Privacy policy

This is a translation. The Dutch version applies if the two differ.

Last updated: 23 August 2026

1. Who are we?

Spaarbeurs is a cashback service that gives you money back when you shop with our partners. The service is provided by Monsen AS (Norwegian org. no. 931 063 499), Inger Bang Lunds vei 5, 5059 Bergen, Norway. Monsen AS is the data controller for the processing described here. Norway belongs to the EEA, and the GDPR applies there in the same way as within the EU. Contact: hallo@spaarbeurs.nl.

2. What data do we collect?

We process the following personal data:

• Account information: name and email address. If you log in with Google, we receive your name and email address from there. We do not ask for your citizen service number.
• Purchase data: information about purchases you make through our affiliate links: the online store, the amount and the time.
• Technical information: IP address, browser, device and operating system, so that the service works and in order to counter misuse.
• Cookies: we use necessary cookies for login and for affiliate tracking, including a device ID (the “sb_did” cookie, lifetime 180 days).
• Click and account events: when you click through to a partner, we record the time, the partner, the IP address, browser information and the device ID. The same happens at registration and at login. The purpose is to be able to link purchases to the right account, including when you shopped before you registered, so that you receive the cashback you are entitled to, and to prevent misuse. We keep this data for no longer than 180 days and process it on the basis of legitimate interest (GDPR art. 6(1)(f)).
• Order confirmations for cashback claims: when you submit a cashback claim, you upload the order confirmation from the online store (PDF or image). We use it solely to check your claim and delete it automatically no later than 90 days after the claim has been handled.

Payout runs through a Revolut payment link that you fill in yourself. We therefore do not collect or store your account number.

3. Why do we process the data?

• To deliver the cashback service and register your purchases.
• To create and manage your account.
• To pay out earned cashback.
• To improve the service and the user experience.
• To meet legal obligations (accounting and tax).

4. Legal basis

We process personal data on the basis of: our agreement with you (GDPR art. 6(1)(b)), legitimate interest (GDPR art. 6(1)(f)), consent where that is required (GDPR art. 6(1)(a)) and a legal obligation where accounting and tax rules demand it (GDPR art. 6(1)(c)).

5. Who do we share data with?

• Affiliate networks: Adtraction, Addrevenue, Tradedoubler and others, to register and confirm purchases.
• Google: if you choose to log in with Google. Google Ireland Limited handles the login and passes your name and email address on to us. Google is an independent data controller for its part of the processing.
• Payment service provider: Revolut, for paying out cashback.
• Technical providers: operation, hosting and email (see section 8).

We never sell your personal data to third parties.

6. Storage and deletion

We keep personal data for as long as you have an active account. If you delete your account, we erase your data within 30 days, with the exception of data we are legally required to keep (as long as 5 years under the Norwegian accounting legislation that applies to Monsen AS). Click and account events with IP address and device ID are deleted automatically after 180 days.

7. Your rights

You have the right to:

• Access the data we hold about you.
• Rectification of incorrect data.
• Erasure of your data.
• Data portability: receiving a copy of your data.
• Object to processing that rests on a legitimate interest.
• Withdraw your consent at any time.
• Lodge a complaint with the Autoriteit Persoonsgegevens, the supervisory authority in the Netherlands.

8. Where the data is processed, and our processors

The data is processed mainly in Norway and within the EU/EEA; the exceptions that involve a transfer to a third country are listed below. Norway falls under the EEA Agreement and under the GDPR, so a transfer there is not a transfer to a third country. We use the following processors:

• Hostinger: operation and hosting of the platform (EU/Lithuania)
• Resend: transactional email. Resend is established in the United States, so email address and message content go there. The transfer takes place on the basis of the EU-US Data Privacy Framework and, in addition, the standard contractual clauses (SCC) of the European Commission with supplementary protective measures.
• Revolut: payouts (EU)
• Google Ireland Limited: login with Google (EU). Google may in turn pass data on to the United States under the Data Privacy Framework.

Spaarbeurs for business, the subscription in which a shop sends customer transactions to us and we act as processor, is not yet offered in the Netherlands. As soon as it is launched, we will enter into a data processing agreement as part of the terms of use.

9. Analytics, marketing and tracking

9.1 Statistics (without cookies)

We use Plausible Analytics to measure traffic and use. Plausible collects no personal data, uses no cookies and does not identify you. No data goes outside the EEA.

9.2 Ad tracking (only with consent)

If you give consent in our consent banner, we may activate ad tracking from platforms such as Meta (Facebook/Instagram), Google Ads, TikTok, Snapchat, Microsoft/Bing, Pinterest, X and Reddit, in order to measure and target advertising. The legal basis is consent (GDPR art. 6(1)(a)). Such platforms may pass data on to the United States on the basis of the EU-US Data Privacy Framework or the standard contractual clauses (SCC). You can change or withdraw your consent at any time via “Cookies” at the bottom of the page. Without consent, none of this is loaded.

See our cookie page for a full overview of cookies and tracking.

9.3 Affiliate attribution (necessary)

To be able to register cashback and credit it to your account, we use affiliate tracking: when you click through to a partner via Spaarbeurs, a first-party subId (a pseudonymous identifier) is stored with us and with the affiliate network in question (see section 5). That is necessary for the service to work and is processed on the basis of our agreement with you (GDPR art. 6(1)(b)). No third-party advertising cookies are set at this step.

10. Contact us

Questions about privacy? Contact us at hallo@spaarbeurs.nl