Privacy Policy

Niko Andersson · Schnirchgasse 11, 1030 Vienna, Austria · hello@bonvio.eu

No data protection officer required (Art. 37 GDPR).

• Name and e-mail address
• Receipt data
• Payment references (card and bank details are not processed by Bonvio)
• Usage data

No advertising profiles. No disclosure for advertising purposes. Bonvio is not designed for special categories of personal data within the meaning of Art. 9 GDPR.

Art. 6(1)(b) GDPR — Performance of contract: provision of the service.

Art. 6(1)(c) GDPR — Retention periods are guided by §132 BAO (AT) and §147 AO (DE). Statutory responsibility for compliance with retention obligations rests with the user.

Art. 6(1)(f) GDPR — Legitimate interests: abuse detection, system security, and improving recognition accuracy.

Advertising, newsletters and profiling do not take place.

• Receipt data: Bonvio stores receipt data for the retention period chosen by the user. By default up to 10 years, guided by §132 BAO / §147 AO — then automatic deletion. Statutory responsibility for retention compliance rests with the user.
• Incoming e-mails (technical): 90 days
• Customer configuration: until termination, then 30 days
• System logs: 7 days

• EU cloud provider: Data storage and processing. Data processing agreement in place.
• E-mail service provider (EU): Transactional communications. Processed within the EU/EEA — no third-country transfer.
• Payment service provider (USA): Payment processing. Card and bank details not processed by Bonvio. Standard contractual clauses.

No automated decision-making with legal effect (Art. 22 GDPR).

When you correct a recognised value, Bonvio may use that correction together with the original automatic reading to improve recognition accuracy and fix errors. This processing is strictly internal and serves only the quality of the service. Your receipt data is not used to train third-party AI models, is not used for advertising, and is not shared with third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the service). You may object to this processing at any time at hello@bonvio.eu (Art. 21 GDPR).

Access (Art. 15) · Rectification (Art. 16) · Erasure (Art. 17, subject to statutory retention obligations) · Restriction (Art. 18) · Data portability (Art. 20) · Objection (Art. 21)

Requests: hello@bonvio.eu

Technical and organisational measures are in place. No system can guarantee absolute security. Access to Bonvio is tied to the security of the e-mail account used; users are responsible for protecting their own account.

Austrian Data Protection Authority · Barichgasse 40–42, 1030 Vienna · dsb@dsb.gv.at · www.dsb.gv.at

bonvio.eu uses no cookies, no tracking and no analytics tools. No usage profiles are created and no data is collected or shared for advertising purposes.