Privacy notice for weekendbunnies.com

Last updated:

This notice is about the website weekendbunnies.com. Each of our apps has its own privacy policy, which you find with the app on our apps page.

The short version

  • The website sets no cookies, keeps nothing in your browser, and has no tracking, no analytics and no advertising.
  • Everything on it, the font and the pictures included, comes from our own server. Apart from Cloudflare, which carries the connection, your browser contacts nobody else.
  • Our server logs which pages are requested, but not who requested them: no IP address, no browser details.

Who we are

The website is run by Weekend Bunnies. We are the controller of the personal data described in this notice.

For anything about this notice or your data, email us at office@weekendbunnies.com.

What happens when you visit

To show you a page, your browser connects to our server through Cloudflare, which carries the connection and protects the server from attacks. Like any connection on the internet, this shows your IP address to Cloudflare and to our server, together with the page you ask for and the technical details your browser sends.

Our server uses your IP address only to answer the request. It does not write your IP address down, with the one exception described under "Payment links".

Our server's access log records, for each request: the date and time, whether it came over an encrypted connection, the page or file asked for (without anything after a question mark), whether it was answered, its size and how long it took. If something goes wrong, the error log records the date and time, the part of the server concerned and the file or page involved. Neither log contains your IP address, your browser, the page you came from or anything else that identifies you. Both are deleted after 14 days.

Cloudflare also asks your browser to report to Cloudflare when a page cannot be reached because of a network fault (a standard called Network Error Logging). Such a report goes to Cloudflare only, not to us.

What is kept in your browser

Nothing. The website sets no cookies and uses no other storage in your browser. The homepage has one small script of our own, which opens and closes the contact details and shows the current year. It sends nothing anywhere.

An invoice can carry a QR code or a link that starts with weekendbunnies.com/pay/. When you open it, our server looks up which invoice the code in the link belongs to and sends you straight on to the payment page of our bank, bunq (bunq.me), with the amount and the invoice reference filled in. From there, bunq's own privacy policy applies. Our server shows nothing about the invoice itself.

The access log records the request like any other, including the code in the link, so it shows when a payment link was opened. If the code is not valid, the server also notes the refusal, with the IP address the request came from, in its system log, so that we can notice misuse. That record has no fixed deletion period yet.

When you email us

If you write to office@weekendbunnies.com, we receive your email address and your message. We use them only to read and answer you, and keep them only as long as we need them to deal with your question. We never add your address to a mailing list and never share it.

What we do not do

  • No cookies, no advertising, no tracking, no analytics and no social media buttons.
  • Nothing is loaded from other companies' servers: no outside fonts, scripts or pictures.
  • We do not sell or rent your information, and we do not build profiles.
  • Delivering the website, keeping it secure and keeping short logs to find faults: our legitimate interest in running a working and secure website (UK GDPR and GDPR, article 6(1)(f)).
  • Sending you on to pay an invoice: to perform our agreement with you (article 6(1)(b)).
  • Answering an email you sent: to take the steps you asked for, and our legitimate interest in helping the people who contact us (article 6(1)(b) and (f)).

Where we rely on our legitimate interest, you may object; see "Your rights".

Who processes it for us

  • Cloudflare: carries the connection between your browser and our server and protects the server from attacks. To do that it decrypts the connection, so it can see the request, including your IP address.
  • Leaseweb, from which we rent the server the website runs on, in the Netherlands.
  • Microsoft (Microsoft 365): delivers our email.

These companies process the data on our behalf, under a data processing agreement.

Outside the UK and the European Economic Area

Cloudflare and Microsoft may process data outside the United Kingdom and the European Economic Area, including in the United States. Where they do, the transfer is protected by the EU-US Data Privacy Framework and its UK extension, for companies certified under it, or by standard contractual clauses.

Your rights

Under the UK GDPR, and the GDPR in the European Union and Iceland, you have the right to see the personal data we hold about you and get a copy, to have it corrected or deleted, to have its use limited, to receive it in a form you can take elsewhere, and to object to our use of it where we rely on our legitimate interest.

Because our logs hold no IP addresses or other identifying details, we usually hold no personal data about a visit at all. For an email you sent us, write to office@weekendbunnies.com. We answer within two weeks.

You can also complain to a data protection authority. In the United Kingdom that is the Information Commissioner's Office (ico.org.uk), and in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You may also complain in the country where you live or work.

Security

The website is only served over an encrypted connection (HTTPS). A request over plain HTTP is sent on to HTTPS straight away.

Changes to this notice

If this notice changes, the new version is published here with a new date.