Privacy Policy

1. Contact and Responsible Controller

The controller responsible for the processing of personal data is:

ReviewCampaigns.com is the main website and application of the Service. Public review links and QR codes may use the domain nice.reviews.

If you contact us, the information you provide will be processed for the purpose of handling your inquiry and any related follow-up communication.

2. Server Log Files and Technical Operation

When you access ReviewCampaigns.com or a public nice.reviews link, technical information may automatically be processed by our infrastructure.

This may include:

• IP address;
• browser type and browser version;
• operating system;
• requested URL;
• referrer URL, where transmitted by the browser;
• date and time of the request;
• technical request and security information.

This information is processed to provide the website and Service, maintain technical stability, prevent abuse, and protect the security of our systems.

The legal basis for this processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in securely and reliably operating the Service.

ReviewCampaigns uses Cloudflare infrastructure for hosting, content delivery, security, serverless processing, database functionality, email delivery, and protection against automated abuse. Protected forms may use Cloudflare Turnstile; Cloudflare may process technical connection information, including the IP address, to assess whether a request is legitimate.

ReviewCampaigns does not store IP addresses, user-agent strings, or referrer URLs in its campaign analytics database.

3. Accounts and Login

Certain ReviewCampaigns features require an account or verified email address.

For account creation, authentication, and account management, we may process information such as:

• email address;
• internal user or account identifier;
• email verification status;
• authentication and session information;
• login timestamps;
• business or campaign associations.

ReviewCampaigns may use passwordless or magic-link authentication. Authentication information is used solely for providing and securing access to the Service.

The legal basis is Art. 6 (1) (b) GDPR where processing is necessary to provide the requested Service and Art. 6 (1) (f) GDPR for security and abuse prevention.

4. Review Campaigns, Links and QR Codes

When a business creates or manages a review campaign, ReviewCampaigns processes the information necessary to provide that campaign.

This may include:

• business or location name;
• selected review platforms;
• public review destinations;
• Google Place IDs or Tripadvisor Location IDs;
• campaign identifiers;
• public nice.reviews links;
• QR codes;
• campaign configuration;
• location assignments;
• campaign activity and engagement statistics.

These data are primarily business and campaign data and are used to create, operate, and manage the requested review campaign.

Public Reviewers do not need to create a ReviewCampaigns account in order to use a review link or QR code.

5. Public Review Links and Analytics

When a Reviewer opens a public nice.reviews link or scans a ReviewCampaigns QR code, limited technical and engagement data may be processed.

ReviewCampaigns stores the following campaign events:

• visits to a review link;
• time of access;
• selected review destination;
• clicks or redirects;
• the detected interface language;
• campaign and location association;
• whether the visit came from a QR code, link, or direct access.

These campaign events do not contain the Reviewer’s IP address, user-agent string, or referrer URL.

This information is used to provide campaign statistics, understand the performance of review touchpoints, maintain security, and prevent abuse.

ReviewCampaigns limits this processing to the information reasonably necessary to operate and measure the Service.

Campaign analytics are intended as practical indicators and may not represent every interaction with complete accuracy.

6. Google, Tripadvisor and Other Review Platforms

ReviewCampaigns may use third-party services such as Google and Tripadvisor to identify official business listings and review destinations.

API requests are generally limited to business and location information required to identify the relevant review destination.

ReviewCampaigns does not intentionally transmit personal data of Reviewers to Google or Tripadvisor through these provider APIs.

When a Reviewer follows a link to Google, Tripadvisor, or another third-party review platform, the Reviewer leaves the ReviewCampaigns environment. Any subsequent processing of personal data is carried out independently by the respective provider under its own privacy policy and terms.

ReviewCampaigns does not control the data processing practices of these independent third-party platforms.

7. Cookies and Local Storage

ReviewCampaigns may use technically necessary cookies or comparable browser storage to provide functions such as:

• authentication;
• login sessions;
• account security;
• campaign management;
• abuse prevention;
• technical preferences.

These technologies are used where necessary for the operation and security of the Service.

ReviewCampaigns does not use advertising or behavioral tracking cookies.

If additional services requiring consent are introduced, the relevant information and consent mechanisms will be provided where required.

8. Email Communication

ReviewCampaigns may send transactional emails required for the operation of the Service, including:

• email verification;
• login links;
• security notifications;
• account-related communication;
• responses to support requests.

ReviewCampaigns does not use account email addresses to send review requests to customers on behalf of users.

Users are responsible for how they distribute their own review links and QR codes.

9. Storage and Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected or where retention is required by law. Retention periods may differ depending on the type of data.

Account information may be stored for the duration of the account and for a reasonable period afterwards where required for security, legal obligations, or the resolution of disputes.

Authentication tokens and temporary security information are retained only for the period necessary for their purpose.

Campaign, QR-code, and public-link information may remain available for longer periods because ReviewCampaigns is designed to provide stable and long-lived public review links.

Technical security logs and analytics data may be retained for limited periods or converted into aggregated information where appropriate.

Deletion of an account does not necessarily require the immediate deletion of technical information that no longer identifies an individual or that must be retained for legitimate security, operational, or legal purposes.

10. International Data Processing

Some technical service providers or third-party platforms may process data outside Austria or the European Economic Area.

Where personal data is transferred internationally, such transfers are made in accordance with the requirements of applicable data protection law and, where required, appropriate safeguards are used.

11. No Automated Decisions

ReviewCampaigns does not use personal data to make automated decisions that produce legal effects or similarly significant effects on individuals within the meaning of Art. 22 GDPR.

12. Your Rights

Under the GDPR and the Austrian Data Protection Act, you may have the following rights regarding personal data processed by us:

• Right of access (Art. 15 GDPR);
• Right to rectification (Art. 16 GDPR);
• Right to erasure (Art. 17 GDPR);
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR);
• Right to object (Art. 21 GDPR);
• Right to withdraw consent where processing is based on consent.

If you believe that the processing of your personal data violates applicable data protection law, you also have the right to lodge a complaint with a supervisory authority.

In Austria, the competent authority is:

13. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to the Service, technical infrastructure, or applicable legal requirements.

The current version will always be published on ReviewCampaigns.com with its current revision date.