Information we collect
Identity and contact data
bartizan acts as the data controller. We collect various types of personal data depending on how you interact with our platform. This includes your first name, last name, username, account credentials, email address, billing address, and telephone numbers provided during registration or checkout.
Financial and transaction data
We collect details about payments to and from you, voucher redemptions, and purchase history. We securely handle tokenized payment credentials and partial card details. Full card numbers are processed directly by our acquiring partners and are never stored on bartizan servers.
Technical data
When you access our platform, we automatically collect your IP address, browser type, time zone setting, operating system, and platform details via cookies and server logs.
How we use your information
Contract performance
We rely on explicit user consent and contractual necessity for data processing. We use your data to manage your account registration, process payments, and issue secure digital vouchers.
Security and fraud prevention
We rely on legitimate interests to utilize your personal data for fraud prevention, network security, and risk profiling. If an automated system flags a transaction as high-risk, it may be blocked.
Data protection
Security measures
We have implemented robust security measures to prevent your data from being accidentally lost, used, or accessed in an unauthorized way. All data transit is encrypted via TLS/SSL, and database storage uses industry-standard encryption at rest.
Data retention
Our data retention policies dictate that we retain account data for the duration of your active account lifespan plus 6 years. Financial and transaction data is kept for 7 years from the date of the transaction to satisfy legal and accounting obligations.
Your rights
Exercising your rights
Under applicable data protection laws, you possess the right to:
- Access a copy of the personal data we hold about you.
- Rectify incomplete or inaccurate data.
- Request erasure of your data (the “right to be forgotten”).
- Restrict the data processing of your information.
- Withdraw user consent at any time for marketing communications.
To exercise any of these rights, please contact us at support@bartizan.me.