Privacy & GDPR
Privacy Policy
This policy explains what we collect, why, how we protect it, and the rights you have under GDPR.
Controller
GP Holding Malaga SL (CIF B93220390), Av. Ramon y Cajal, 50, 29640 Fuengirola, Malaga, Spain, is the data controller for allbonuscodes.com. Contact: Contact page.
What we collect
- Usage and analytics data (page views, device/browser info, approximate location) via privacy-friendly analytics.
- Server logs for security and abuse prevention.
- Contact form submissions (name, email, message) when you reach out to us.
Why we collect it (legal bases)
- Legitimate interest: site security, fraud/abuse prevention, aggregated analytics to improve content.
- Consent: optional analytics or marketing cookies where required.
- Contractual/consent: responding to your contact requests.
How we use data
To operate the site, measure performance, improve guides, and respond to enquiries. We do not sell personal data. Partner links use redirect URLs; we do not attach personal identifiers to outbound affiliate clicks.
Retention
Server logs are retained for a limited period for security; contact messages are kept only as long as needed to handle the enquiry; analytics data is retained per the analytics provider’s default window and only in aggregated form.
Sharing
We may share data with processors that provide hosting, analytics, security, or email services. All processors are under contractual obligations to protect data and act only on our instructions. We do not sell personal data.
International transfers
Where data is processed outside the EEA, we rely on appropriate safeguards (e.g., SCCs) and work with providers that commit to GDPR-compliant handling.
Your rights under GDPR
- Access, rectification, erasure, restriction, objection, and data portability.
- Withdraw consent at any time (for consent-based processing).
- Complain to your supervisory authority (e.g., AEPD in Spain).
To exercise rights, contact us via the Contact page.
Cookies & similar technologies
See our Cookie Policy for details on categories, purposes, and controls.
Security
We use TLS, access controls, and least-privilege principles. Access to production systems is limited to authorised personnel.
Updates
We will update this policy when we change data handling or add new partners. Material changes will be dated and noted on this page.