social medium, other information may be processed by the provider of the social network.

Moreover, the provider of the social network may process the most important data regarding the computer system from which you are accessing the social network – e.g. your IP address, the type of processor you use and your browser version including plugins.

If you are logged in to your personal user account in the respective network while visiting such a website, this network can associate your visit with your account.

To see the purpose and extent of data collection by the respective medium, further processing of your data carried out there and your rights in this connection, please refer to the terms of the responsible party:

Facebook: https://www.facebook.com/about/privacy/

We would also like to point out that our website contains links to external websites, but we have no influence over processing of data on these external websites.


Data security

We use technical and organisational measures to protect our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorised persons. Notwithstanding our best efforts, data security and protection against all risks cannot be fully guaranteed.


Amendments to the privacy policy

We may have to amend our privacy policy to reflect changes in the law or changes in our internal processes.

If we have to amend our privacy policy in this way, we shall communicate this to you above the heading: ‘Privacy policy’.

 

Withdrawal

You have the right to withdraw your consent with future effect at any time, without affecting the legality of the processing completed before withdrawal and based on your consent.

Rights of data subjects

As a data subject, you have the following rights:

  • Right of access to information (Article 15 of the GDPR)
  • Right to rectification of data (Article 16 of the GDPR)
  • Right to object (Article 21 of the GDPR)
  • Right to erasure of data (Article 17 of the GDPR)
  • Right to restriction of processing (Article 18 f.) of the GDPR), and
  • Right to data portability (Article 20 of the GDPR)

If you have any questions relating to your rights, please contact info@voucherbox.co.uk.  

Please note that in this case, we have to ensure that we are dealing with the actual data subject.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority.

We do not use automated decision-making on our website.