Data portability & provider switch
As of 2026-06-12
Under GDPR Art. 20 and the EU Data Act (Regulation 2023/2854) you may export and take your data to another provider at any time.
Tenant export (business owner)
Full JSON export of your entire business data.
- Endpoint:
GET /api/admin/export - Format: JSON (UTF-8, indented)
- Schema:
boncard.tenant.v1
Field reference for tenant export
| Field | Type | Description |
|---|---|---|
| barbershop | object | All business config, branding, custom copy |
| customers | array | All end-customer records (without unsubscribeToken) |
| cards | array | All loyalty cards |
| transactions | array | Points history |
| services | array | Service catalogue |
| rewards | array | Reward catalogue |
| redemptions | array | Reward redemption history |
Customer export (end customers)
End-customer GDPR requests (Art. 15/17/20) are made in person at the loyalty card provider. No self-service URL — the provider processes every request within one month.
How to initiate?
- Owner: Settings → Privacy → Export (file downloads directly).
- End customer: request in person at the loyalty card provider (GDPR Art. 15/17/20). Provider exports the data and hands it over.
Switch time
Up to 30 days after contract termination your data remains available for download (AGB §10, EU Data Act Art. 29).
Costs
Free of charge. Voluntary until 2027-01-12, mandatory afterwards (Art. 29 EU Data Act).
Migration support
Boncard cooperates in good faith with the destination provider — on request we hand the JSON files over directly via an encrypted channel.
Format stability
Schema version bumps are either backwards-compatible or documented with 90 days advance notice. Current schema version: see the Schema: field.
Questions? sahajaret@gmail.com or LDI NRW (https://www.ldi.nrw.de).
Privacy notice · Data Processing Agreement (DPA) · Sub-processors