Privacy Policy · BOONKA

This document is provided for general informational purposes and reflects the version in force as of its effective date. The version published on BOONKA’s official channels prevails in the event of any discrepancy.

Introduction

BOONKA attaches particular importance to the protection of its users' personal data and undertakes to process it in compliance with applicable Algerian legislation, in particular Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, together with its implementing texts.

This Privacy Policy explains what personal data BOONKA collects, why it is collected, how it is used, with whom it may be shared, how long it is retained, and what rights users have over their data. It supplements the BOONKA General Terms of Use (the "Terms") and forms an integral part of the contractual framework applicable to the use of the BOONKA platform.

By creating an account or using the services offered by BOONKA, the user acknowledges having read this Privacy Policy.

General principles

Personal data is collected and processed only for specified, explicit and legitimate purposes, in compliance with the principles of lawfulness, fairness, transparency, proportionality, data minimisation, accuracy, storage limitation, integrity and confidentiality.

BOONKA implements appropriate technical, organisational and security measures in order to ensure the confidentiality, integrity, availability and traceability of the personal data processed in the course of its services.

1. Data we collect

BOONKA may collect in particular the following categories of data:

identification data (surname, first name, date of birth, nationality, etc.);
contact details (address, telephone number, email address);
data relating to the user account;
authentication and security data;
technical connection and browsing data;
data relating to operations carried out on the platform;
documents provided in the context of KYC procedures;
any other data strictly necessary for the provision of the services.

BOONKA ensures that it collects only the data strictly necessary for the provision of the services offered, for compliance with its legal and regulatory obligations and for the security of the platform.

The data collected is used exclusively to:

allow the creation, management and securing of user accounts;
perform the services offered by BOONKA;
comply with legal and regulatory obligations, in particular regarding user identification, anti-money laundering, counter-terrorist financing and fraud prevention;
ensure the security of the information systems;
handle support requests and complaints;
improve the quality, performance and security of the services offered.

Geolocation

Where the user activates geolocation services, BOONKA may process location data in order to offer certain services, in particular the search for nearby merchants or partners.

BOONKA may use mapping and geolocation services provided by third parties, such as Mapbox, using in particular the cartographic data of OpenStreetMap or of any other equivalent provider. Use of these services may involve the processing of certain technical data necessary for their operation, in accordance with this Privacy Policy and, where applicable, the terms of use applicable to those providers.

Geolocation is used only where this feature is necessary for the operation of certain services offered by BOONKA or where the user has expressly authorised it.

The user may, where technically possible and compatible with the operation of the services concerned, deactivate this feature from the settings of their device or of the application. Refusal to activate geolocation may however limit access to certain features requiring this information.

Technical data

In order to ensure the quality, stability and security of its services, BOONKA may collect technical information relating to the device used, in particular the device model, the operating system, the version of the application, and the technical information necessary to diagnose incidents. This information is used only for maintenance, security and service improvement purposes.

Where BOONKA uses tools or development kits provided by third parties in order to enable certain identity verification, security or fraud prevention features, these may collect technical diagnostic data relating to the device used, in particular its model, the operating system version and information relating to the technical performance of these tools. This data is used exclusively for maintenance, security, diagnostic and service quality improvement purposes.

2. Why we process your data

Personal data is processed in particular in order to:

create and manage the user account;
allow access to the services;
ensure the security of the platform;
prevent fraud and abusive use;
comply with customer due diligence (KYC) obligations;
comply with anti-money laundering and counter-terrorist financing obligations;
handle complaints and support requests;
communicate with users;
improve the services and develop new features;
produce anonymised statistics.

Data is retained for the period necessary to achieve the purposes for which it was collected, as well as for the retention periods provided for by applicable legal, regulatory or contractual provisions.

Upon expiry of these periods, data is deleted, anonymised or archived in accordance with applicable regulations.

3. How your data is shared

Personal data may be disclosed only where necessary:

to banks and financial partners involved in the performance of the services;
to technical service providers acting on behalf of BOONKA;
to administrative, judicial or regulatory authorities where the law so requires;
to subcontractors bound by confidentiality and security obligations.

BOONKA does not sell its users' personal data.

Personal data may be disclosed, to the extent strictly necessary, to financial partners, technical service providers, subcontractors, competent administrative or judicial authorities and any other person where its disclosure is required by applicable legislation or regulation.

BOONKA may disclose all or part of the personal data to the competent administrative, judicial or regulatory authorities where such disclosure is required by law, by regulation or by a duly enforceable decision.

4. Data security

BOONKA implements appropriate technical and organisational measures in order to protect data against loss, destruction, alteration, unauthorised disclosure and unlawful access. These measures are regularly reassessed in order to take account of changes in risks and technologies.

Access to data is limited to persons authorised by reason of their duties and subject to a confidentiality obligation.

BOONKA, its staff, its service providers and its partners undertake to preserve the confidentiality of the information to which they have access in the course of their duties. Confidential information may be disclosed only to authorised persons or where the law so requires. This obligation remains applicable after the end of the contractual relationship.

Data breach

Where a security incident likely to affect personal data is detected, BOONKA takes all reasonable measures to contain the incident, limit its consequences, restore the security of the systems, and inform the competent authorities and the persons concerned where applicable legislation so requires.

International data transfers

Where certain processing requires a transfer of data to a partner or service provider located outside the national territory, BOONKA ensures that such transfers are carried out in accordance with applicable legislation and with an appropriate level of protection.

5. How long we keep your data

Personal data is retained only for the period necessary:

for the provision of the services;
for compliance with legal and regulatory obligations;
for fraud prevention;
for the exercise or defence of the rights of BOONKA or its partners.

Upon expiry of the applicable periods, data is deleted or anonymised, unless a legal obligation states otherwise.

KYC documents

Identity documents, supporting documents and photographs provided in the context of KYC or KYB procedures are stored in encrypted form, both during transmission and during storage, in accordance with applicable legal and regulatory obligations.

They are retained for the period provided for by the applicable anti-money laundering and counter-terrorist financing regulations, then deleted or archived in accordance with legal requirements.

Biometric verification

Where identity verification is based on a biometric comparison, BOONKA may temporarily generate technical biometric data allowing the correspondence between the documents provided and the image captured by the user to be assessed.

This technical biometric data is used exclusively for the purposes of that automated verification. Unless a legal obligation states otherwise, it is neither retained, nor reused, nor transmitted to third parties after the verification decision.

6. Your rights

Subject to applicable legal provisions, each user may request:

access to their personal data;
rectification of inaccurate data;
updating of their information;
erasure of certain data where this is legally possible;
restriction of certain processing;
any other measure provided for by applicable legislation.

The exercise of these rights may be limited where such limitation results from a legal or regulatory obligation or where it is necessary for fraud prevention, the security of the services or BOONKA’s compliance obligations.

Requests may be sent to BOONKA’s data protection department using the contact details indicated on the platform. BOONKA handles requests under the conditions and within the time limits provided for by applicable legislation.

7. Cookies and similar technologies

BOONKA uses exclusively cookies and similar technologies that are strictly necessary for the operation of the platform and the provision of the services offered. These cookies allow in particular:

user authentication to be ensured;
secure login sessions to be maintained;
the security of access and operations to be guaranteed;
the proper technical functioning of the platform to be ensured.

BOONKA does not use third-party cookies for advertising, profiling, behavioural tracking or audience measurement purposes.

Strictly necessary cookies cannot be deactivated, as their use is essential for access to and the operation of the services offered by BOONKA.

Should BOONKA use, in the future, cookies or similar technologies that are not strictly necessary, users would be informed in accordance with applicable legislation and, where the latter so requires, their consent would be obtained before such use.

8. Changes to this privacy policy

BOONKA may modify its personal data processing in order to take account of technical, functional, legal or regulatory developments. Any substantial amendment to this Privacy Policy is brought to users' attention under the conditions provided for in the BOONKA General Terms of Use.

9. Contact

Any request relating to the processing of personal data may be sent to BOONKA using the contact details indicated on the platform. This Privacy Policy supplements the BOONKA General Terms of Use, which govern access to and use of the platform generally.