1. Home
  2. Privacy Policy
Privacy Policy

This privacy policy applies to www.shoptastic.io owned and operated by SHOPTASTIC PTE. LTD..

This privacy policy describes how SHOPTASTIC PTE. LTD. collects and uses the personally identifiable information you provide on our Web site: www.shoptastic.io.

It also describes the choices available to you regarding our use of your personally identifiable information and how you can access and update this information.

Data Protection Declaration of SHOPTASTIC PTE. LTD.

The collection, processing, and use of your personal data occurs exclusively in compliance with applicable data protection regulations. Without your consent, we will not use your personal data in any way other than that stated in or in connection with this privacy policy. This privacy policy can be accessed, saved, and printed at any time under Privacy Policy.

We would like to explain to you below which data we collect, process and use, when and for what purpose.

1. General Information

1.1 Scope of the Privacy Policy

SHOPTASTIC is a cashback provider. For every online purchase a SHOPTASTIC user makes while logged in via a SHOPTASTIC link, the SHOPTASTIC user receives a cashback bonus for valid online purchases or transactions. This privacy policy applies to the website.

1.2 Person Responsible

We, SHOPTASTIC PTE. LTD., are responsible for data protection within the meaning of the applicable data protection laws. We decide on the purposes and means of processing personal data. Our contact details are: SHOPTASTIC PTE. LTD., Singapore. You can contact us via our contact form on the website www.shoptastic.io. The email address for data protection issues is dataprivacy@shoptastic.io.

1.3 Further Processing for Another Purpose

We have described the purposes for which we process your personal data in Section 1.1, Scope of this Privacy Policy. We will notify you if we intend to use your personal data for a purpose other than that for which we originally collected it.

1.4 Obligation to Provide / Necessity of Personal Data for the Conclusion of the Contract

The provision of personal data is not required by law. In order to conclude the user agreement with us, we need certain data such as your name and email address. Without this data, we are unable to enter into a user relationship and provide our service to you. As part of the user agreement, you are contractually obligated to keep the data provided true and complete with regard to all applications you use for the entire term of the contract. We will inform you during the input process if the provision of personal data is required for the respective function or application ("mandatory field" = "*"). If required data is not provided, the function or application in question cannot be provided. If optional data is not provided, this may mean that we cannot provide our services in the same form and to the same extent.

2. General Information on the Purposes of Data Processing

SHOPTASTIC enables end customers to receive a bonus for their online purchases by distributing sales commissions from e-commerce retailers and other providers, primarily to end customers, in the form of cashback bonuses. Our service is subject to very dynamic development. Therefore, it is not possible to display every single detail. However, we would like to provide you with essential details of the processing.

Personal data is processed primarily to fulfill our contractual obligations to our users. We also use personal data to send you push notifications or newsletters. This will not happen without your consent. In certain cases, we are obligated to disclose data, for example, to law enforcement agencies.

2.1 Information You Provide to Us

2.1.1 Access Data

During registration, we collect the following personal data as access data. These include your email address, username, and password. Your access data will not be visible to third parties. Your username will only be visible if you decide to comment on deals in cashback promotions or rate retailers when a corresponding online purchase has the cashback status "available." Under certain circumstances, such as in the case of a subsequent booking request, we will pass your data on to third parties to ensure our service functions as intended. You can find out more about this under 2.1.7. We will delete this data when you delete your user account.

2.1.2 Verification of the Person

For the registration process, we need to know that you are actually who you say you are. We use a verification process for this. We will send you an email to the email address you provided. After you confirm by clicking the confirmation link, we know that the email address you provided belongs to you.

2.1.3 Data as Part of User Feedback

If you provide us with feedback yourself or as part of one of our surveys, we will process your data to conduct the survey and to evaluate and, if necessary, implement your feedback. If necessary, we will obtain separate consent from you to process your data as part of a survey. We will store this data until your user account is deleted if you have not consented to further processing.

2.1.4 Email Address

We will use the email address you provided to regularly send you newsletters, purchase notifications, support messages, and news electronically, unless you have objected to such use. If you have consented to receiving these notifications but no

longer wish to receive them, you can unsubscribe at any time via your settings. In the newsletters, we can inform you about new features in our app, for example. You can unsubscribe from the newsletter at any time on the SHOPTASTIC website or via the unsubscribe links in the respective newsletter.

Information we automatically receive as a result of your use of the website: When you visit our service, we automatically collect data from you during your use or visit. This is done with the help of various tracking technologies.

2.1.5 What is Tracking?

We collect user data on our server. We use cookies, pixels, and similar tracking technologies on end devices. We store tracking data for up to 36 months.

2.1.6 Why Do We Do This?

We guarantee the safetyWe have a legitimate interest in using tracking to ensure that users do not use SHOPTASTIC to financially harm affiliated retailers and providers. Only a few employees have access to this data.

We want to provide our service with high availability The tracking and associated analysis are primarily used to fulfill our contractual obligations to our users and affiliated merchants or providers. You have the option to prevent third-party tracking.

We measure and optimize our advertising We also use tracking to measure the success of our advertising campaigns and optimize the display of ads. This includes technologies from third-party providers such as Google and Bing. You have the option to prevent third-party tracking.

We create statistical indicators We use tracking technologies to determine and compile statistical data on the use of our services. You have the option to prevent third-party tracking. You can find information about this in the tool's section.

2.1.7 Who Receives Data About You?

We only share your personal data with third parties if this is necessary to fulfill our own business purposes (in particular, to provide the services owed to you, such as follow-up booking requests if tracking didn't work or was faulty) or if we are required to do so by law or due to a court or official order. If you contact us via the contact form while not logged in, you must give us your consent for the further processing of your data. This data will not be shared with third parties.

When we collaborate with external service providers for data processing (e.g., in software development), this is generally done on the basis of so-called contract processing, in which we remain responsible for the data processing. We review each of these service providers in advance for the data protection and data security measures they have taken, thus ensuring compliance with the legally required contractual provisions for the protection of personal data.

3. Data Collection

3.1 Cookies

SHOPTASTIC uses cookies. Cookies do not harm your computer and do not contain viruses. Cookies are the basis for the usability of SHOPTASTIC. Cookies are small text files that are stored on your computer and saved by your browser. Cookies ensure that we can assign your online purchases in partner shops to your user account for cashback rewards at SHOPTASTIC.

Most of the cookies we use are so-called session cookies. These are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can configure your browser to inform you about the use of cookies and to only accept cookies in individual cases, to allow the acceptance of cookies for specific cases, or to generally exclude them, as well as to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of SHOPTASTIC cannot be guaranteed, as we cannot record your purchases from our partners.

Cookies that are necessary to carry out electronic communication or to provide certain functions you request (e.g., cashback tracking) are stored on the basis of legitimate interests. SHOPTASTIC has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.

3.2 Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of server request
  • IP address

This data will not be merged with other data sources. The basis for data processing is the fulfillment of a contract or for pre-contractual measures.

3.3 Contact Form

If you send us inquiries via the contact form, the details you provide in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions. We will not pass this data on without your consent. The data entered into the contact form is therefore processed exclusively on the basis of your consent. You can revoke this consent at any time. An informal email to us is sufficient for this purpose. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

3.4 Disclosure of Personal Data to Third Parties

We are committed to safeguarding the personal data of our users and strictly limit the disclosure of such information. We do not share, sell, or otherwise disclose personally identifiable information (PII) to third parties, including commercial partners, unless:

(i) we are required to do so by applicable law or valid legal process;

(ii) we have obtained the user’s explicit, informed consent; or

(iii) such disclosure is strictly necessary for the performance of a contractual obligation directly between the user and Shoptastic (e.g., payment processing, customer service), and only with trusted processors under appropriate data protection agreements.

We expressly reserve the right to decline third-party audit or verification requests that would require the disclosure of PII in contravention of local or international data protection laws, including but not limited to the Personal Data Protection Act (PDPA) and General Data Protection Regulation (GDPR).

We implement rigorous technical and organizational safeguards to ensure the integrity and confidentiality of user data, and we evaluate all requests for data disclosure against this policy and our legal obligations.

4. Analysis Tools and Advertising

4.1 Google Analytics

SHOPTASTIC uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is typically transferred to a Google server in the United States and stored there.

Google Analytics cookies are stored on the basis of legitimate interests. SHOPTASTIC has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

We have activated the IP anonymization function on our website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide SHOPTASTIC with other services related to the use of SHOPTASTIC. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Objection to data collection

You can prevent Google Analytics from collecting your data by setting an opt-out cookie. This opt-out cookie allows you to prevent the collection of your data on future visits to this website. For more information on how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245.

5. What Rights Can You Assert?

5.1 Right of Objection

You can object at any time to the processing of your personal data based on legitimate interests.

You have the right to object at any time to the processing of your personal data in accordance with legitimate interests.

5.2 Direct Marketing

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising purposes. You can unsubscribe from our newsletter at any time in your settings or by email using the link provided at the end of each newsletter, without incurring any costs other than the transmission costs according to the basic rates.

5.3 Right to Information

Upon request, you will receive information about the processing of your personal data. You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you have the right to information about this personal data.

As a user of our website, you can request this information here: SHOPTASTIC PTE. LTD., Singapore or via the contact option on our website: /contact or by email to dataprivacy@shoptastic.com.

You also have the right to the following information:

  • The processing purposes
  • The categories of personal data being processed
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
  • Where possible, the envisaged period for which the personal data will be stored, or, where not possible, the criteria used to determine that period
  • The existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing
  • The existence of a right of complaint to a supervisory authority
  • Where the personal data are not collected from the data subject, all available information as to their origin
  • The existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

If personal data is transferred to a third country or to an international organization, you as the data subject have the right to be informed about the appropriate guarantees in connection with the transfer.

5.4 Right to Rectification

You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of providing a supplementary statement.

5.5 Right to Erasure

You have the right to request the deletion of your personal data. In certain cases, we are obligated to comply with this request.

You have the right to request that we delete personal data concerning you immediately if one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
  • You object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes.
  • The personal data was processed unlawfully.
  • The erasure of personal data is necessary to fulfill a legal obligation under applicable law to which we are subject.
  • The personal data were collected in relation to information society services offered directly to a child.

Upon your request, we are obliged to delete the relevant data immediately (72 hours). The legality of the processing carried out on the basis of the consent until revocation remains unaffected.

5.6 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal data. In certain cases, we are obligated to comply with this request. You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us to whom the personal data was provided.

The prerequisite is that the processing is based on consent or on a contract and the processing is carried out using automated procedures. When exercising your right to data portability, you have the right to request that the personal data be transmitted directly from us to another responsible body, where technically feasible.

You have the right to request that the processing of your personal data be restricted if you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data. If the processing is unlawful and you refuse to delete the personal data and instead request that we restrict the use of the personal data, we will comply with your request. Processing will also be restricted if we no longer need your personal data for processing purposes, but you need it to assert, exercise or defend your own legal claims, or if you have objected to processing, as long as it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons. We will inform you before the restriction is lifted.

5.7 Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from us to whom the personal data was provided.

The prerequisite is that the processing is based on consent or on a contract and the processing is carried out using automated procedures. When exercising your right to data portability, you have the right to request that the personal data be transmitted directly from us to another responsible body, where technically feasible.

5.8 Right of Withdrawal in Case of Consent

You have the right to revoke your consent to data processing at any time.

To the extent that the processing is based on your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing carried out on the basis of your consent until the revocation.

5.9 Right to Complain

If you believe that the processing of personal data concerning you violates applicable data protection laws, you can lodge a complaint with a supervisory authority. In particular, you can also contact the supervisory authority of your habitual residence, your place of work, or the place of the alleged violation.

As of: 06/04/2023