%20(1).svg)
English
Updated: May 2026
Latest updates: Change overview
The following privacy policy applies to smartphone application “Bonsy” (“online product”).
We participate in the IAB Europe Transparency & Consent Framework and adhere to its specifications and guidelines. We enable you to manage your consents and objections in our consent management platform with identification number 5 (“CMP”). The CMP can be found in the Bonsy app (My Profile/Privacy settings).
* The English translation is provided for information purposes only. The original German version (available at https://www.bonsy.com/datenschutz-app) is the official privacy policy and, in case of any discrepancy, shall prevail.
marktguru Deutschland GmbH, Sendlinger Straße 23, 80331 Munich, office@marktguru.de, hereinafter referred to as “marktguru” or “we” or “us”, is the controller within the meaning of data protection law.
Any exceptions are explained in this privacy policy.
You can find our contact details and those of our Data Protection Officer in section 15 „Contact“.
Personal data is any information relating to an identified or identifiable natural person. Processing personal data means collecting, storing, using, transferring it to others, or deleting it, among other things.
The categories of personal data we process about you depend on how you use our online product. We have listed possible categories for you below.
Master data: When you register on our online product, we process the following data: name, address, email address, password, opt-out status.
Contact data: When you contact us (e.g., via a contact form or email), we process the data you provide (usually your first and last name, email address and/or phone number, and the content of your inquiry) as well as any subsequent communication.
Purchase data: When you upload your receipts in the app, we process purchase data (such as shop information and discounts) and product data (such as the EAN/GTIN code of a receipt line item) that you provide.
App configuration data: When you use our contractual services (i.e. features such as setting the language, app colour scheme, (shopping) categories, labels, or country), we process the data required for the relevant service or app configuration.
Additional data that is part of uploaded or scanned receipts: If additional data (such as delivery address, membership number, contact details, etc.) is visible on the uploaded receipt, it is collected along with the purchase data.
Manual entries (data relating to manual entries): When you enter your one-off or regular expenses or income manually in the app, these entries are processed.
Consent declarations for direct marketing: If you have granted us your consent, we process your consent declarations for direct marketing (e.g., consent to newsletters, consent to other forms of direct marketing by electronic means, consent to the personalisation of newsletters and other direct marketing).
Push notification data: User ID, device information, consent status or information on whether push notifications are permitted.
In-app message data: User ID, device information, messages sent.
Giveaway data: If you are participating or have participated in one of our giveaways or raffles whilst using another marktguru service, and provided that you have consented to us using this data for other specified purposes, we will process the relevant data, such as participation details.
Sociodemographic data: If you participate in a voluntary survey or market survey, we process information provided by you such as age group, gender, level of education, household size, household income, nationality, employment status, main contributor in the household.
Study data: If you take part in one of our studies (user interviews, focus groups, surveys), we will process the data collected during these activities.
Log data from third-party surveys: If you participate in a market survey arranged by us and conducted by a third party, we receive information from that third party as to whether the survey has been completed (however, we do not receive any information regarding the details you provided in the respective market survey conducted by a third party).
Chat data: If you use our AI assistant, we process your prompts and chat history.
Online usage data: Every time you communicate via the Internet, online usage data is generated. This includes data such as your IP address, search queries, timestamps, browser data, device information, app identifier, device ID, referrer URL, geolocation/location data, user ID, click history.
Log files: Whenever you use an online product, your device automatically transmits what is known as online usage data. This data is temporarily stored in log files to ensure technical security and functionality. The IP address is also processed to determine the country code and is not stored alongside user identifiers.
Ad blocker data: Information on whether ad blockers are present.
The following data is processed in connection with app identifiers and similar technologies (“app identifiers”):
We only disclose your personal data to third parties if this is necessary for the fulfillment of the contract, if we or a third party have a legitimate interest in the disclosure, if you have granted your consent for this, or if this is necessary to fulfill a legal obligation.
Details on third parties can be found in section 4 “Why do we process your personal data, on what legal basis, what are our legitimate interests, who receives your personal data?” that follows.
We may disclose personal data to a third party in particular
In the case of a transfer based on consent, the explanation may also be provided when consent is obtained.
We reserve the right to deploy service providers when collecting or processing data. Service providers only receive the personal data required for their specific activities from us. For example, your email address may be passed on to a service provider so that they can deliver a newsletter you are subscribed to. Service providers may also be commissioned to provide server capacity. Service providers are generally deployed as so-called processors who may only process the personal data of users of this online product in accordance with our instructions.
Details on the service providers we deploy can be found in section 4 “Why do we process your personal data, on what legal basis, what are our legitimate interests, who receives your personal data?” that follows.
We process your data for the following purposes and – to the extent required by applicable law – on the basis of the legal grounds specified below. Explanations of the data categories can be found in section 2 “Which categories of personal data do we process?” In the event that data processing is based on the legal basis of legitimate interest, we also explain our legitimate interest in the respective data processing. In addition, we indicate with which recipients or categories of recipients we share your personal data.
Please note that you have the right to object to the processing of data for direct marketing purposes or on personal grounds (see section 14.7 “Your right to object to direct marketing” and section 14.8 “Your right to object for personal reasons”).
We may also invite users to take part in a survey via electronic means outside of the app (e.g. email, SMS, MMS, messengers) if we have obtained separate consent to do so.
Please note that you have the right to object to the processing of data for direct marketing purposes or on personal grounds (see section 14.7 “Your right to object to direct marketing” and section 14.8 “Your right to object for personal reasons”).
Market research surveys are conducted within the app. We may also invite users to take part in surveys and market research via electronic means outside of the app (e.g. email, SMS, MMS, messengers) if we have obtained a separate consent to do so. Where applicable, we may also invite you to take part in market surveys conducted by third parties; in this case, you will be redirected via a link to a page belonging to the third party that conducts the market survey under their sole responsibility. We use log data from third-party surveys for billing purposes.
Market surveys serve to measure customer sentiment/satisfaction, to adapt marketing strategies based on customer feedback, or to enable the adaptation of marketing strategies based on emerging trends.
Data collected from market surveys is shared with third parties (e.g. product manufacturers or retailers) only in an anonymised format within a controlled self-service environment for market research and statistical analysis.
Merging (aggregation) of data collected through the product use to create pseudonymised user profiles based on which target group segments can be formed and used for market research and statistical purposes. This also includes the anonymisation of this data and its subsequent transfer to third parties in an exclusively anonymised format for the aforementioned purposes.
“Target group segments” are subgroups of a larger target group that are formed based on shared characteristics such as demographics (age, gender), interests or behaviour (usage patterns, purchase history) in order to gain insights that are as specific as possible.
“Pseudonymised” means that your data has been modified in such a way that it can no longer be linked to you without the use of additional information. This additional information is stored separately, thus ensuring that your data is particularly securely protected.
“Anonymised” means that your data has been modified in such a way that it is no longer possible to identify you.
In the case of market research, we provide third parties (product manufacturers, retailers, etc.) with a reduced dataset in an anonymised format within a controlled self-service environment for market research and statistical purposes.
This online product incorporates processes based on app identifiers. We participate in the IAB Europe Transparency & Consent Framework and adhere to its specifications and guidelines. Below you will find information about the purposes for which we or our partners use app identifiers. Further details can be found in our CMP which you can access in the Bonsy app (My Profile/Privacy settings).
You may receive push notifications from us, even when you are not using this online product at the moment. These may be messages that we send you in connection with the performance of a contract (e.g., notification of service outage due to maintenance work), but they may also contain promotional information. You will only receive push notifications of any kind if you have expressly consented to this. You can stop receiving push notifications at any time via the device settings on your end device.
You may receive so-called in-app messages from us, but only when you are using the app. These may be messages that we send you in connection with the performance of the contract (e.g., notification of service outages due to maintenance work), but they may also contain advertising information. If you do not wish to receive in-app messages, you should not use the app.
Before you can install this app, you may need to enter into a user agreement with an app store operator (e.g., Google, Apple) regarding access to their portal (e.g., Google Play, App Store). In its capacity as the data controller, the app store operator collects and processes data such as user name, email address, and individual device identification number in connection with the use of the app store. We are not a party to the user agreement with the app store operator and have no influence on how it processes data. In this respect, the privacy policy of the respective app store operator applies.
We also transfer personal data to third parties or processors based in non-EEA countries.
Prior to such data transfers, we ensure that the recipient maintains an adequate level of data protection – for example:
Where possible, we specifically select providers that operate data centres in the EU or the EEA for the processing and storage of personal data.
This involves third parties, or data processors, in the following countries: USA; Israel; Armenia.
With regard to the USA, the European Commission has concluded that an adequate level of data protection exists there, provided that the data recipient participates in the Data Privacy Framework (DPF) and holds a valid certification. Where the recipients of your personal data are based in the USA and participate in the DPF, we therefore rely on this adequacy decision (Art. 45 GDPR).
We disclose personal data to third parties or processors in the following countries with an adequate level of data protection under applicable law: USA (if the recipient is certified under the EU-U.S. Data Privacy Framework), Israel (Data Processing Addendum).
Furthermore, we disclose personal data to third parties or processors in the countries listed below in which, under applicable law, there is no adequate level of data protection. The transfer or disclosure is based on the respective security measure or exemption provision specified: USA (based on Standard Contractual Clauses if the recipient is not certified under the EU-U.S. Data Privacy Framework), Armenia (Standard Contractual Clauses).
You can request that we provide you with an overview of the recipients in third countries and a copy of the specific arrangements agreed to ensure an adequate level of data protection. Please use the contact details provided in section 15 “Contact” for this purpose.
We store your data for as long as is necessary to provide our online product and the associated services, or for as long as we have a legitimate interest in further storage (e.g. due to an ongoing legal dispute). In all other cases, we delete your personal data with the exception of data that we must retain in order to comply with statutory retention periods (e.g., tax or commercial law).
Personal data that is subject to a retention period is blocked until the retention period expires.
Specifically, the following retention periods apply to the personal data processed within the scope of this online product:
In principle, you are not obliged to provide us with your personal data. However, you might be required to provide personal data to be able to use certain services of this online product, e.g., if you want to to register or to participate in a giveaway. If this is the case, we will inform you accordingly. Mandatory fields are usually marked with an asterisk (*). If you do not wish to provide us with the necessary data, you will unfortunately not be able to use the corresponding services.
This online product uses app identifiers.
App identifiers are randomly generated identifiers assigned by the operating system of your device. They are shared with the servers of our apps that you use to enable recognition of your device.
You can find detailed information about app identifiers on our consent management platform (also known as CMP) that can be accessed in the Bonsy app (My Profile/Privacy settings). Where processes involving the processing of personal data based on these technologies are concerned, you will also find further details there regarding the purposes for which they are used.
Certain app identifiers are absolutely necessary so that we can securely provide our online product in the manner you expect – we are allowed to use such app identifiers without your consent. For all other app identifiers, we ask for your consent in our CMP. You can give your consent via our CMP and revoke it at any time with future effect by adjusting the privacy settings. You can delete app identifiers in your device’s settings. Please note that this online product may not function or may only function to a limited extent without essential app identifiers.
If you use our online product as a registered user while logged in, we will apply the privacy settings stored in your user profile. This data is taken from your CMP settings prior to your first login to one of our services and is updated each time you change your privacy settings in the respective CMP while logged in. Please note that updates in other products will only take effect after you reload the respective online products, e.g., by opening the app. Please also note that any consent decision you have made while logged out will only apply while you are logged out, as we are unable to assign it to your user profile. If you wish to change your privacy settings in your user profile, please log in first.
Your mobile device allows you to share content from the app with third parties (e.g., via email, SMS, or the share functions of social networks). We have no influence on the data processing associated with the respective third party, e.g., by social network providers. In this context, the respective third-party providers are the sole controllers.
We offer you the option of using our online product both as an unregistered user (in a “guest mode”) and as a registered user, by creating a personal user account.
If you use the app without a user account, the receipt data and statistics recorded are technically linked only to your device’s unique identifier. This means that your data is stored locally on the respective device. If you switch devices or reinstall the online product, this information cannot be transferred to a new device, as our system will create a new profile that cannot be technically linked to your previous data. Therefore, it is not possible to restore your data in the guest mode.
On the other hand, when you register a user account, your data is linked to your user account. This offers you the advantage of easily transferring your receipts and statistics when changing devices and synchronising them across devices. Furthermore, as a registered user, you benefit from an extended range of features.
You can find more detailed information about the features of the online service in the FAQs: https://www.bonsy.com/en/faq.
We offer you the option of registering or logging in with us via your Facebook account. If you make use of this option, we will receive the data required for registration or login from Meta Platforms Ireland Ltd., Merrion Road Dublin 4, Dublin D04 X2K5 Ireland (“Facebook”) (e.g., email address, name).
We have no influence on the scope of data collected by Facebook via the Facebook login. If you do not want Facebook to collect data about you in connection with your use of our online offering and use it for its own purposes, you should not use the Facebook Connect service.
For more information about the purpose and scope of the collection, further processing, and use of your data by Facebook, as well as your rights and settings options for protecting your data, please refer to Facebook’s privacy policy.
We offer you the option of registering or logging in with us via your Google account. If you make use of this option, we will receive the data required for registration or login from Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”) (e.g., email address, name).
We have no influence on the scope of data collected by Google via Google login. If you do not want Google to collect data about you in connection with your use of our online services and use it for its own purposes, you should not use the Google OAuth service.
Further information about the purpose and scope of the collection and further processing and use of your data by Google, as well as your rights and settings options for protecting your data, can be found in Google’s privacy policy.
We offer you the option of registering or logging in with us via your Apple ID. If you make use of this option, we will receive the data required for registration or login from Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (“Apple”) (e.g., email address, name).
As part of the Apple ID service, Apple offers a “Hide Email Address” feature that allows you to create a unique, random email address, ensuring that your personal email address remains private.
We have no influence on the scope of data collected by Apple via Apple ID. If you do not want Apple to collect data about you in connection with your use of our online product and use it for its own purposes, you should not use the Sign in with Apple service.
Further information about the purpose and scope of the collection and further processing and use of your data by Apple, as well as your rights and settings options for protecting your data, can be found in Apples’s privacy policy: https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/.
We offer you the option of subscribing to a newsletter or consenting to receive other forms of direct marketing by electronic means (e.g., via email, MMS, messengers or SMS). You can revoke your corresponding consent at any time with effect for the future. Further details in this regard can be found in section “Your right to withdraw consent”.
If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products or services from our portfolio by electronic means. You can object to this at any time without incurring any costs. Further details in this regard can be found in section “Your right to object to direct marketing”.
We offer you the option of receiving personalised newsletters or other forms of direct marketing by electronic means that are specifically tailored to your interests. For the processing of your data for personalisation purposes a separate dedicated consent is obtained. The data categories we wish to process for personalisation are described in the declaration of consent. You can revoke your corresponding consent at any time with effect for the future. Further details in this regard can be found in section “Your right to withdraw consent”.
To assert your rights, please use the contact details provided in section 15 “Contact”. Please ensure that we are able to clearly identify you.
Alternatively, you can also use the settings options in your user account to correct the data you provided during registration or to object to advertising. In addition, you can use the “Unsubscribe” link at the end of each email to object to advertising.
Your settings for app identifiers and the data processing based on them can be adjusted at any time in our consent management platform that can be found in the Bonsy app (My profile/Privacy settings).
You can also delete your user account yourself by following these steps: Click on the “Profile” button in the “My profile” section to access your account settings. To delete your account, simply click on the red “Delete account” link.
You have the right to request that we confirm whether we process personal data relating to you, and you have a right to information regarding the data we process. If your data is incorrect or incomplete, you can request that your data be corrected or completed. If we transfer your data to third parties, we will inform them of the correction, insofar as this is required by law.
Provided the legal requirements are met, you have the right to request that we delete your personal data immediately. This is particularly the case if
Should your data be shared with third parties, we will inform them of the deletion, insofar as this is required by law.
Please note that your right to erasure is subject to restrictions. For example, we are not required or allowed to erase data that we are still required to retain due to statutory retention periods. Data that we require to assert, exercise, or defend legal claims is also excluded from your right to erasure.
Provided the legal requirements are met, you have the right to request that we restrict processing. This is particularly the case if
If the right to restrict processing is confirmed, we will mark the data concerned accordingly to ensure that it is only processed within the narrow limits that apply to such restricted data (namely, for the defense of legal claims or with your consent).
You have the right to receive personal data that you have provided to us for the performance of a contract or on the basis of consent in a structured, commonly used, and machine-readable format. In this case, you may also request that we transmit this data directly to a third party, provided this is technically feasible.
If you have given us your consent to process your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until revocation remains unaffected.
You also have the right to object to the processing of your personal data for advertising purposes at any time (“objection to direct marketing”). Please note that for organisational reasons, there may be an overlap between your objection and the use of your data in the context of an ongoing campaign.
You have the right to object to our processing of your data for reasons arising from your particular situation, insofar as this is based on the legal basis of legitimate interest. We will then stop processing your data unless we can demonstrate compelling legitimate grounds for further processing in accordance with legal requirements that outweigh your rights, or the processing serves to assert, exercise, or defend legal claims.
Where data processing is based on the legal basis of legitimate interest, you have the right, at any time and without giving reasons, (i) to object to the conducting of market surveys (see purpose 3.6 in section 4.1), (ii) the merging of your personal data collected through product use to create pseudonymous user profiles for market research and statistical purposes (see purpose 5.2 in section 4.1), and (iii) the provision of your data, which we process on the basis of your consent to the conducting of market surveys (see purpose 3.6 in section 4.1) and to the processing of pseudonymous user profiles (see purpose 5.1 in section 4.1), to third parties in an anonymised format for market research and statistical purposes (see purpose 5.3 in section 4.1).
You have the right to lodge a complaint with a data protection authority. In particular, you can contact the data protection authority responsible for your place of residence or federal state, or the authority responsible for the place where the violation of data protection law occurred. Alternatively, you can also contact the data protection authority responsible for us.
For information and suggestions on the subject of data protection, please contact us or our data protection officer at datenschutz@bonsy.com.
You can also contact our data protection officer at the following postal address:
Maximilian Hartung
eDSB – Datenschutzbeauftragter
SECUWING GmbH & Co. KG | Datenschutz-Agentur.de
Frauentorstraße 9
86152 Augsburg, Germany
epost@datenschutz-agentur.de
T +49 (0) 821 90786450
If you would like to contact us by other means, you can also reach us as follows:
marktguru Deutschland GmbH
Sendlinger Straße 23
80331 Munich, Germany
