Privacy Policy

PLZ-Gebietsplaner – a service of Bonus Service BS GmbH

Last updated: June 2026

1. Data Controller

The controller responsible for data processing on this website and within the service is:

Bonus Service BS GmbH Dorotheenstr. 5, 45130 Essen, Germany Managing Director: Uwe Cronenbroeck Phone: +49 201-89083160 Email: info@bonuski.de

2. General Information

The protection of your personal data is important to us. We process your data exclusively on the basis of statutory provisions (GDPR, German Federal Data Protection Act). This privacy policy informs you about the key aspects of data processing within our website and application.

3. Server Log Files

When you access our website, information is automatically stored in server log files transmitted by your browser: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technically error-free presentation and security). This data is not merged with other sources.

4. Cookies

We use only technically necessary cookies required to operate the service (in particular session/authentication cookies to maintain your login). These do not require consent (§ 25(2) TDDDG). We do not use tracking or marketing cookies.

5. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption, recognizable by the lock icon in your browser's address bar.

6. Registration and User Account

A user account is required to use the service. During registration we process your name, email address and a password you choose (stored encrypted). Optionally you can sign in via your Google account (single sign-on); we then receive your name, email address and profile picture from your Google account. You may optionally upload a profile or organization image, stored in our object storage (see section 9). Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Data is deleted once you delete your account, unless statutory retention obligations apply.

7. Territory and Assignment Data

Within the service you create sales territories and may assign members of your organization to them by name. You enter this data on your own responsibility as the customer. Insofar as this constitutes personal data of your employees, we process it exclusively on your behalf (processing on behalf pursuant to Art. 28 GDPR). You are responsible for the lawfulness of these entries. Upon request we conclude a data processing agreement with you.

8. Map Data (OpenStreetMap)

To determine the streets and house numbers of a postal code, we query the public Overpass API of the OpenStreetMap project and render maps based on OpenStreetMap. These queries transmit only the postal codes you enter – no personal data. When loading map tiles, your IP address may be transmitted to the respective map servers. Provider: OpenStreetMap Foundation, Cambridge, United Kingdom. Legal basis: Art. 6(1)(f) GDPR.

9. Hosting and Object Storage

Our application and database are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server location Germany). Uploaded images are stored in Hetzner Object Storage (location Helsinki, Finland – within the EU). Legal basis: Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

10. Email Delivery

For transactional emails (e.g. confirmation and invitation emails) we use the email server of our provider ALL-INKL.com (Neue Medien Münnich, Germany; server location Germany). Legal basis: Art. 6(1)(b) GDPR.

11. Contact Form

If you contact us via the contact form, we process the data you provide (name, email, message) to handle your request. Legal basis: Art. 6(1)(b)/(f) GDPR.

12. No AI Processing, No Payment Data, No Tracking

This service involves no processing by artificial-intelligence services. No payment data is collected (the service is currently offered free of charge). We use no analytics or tracking tools.

13. Disclosure to Third Parties

Your data is disclosed only to the processors named in this policy and only to the extent necessary. No transfer to third countries outside the EU/EEA takes place.

14. Your Rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) at any time. Contact us at info@bonuski.de.

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.