For users in the European Economic Area, Bannify aligns its privacy notices and consent workflows with the General Data Protection Regulation (EU 2016/679).
1. GDPR Compliance
We process personal data lawfully, fairly, and transparently, and we keep processing limited to the purposes required to provide and improve Bannify.
2. Lawful Bases
Account and billing processing usually relies on contract necessity; security, fraud prevention, and product reliability may rely on legitimate interests; marketing or non-essential cookies may rely on consent; legal recordkeeping may rely on legal obligations.
3. Data Subject Rights
EEA users may request access, rectification, erasure, restriction, portability, or objection to processing where those rights apply.
4. Transfers and Safeguards
Where data is transferred outside the EEA, Bannify uses appropriate safeguards such as the 2021 EU Standard Contractual Clauses, vendor due diligence, and processor terms where applicable. AI features may involve providers such as OpenAI outside the EEA.
5. Contacts and Complaints
Users may contact Bannify through the published support channel for privacy requests, DPO questions, or representative information where required. Users may also contact their local supervisory authority if they believe their rights under GDPR have been violated.
Product scope and implementation — September 2026
Bannify provides banner editing, preview, script installation, configurable forms and consent interfaces. These tools support an operator’s implementation; they do not by themselves establish compliance or certification. The operator must review the actual published content, trackers, callback recipients and processing purposes. Account deactivation is distinct from physical deletion, and privacy requests may require verification. Read the current Privacy and Cookie policies together with this regional information.