Version_V1_26052018



Privacy Statement for boon. app, account and wallet service


1. General

Wirecard Card Solutions Limited ("Wirecard" or "we") respects users' right to privacy. This Privacy Policy describes how Wirecard collects, stores, shares and uses personal data about you, and how you can exercise your privacy rights. This Privacy Policy only applies to personal data that we process in relation to the boon. app, boon. account and boon. wallet service. We operate the boon. app, account and wallet service in accordance with the provisions of the European General Data Protection Regulation 2016/679 ("GDPR"), the German Federal Data Protection Act (Bundesdatenschutzgesetz, "BDSG") and all other provisions with relevance in the area of data protection law.



2. How to contact us

The data controller of your personal data is Wirecard Card Solutions Limited at Grainger Chambers, 3-5 Hood Street, Newcastle upon Tyne, NE1.

If you have any questions about how we collect, store and use your personal information or would like a copy of the information we hold about you, then please contact us. You can either write to us at the above address or e-mail us at: [contact@boonpayment.com].



3. What is the boon. app, account and wallet service about?

Wirecard offers its customers products and services relating to electronic payment transactions. The objective is to allow companies and consumers worldwide to process electronic transactions safely and smoothly. Security and the protection of personal data is one of the most important aspects in the context of handling and processing of payments. This is why Wirecard places particular emphasis on high data protection standards. For more information about Wirecard, please see our website at www.wirecard.com.

Our boon. app and account allow users making contactless payments using their smartphones on NFC enabled terminals. boon. is a prepaid solution. That means that boon. users have to load their account first before any contactless or online payment is possible. boon. users can send money to other boon. users or receive money from other boon. users.

In addition, boon. provides virtual MasterCard which boon. users can use for e-commerce transactions.

It is only possible to use boon. together with the boon. Android or iOS app. There is no other way to access the boon. account, e.g. by using a web browser.
However, users may deposit their boon. virtual card in a digital wallet of a 3rd party provider and set boon. as the default payment method. Our wallet service is based on cooperations with several 3rd party e-wallet service providers to provide you with a payment solution as described in detail in the boon. wallet service terms and conditions.



4. Collection and Processing of personal data for contract fulfilment

4.1. Information you provide by setting up your account and using the boon. app or when and carry out transactions via the boon. app:

  • Full name;
  • Date of birth;
  • Residential address;
  • E-mail address and mobile phone number;
  • Encrypted account data, in particular Password and security question with security answer;
  • Details of transactions you carry out;
  • Information about how you use and manage your boon. account and app;
  • Furthermore, we collect device specific data such as device type and manufacturer, OS version, boon. mobile app version and screen resolution to offer an in-app feedback form which boon. users can use to send direct feedback to the app development team and to offer an in-app cancellation form which users can use to send a request for their account to be closed by the customer care team;
  • We also collect information on any conversation users have with customer support chatbots.

4.2. Purposes of processing

All of this data is processed to set up your account, to verify your identity as required by law and to carry out an optional legitimacy check to receive higher limits. Also, we process the above listed personal data to provide you with the boon. app and account services, i.e. carry out your transactions and understand how you use the boon. services or track in-app behaviour or if you contact us to report a problem or query or if you reply to surveys that we ask you to complete for research purposes.


4.3. Transfer of personal data


4.4. Wirecard shares your personal data with other Wirecard companies, our service providers and third parties as follows

  • Other Wirecard Companies to provide you with our services. Specifically, but without limitation, our services use and rely on the back-office processing and storage services of our German affiliate company Wirecard Technologies GmbH and its systems and servers based in Germany. Wirecard Technologies GmbH also provides for the "Host Card Emulation" (HCE) software which allows contactless payment at the point of sale (POS). Additionally our affiliate Wirecard Processing FZ LLC in Dubai receives personal data to help carry out our services. Our services are managed by Wirecard UK and Ireland Limited;
  • Wirecard being the issuing financial institution of the boon. service is required by law to verify your identity (KYC - Know Your Customer - Process). Wirecard has commissioned Wirecard Communication Services GmbH an external service provider with that KYC process. Specifically, the external service provider will ask for the user data enlisted above and additionally for

    • Place of birth;
    • Gender;
    • ID Details (number, expiry date, issuing date, country and respective government agency);
    • Residential detail.

      The external provider will process all the above enlisted types of data and verify your identity based on a video chat enabling you (the end user) to identify yourself completely online.

  • Credit-checking agencies or fraud prevention agencies and other organizations to check all personal information given by you and to perform a search of your credit file in order to verify your identity. The agencies may keep a record of your information and the searches made (even if any application is unsuccessful or does not proceed);
  • MasterCard as a card network and payment scheme, to provide the boon. services, in particular the boon. digital card;
  • 3rd party e-wallet providers, as Apple Pay, Google Pay, Fitbit or Garmin wallets: If the user adds the card to a 3rd party wallet, card details and name are at user's option transferred manually or automatically to the 3rd party provider. When adding the card to the 3rd party provider, the user has to accept the providers T&Cs which describe how user data is shared and processed.
  • Astute Chatbot service ("Astute") as a basic and fully digital customer support service. In case a boon. user uses the Astute chatbot service, personal data (IP address and content of the conversation) is only processed by Astute to answer simple questions and support with basic issues;
  • Law enforcement agencies, regulatory organisations, courts or other public authorities: to comply with law or regulation or in connection with proposed or actual legal proceedings or regulatory actions;
  • Selected third parties, who may use your personal information to send you marketing messages, if you have agreed that they may do so;
  • Information on web analysis and AI tools as described below.

4.5. Information you provide when you contact us

We will store the personal data provided by you when you contact us (e.g. name, address, telephone number, e-mail address) in our customer relationship management system. We will use such personal data

  • to respond to your contact request;
  • in anonymized form to support our internal business objectives, namely data analyses, revisions, the development of new products, improvement of this internet presence, improvement of our services, detection of usage trends and determination of the effectiveness of our advertising campaigns);
  • in order to prevent and identify abuse or fraud.

The data collected via the contact form will not be forwarded to third parties.


4.6 Transfer of personal data

4.6.1. Adjust Performance Marketing

The boon. app uses the Analysetool adjust ("adjust"), a product of adjust GmbH, Saarbrücker Str. 37a, 10405 Berlin, Germany to measure the success of marketing campaigns. By using adjust, the usage behaviour of mobile app users on iOS and Android devices may be examined (ad tracking). This is done to understand how the boon. app is used and to analyse and improve the impact of mobile advertising campaigns. If a user comes through a campaign, it is traced whether he logs in then. By installing the boon. app, adjust stores the associated installation and event data. adjust uses the IP address of your mobile device, anonymized by a code such as "gat_anonymizeIp()", and an ID number such as the Identified for Advertising (IDFA) ID or the Google Play Services ID. You can prevent ad tracking by objecting. To do this, you can reset your ID at any time in in your device's system settings or in the data protection settings of the boon. app by pressing the "Disable analysis" button.


4.6.2. Countly

To analyse usage behaviour in the app we use Countly in a self-hosted version. Countly helps to improve the app, because Wirecard can recognize where the user has difficulties e.g. when entering text / numbers.


4.7. Marketing communications

You can prevent this analysis by objecting. To do this, you can reset your ID at any time in in your device's system settings or in the data protection settings of the boon. app by pressing the "Disable analysis" button.

If a user has decided to receive marketing communications, we use the provided email address and mobile phone number to send email marketing messages and push notifications. Users may opt out from email messages within the boon. app settings or by using the opt-out link in the email footer area. Push notification opt-out can be performed in the iOS system settings, or in Android app settings.


4.8. Legal basis for processing personal data

Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it. We will collect personal data from you where we need it to perform a contract with you. That is to provide you with the boon. app and account and to deal with any issues occurring related to these services. Besides, it is in our legitimate interest to process your personal data to carry out credit checks, check your identity, for fraud prevention and risk assessment purposes. Regarding the use of the analysis tools adjust and Countly we rely on our legitimate interest to understand how the app is used, in particular to measure the impact of marketing campaigns (adjust) and to learn where users have problems (Countly) so that we can improve our app and make it more user friendly. Furthermore, we process your personal data if required to comply with statutory obligations or court or governmental orders or if we have your consent for the processing which relates to receiving marketing communications.



5. How we look after your personal information

Wirecard has appropriate technical and organisational security measures in place to protect your personal information against unauthorised or unlawful use and against accidental loss, damage or destruction. We put in place strict confidentiality agreements (including data protection obligations) with our third party service providers.



6. International data transfers (including to outsourced service providers)

Wirecard will transfer your personal information to business partners, service providers and other Wirecard offices that are located in territories outside of the European Economic Area ("EEA"). In particular, any payment transactions will be processed by Wirecard Processing FZ LLC (WDP) in Dubai (UAE) and we may process payments through other organisations such as banks, payment processors, card networks and payment schemes that are located outside of the EEA. However, if we process your personal data outside the EEA, we have in place appropriate measures such as Binding Corporate Rules, Standard Contractual Clauses or EU-US Privacy Shield certifications providing for an adequate level of protection.



7. Data retention

When Wirecard does not have any legal basis to process your personal data, it will be deleted. Wirecard retains personal data collected from you where we have an ongoing legitimate business need to do so to provide you with a service you have requested or to comply with statutory retention obligations e.g. under tax or accounting law.



8. Your data protection rights

If you wish to access, correct, update or request deletion of your personal data, you can do so at any time by contacting us using the contact details provided under the "How to contact us” heading above.

You can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data. Again, you can exercise these rights by contacting us using the contact details provided under the "How to contact us” heading above.

Similarly, if we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.

You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact us at the above e-mail address.

Our data protection officer can be reached under data.privacy@wirecard.com.