Privacy Policy
Version: 1.0
Last updated: 26 October 2026
§1. Data controller
1.The controller of personal data processed in connection with the Bonusoria.news website (the "Service") is the Operator of the Service named in the "Operator Details" section of the Terms of Use and at the end of this Privacy Policy (the "Operator").
2.In all matters concerning personal data, the Operator can be contacted at: [email protected].
3.This Privacy Policy applies only to Bonusoria.news. The separate portal Bonusoria.com has its own rules.
§2. What data we process
1.The Service does not require creating a user account. We process only the data necessary to operate and protect the Service, in particular:
- IP address and approximate location derived from it (country, region);
- technical data: browser type, operating system, device type, date and time of access, requested addresses, referring address, connection data;
- security data: information about suspicious traffic, anti-bot verification results and blocked requests;
- data you provide when contacting us by email: email address, name (if provided), message content and any attachments;
- data contained in reports of errors or infringements (§15 of the Terms of Use).
2.We do not knowingly process special categories of personal data and we ask you not to send such data in your messages.
§3. Purposes and legal bases
1.Providing the Service and displaying content — Art. 6(1)(f) GDPR (legitimate interest in operating the Service).
2.Security, protection against attacks, abuse and overload of the infrastructure — Art. 6(1)(f) GDPR (legitimate interest in protecting the Service).
3.Enforcing geographical restrictions (geoblocking) described in the Terms of Use — Art. 6(1)(f) GDPR (legitimate interest in complying with the Service's availability policy and limiting regulatory risk).
4.Handling correspondence, questions, error reports and infringement reports — Art. 6(1)(f) GDPR (legitimate interest in responding to messages).
5.Establishing, pursuing or defending legal claims — Art. 6(1)(f) GDPR.
6.Complying with legal obligations, where applicable — Art. 6(1)(c) GDPR.
§4. Service providers (data recipients)
1.To operate the Service we use the following providers, who process personal data on the Operator's behalf (processors):
- Cloudflare, Inc. (USA) — content delivery (CDN), DNS, DDoS protection, firewall, anti-bot protection and IP-based geoblocking. Processes IP addresses, technical connection data and security data.
- Supabase, Inc. (USA) — database and backend infrastructure of the Service. Processes data stored in the Service's database and related technical logs.
- Google (Google Workspace / Gmail) — email service for the address [email protected]. Processes the content of correspondence, email addresses and related metadata.
2.We do not sell personal data.
§5. Transfers outside the European Economic Area
1.The providers listed in §4 are based in the United States or use infrastructure located outside the EEA, so personal data may be transferred to third countries.
2.Such transfers take place on the basis of the EU-US Data Privacy Framework (for certified providers) and/or Standard Contractual Clauses approved by the European Commission, as set out in each provider's data processing terms.
3.You may request information about the safeguards applied by contacting the Operator.
§6. Cookies and similar technologies
1.The Service uses only cookies and similar technologies that are strictly necessary for its operation and security, in particular cookies set by Cloudflare (e.g. __cf_bm, cf_clearance) used to distinguish human visitors from bots and protect the Service against attacks.
2.Strictly necessary cookies do not require consent. You can block them in your browser settings, but this may prevent the Service from working correctly.
3.The Service does not use advertising or tracking cookies. If analytics or other non-essential cookies are introduced in the future, they will be used only after obtaining consent, and this Policy will be updated.
§7. Retention periods
1.Technical and security logs — for a limited period necessary for security purposes, generally no longer than 12 months, unless longer retention is necessary to investigate a specific incident or defend legal claims.
2.Correspondence — for the time needed to handle the matter and then for up to 3 years from the last contact, for the purpose of defending possible claims.
3.Data processed by providers in their own systems are retained in accordance with their data processing terms.
§8. Your rights
1.You have the right to:
- access your data and receive a copy;
- rectify inaccurate data;
- erasure of data;
- restrict processing;
- object to processing based on legitimate interest;
- data portability, where applicable;
- lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
2.To exercise your rights, contact the Operator at [email protected]. We may ask for information needed to confirm your identity.
3.We respond without undue delay, and in any case within one month, which may be extended in cases provided for by law.
4.Providing data is voluntary. Without technical data (e.g. IP address) the Service cannot be displayed.
§9. Automated decision-making
1.Geoblocking and anti-bot protection automatically restrict access based on IP address and technical data. This does not produce legal effects for you and serves only to protect the Service and enforce its availability policy.
2.If you believe access has been restricted in error, you may contact the Operator.
§10. Minors
The Service is intended for adults. We do not knowingly process data of persons under 18. If you believe a minor has sent us personal data, please contact us and we will delete it.
§11. Security
The Operator applies appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and the security features of the providers listed in §4.
§12. Changes to this Policy
1.The Operator may update this Policy, in particular in connection with changes in law, technology or the providers used.
2.The current version is always available on Bonusoria.news, with the date of the last update.
Operator Details
Operator: Bonusoria
Contact: [email protected]
Website: https://bonusoria.news
Effective date: [PUBLICATION DATE]