Privacy Policy

1. Introduction

Welcome to CashDrill.com (including the mobile application, collectively “Website”). Youvendo GmbH (“CashDrill”, “we”, “us”, or “our”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your data, and outlines your privacy rights under applicable laws.

This Privacy Policy is structured in sections for ease of navigation. Please also refer to our Glossary for definitions of key terms.

Sections:

• Important Information and Who We Are
• The Data We Collect About You
• How Is Your Personal Data Collected?
• How We Use Your Personal Data
• Disclosures of Your Personal Data
• International Transfers
• Data Security
• Data Retention
• Your Legal Rights
• Glossary

2. Important Information and Who We Are

Purpose

This Privacy Policy explains how we process your personal data when you:

• Use our Website
• Create an account
• Participate in our services, surveys, and rewards programs
• Receive support or marketing communications

We do not knowingly collect data from individuals under 16 years of age. If we become aware that a child’s data has been collected, we will delete it promptly. Please contact us at privacy@cashdrill.com if you believe we have collected such data in error.

Controller

Youvendo GmbH is the controller of your personal data.

Contact Details (DPO)

If you have questions or requests, contact:

Data Protection Officer (DPO)

Youvendo GmbH

Im Stöckacker 18, 79224 Umkirch, Germany

privacy@cashdrill.com

*You may also file a complaint with your local data protection authority. We encourage you to contact us first to resolve any concerns.

3. The Data We Collect About You

We collect the following categories of personal data:

• Identity Data: Name, username, country, gender, government ID (e.g., passport, driver’s license).
• Contact Data: Address, email, phone number.
• Special Category Data: Sensitive data like ethnicity, health data, biometric information (only if explicitly provided and with consent).
• Transaction Data: Rewards redeemed, payouts, and gift card redemptions.
• Payment Data: IBAN, PayPal, or wallet details.
• Technical Data: IP address, browser type, OS, device identifiers, cookies.
• Profile Data: Login info, preferences, survey responses.
• Usage Data: Clickstream, pages viewed, time spent.
• Marketing & Communications: Preferences and consent status.

We also process Aggregated Data for statistical purposes, which does not identify you directly.

4. How Is Your Personal Data Collected?

We collect your data through:

• Direct interactions: Account registration, survey completion, support requests, or newsletter sign-up.
• Automated technologies: Cookies, server logs, analytics tools.
• Third-party sources: Facebook, Google Analytics, Microsoft Clarity, etc.

See our Cookie Policy for more details.

6. Disclosures of Your Personal Data

We share your personal data with:

• Service Providers (e.g., analytics, hosting, SMS providers)
• Professional Advisors (e.g., legal, financial)
• Marketing Partners (only with consent)
• Business Transfers (e.g., in the event of a merger or acquisition)

All parties are required to process your data lawfully and securely.

7. International Transfers

Your data may be processed in countries outside the EU, including the U.S. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard transfers.

8. Data Security

We use technical and organizational measures to:

• Prevent unauthorized access
• Limit internal access on a need-to-know basis
• Respond to breaches where required by law

9. Data Retention

We retain your data only as long as necessary:

• To fulfill contractual and legal obligations
• For support, fraud prevention, and improvement
• You may request deletion or correction of your data at any time

10. Your Legal Rights

You have the right to:

• Access your data
• Request correction or deletion
• Object to processing
• Restrict processing
• Request data portability
• Withdraw consent

To exercise your rights, email us at privacy@cashdrill.com. We aim to respond within 1 month.

11. Glossary

• Legitimate Interest: Our business interest in managing and improving services.
• Performance of a Contract: Necessary data processing for service delivery.
• Legal Obligation: Compliance with laws or government regulations.