Privacy policy
Updated
Bonus Tally is operated by Carvenience Bookings, Chamber of Commerce (KVK) 74753525, Cartesiusstraat 90, 2562 SL Den Haag, Netherlands. Carvenience Bookings is the controller for the data described here.
Visit statistics
We count visits with Umami, an analytics tool we host ourselves. It sets no cookies. It records the page, the referring site and a few named events, such as sorting the table or opening a bank link. With each visit it notes the browser, operating system, device type, screen size and language, and the country, region and city.
The statistics requests pass through our web server to the analytics server, and our server forwards your IP address with them. Umami uses the address to look up the country, region and city and to recognize a returning visit.
For returning visits, Umami makes a visitor code from your IP address and browser details with a one way function (a hash). The code changes every month, so after a month ends we can no longer tie a visit to a browser. The statistics hold no IP address, and we keep them for as long as the site runs.
Calculator inputs live in the page address. Page views leave the address query out, and calculator events carry only ranges (for example cash between $1,000 and $5,000) and whether a state was chosen, never the state itself.
Server logs
Our web server records each request: the time, the page address without its query (so calculator inputs stay out), the response, the referring page without its query and the browser type. These logs leave out IP addresses. When you open a link that starts with /go/, the server also logs which link it was and the page you came from, again without the query.
When a request fails on the server, its error log records the IP address with the error. The server deletes the request logs and the error log after 14 days.
Why we process this data
Visit statistics and server logs rest on our legitimate interest in seeing how the site is used and in keeping it secure (GDPR article 6(1)(f)). Email rests on your request and on our legitimate interest in answering it.
Your browser
The site sets no cookies and keeps nothing in the storage of your browser. The cookie page has the detail.
If you write to us, we use your address and message to answer you, and delete the thread once the matter is closed, at the latest 12 months after the last message. Never send account numbers or other bank details.
Who handles the data
The site runs on a server rented from netcup GmbH, Germany. The analytics server runs on a server rented from Hetzner Online GmbH, Germany. Mail to hello@bonustally.com is forwarded by Cloudflare Email Routing (Cloudflare, Inc., United States) to a Microsoft Outlook mailbox (Microsoft Corporation, United States). None of them use the data for their own purposes.
Your rights
Ask for a copy, a correction or the deletion of your data at hello@bonustally.com, or object to the processing that rests on our legitimate interest. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.