Privacy policy
How WinUCard collects, processes, and protects your personal data in compliance with the GDPR.
Last updated: June 2025
Data Controller
ControllerWinUCard is the controller of your personal data collected through this platform. For any question regarding the protection of your data, you may contact us at: contact@winucard.com.
Data Collected
DataIn the context of your use of the platform, WinUCard collects the following data: email address (mandatory, for sending order confirmation, tickets, and notifications), payment data (processed directly by Stripe, not stored on our servers), raffle participation history, assigned ticket numbers. We do not collect direct banking data.
Processing Purposes
PurposesYour personal data is used exclusively to: (a) manage your account and raffle participation, (b) issue and transmit your participation tickets, (c) notify you in the event of a win, (d) ensure card delivery if you are the winner, (e) fulfill legal and accounting obligations related to transactions, (f) improve our services.
Legal Basis for Processing
Legal basisThe processing of your data is based on the following legal grounds: performance of a contract (raffle participation and prize delivery) for data necessary to the transaction; legal obligation for data required by accounting and tax regulations; our legitimate interest for analytical data enabling service improvement.
Payment and Stripe
StripePayments are processed by Stripe, Inc. Stripe collects and processes your payment data directly under its own privacy policy. WinUCard does not store any banking data. The only information received from Stripe by WinUCard is the payment confirmation or refusal, along with an anonymized transaction identifier.
Data Retention
RetentionYour personal data is retained for a period of 3 years from your last participation, then automatically deleted from our active systems. Accounting data related to transactions is archived in accordance with legal obligations (10 years). Payment data processed by Stripe is subject to Stripe's own retention policy.
Your Rights
RightsIn accordance with the General Data Protection Regulation (GDPR), you have the following rights: right of access to your data, right to rectification of inaccurate data, right to erasure (within legal limits), right to data portability, right to object to processing, right to restriction of processing. To exercise any of these rights, send your request to contact@winucard.com with a copy of a proof of identity.
Data Sharing with Third Parties
Third partiesWinUCard does not sell, rent, or share your personal data with third parties for commercial purposes. Your data may only be shared with our technical service providers strictly necessary for the service to operate (Stripe for payments, Vercel for hosting) and in compliance with their own privacy policies.
Data Security
SecurityWinUCard implements appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure, or destruction. All communications between your browser and our servers are encrypted using the TLS protocol.
Policy Changes
ChangesWinUCard reserves the right to modify this privacy policy at any time. Changes take effect upon publication on this page. In the event of a material change, we will notify you by email.
To exercise your rights, contact us at contact@winucard.com