Terms of use of the loyalty programme for end customers (B2C)
These Consumer Terms (the “Terms”) govern the relationship between a natural person who registers or is registered as a member of a loyalty programme operated by a merchant (the “Merchant”) through the VEXiON cards platform (the “Member” or “You”) and MAMA media s.r.o., with its registered office at Na Hrebienku 1, 811 02 Bratislava, Company ID: 36 767 549 (the “Provider”), which operates that platform.
The loyalty programme, its rules, rewards and benefits (the “Club Rules” or the “loyalty programme rules”) are determined and operated by the Merchant with whom you registered for the programme. The Provider provides the technical platform (the digital loyalty card, the recording of points and stamps, communications) on the basis of which the Merchant operates its loyalty programme.
These Terms govern your relationship to the technical platform and the processing of your personal data within it. The Merchant may add its own specific Club Rules (for example the size of a discount, the number of stamps needed for a reward); if it does so, they form an integral part of your relationship with the Merchant alongside these Terms.
These Terms apply to you as a consumer within the meaning of Section 52(4) of Act No. 40/1964 Coll., the Civil Code, as amended, in conjunction with Act No. 108/2024 Coll. on consumer protection and on amendments to certain acts. If you use the loyalty card within your business activity, that fact applies only to the extent that you expressly state it to the Merchant.
Membership of this loyalty programme is free of charge and your personal data are not consideration for its provision. We use the data needed for the card to work (the recording of points, notifications) solely to provide that same service; protection against abuse of the referral programme (the Automated decision-making and profiling section of the Privacy Policy) is part of providing it securely and not a separate purpose; and the Merchant’s marketing messages delivered as notifications on the card are part of membership, and you can switch them off or refuse them at any time, following the procedure in clause 6.2. The recording of points and the redemption of rewards work identically whether or not you receive marketing messages.
These Terms do not apply to the purchase of gift vouchers. The purchase of a gift voucher is a separate paid contract with its own withdrawal regime; the rights and obligations relating to their purchase, redemption and validity are governed by the Gift Voucher Sales Terms.
You become a member of the loyalty programme by registering through a form or in another way offered by the Merchant (for example when making a purchase in an e-shop, at the till or when activating a gift voucher). On enrolment we record the location and the card through which you joined, the type of digital wallet and the language, and, if you came through a partner system or a referral link, that fact as well. When making a purchase or registering in the Merchant’s e-shop, you become a member either if you yourself choose to join the loyalty programme, or if membership arises under the terms and conditions of the Merchant’s e-shop; the second route applies only if those terms and conditions state, before the order is submitted or the registration completed, that the loyalty programme exists, link to the club rules, name the Provider as processor and state that membership can be cancelled at any time. If the terms and conditions of the Merchant’s e-shop do not mention the loyalty programme, you become a member only if you yourself choose to join. Accepting these Terms and the Merchant’s club rules is a contractual act, not consent to the processing of personal data. Membership is free of charge and voluntary. It includes the Merchant’s marketing messages delivered as notifications on the card; you can switch them off or refuse them at any time, following the procedure in clause 6.2, without losing your membership.
The club rules are determined by the Merchant. If the Merchant determines its own loyalty programme rules, it publishes them on its own page and, on registration, a link to them is shown to you in the same tick box together with the links to these Terms and to the Provider’s Privacy Policy; you accept all of these documents by a single joint act. When you register through the registration form, the link to the rules shown to you is also stored with the record under clause 11.1.
You are obliged to give true and current information on registration and to notify any change to it without undue delay.
The digital loyalty card is non-transferable and tied to you personally; sharing it with a third party is at your own risk.
If the Merchant does not determine its own club rules, the template wording of the club rules applies, which forms Annex 2 to these Terms and is published together with them at https://www.vexioncards.one/card-terms.
The Merchant may not replace these Terms, Annex 1 to them or the Provider’s Privacy Policy with its own documents; its own loyalty programme rules only supplement them and the Merchant is responsible for their content and lawfulness. If the loyalty programme rules conflict with these Terms, these Terms prevail.
The Merchant may change the club rules because of a change in legislation, a change in the scope or in the economics of the loyalty programme, or a change in the technical solution of the service. It will notify you of a material change, and of your right to terminate your membership, through the card at least 30 days before the day it takes effect. If you do not agree with the change, you may cancel your membership free of charge and without penalty at any time up to the day the change takes effect, following the procedure under Article 8.
Membership is not intended for persons under 16 years of age. If a Member is a person under 16 years of age, that person may register for the loyalty programme only with the consent of their legal representative; the Merchant, as controller, is responsible for verifying this. The Merchant, as controller, must not send marketing communications to persons under 16 years of age without the consent of their legal representative; the Provider does not systematically check members’ age. If the Provider learns that a membership arose contrary to this Article, it will block the card and delete the data.
The specific conditions for earning and redeeming points, stamps or other benefits are determined by the Merchant. The Provider is not responsible for the content, value or availability of the rewards offered by the Merchant. Points, stamps and rewards have no monetary value, cannot be exchanged for money and are not transferable to another person. We may hold a referral reward for up to 7 days while we check whether it involves abuse of the referral programme; if no abuse is confirmed, the reward is credited automatically on your next transaction. You may object to a reward being held or cancelled at support@vexioncards.one.
If the Merchant ends its cooperation with the Provider or ceases to operate the loyalty programme, the availability of your loyalty card may be restricted or ended; the Provider or the Merchant will inform you of this where circumstances allow.
The availability of the card also depends on the continuation and the proper performance of the contractual relationship between the Merchant and the Provider. If that relationship is suspended or ends, in particular because the Merchant has not paid the fee, the card will cease to be readable in the Merchant’s POS system and points and stamps cannot be credited or redeemed; the points and stamps collected are not thereby lost, and the Merchant decides what happens to them.
Membership of the loyalty programme includes receiving the Merchant’s marketing messages (offers and news) as notifications from the loyalty card in your digital wallet; you agreed to this by accepting these Terms on registration. The card in your digital wallet is updated by means of a technical alert (a so-called ping), after which your device itself downloads the current content of the card; this is the same mechanism as for other cards in the wallet. The legal basis and the nature of the individual types of notification differ according to their purpose:
| Type of message | Legal basis | Note |
|---|---|---|
| Card update (new stamp, change of balance) | performance of the contract, Article 6(1)(b) GDPR | this is the very substance of the Service |
| Message from the Merchant to its own members (new reward, opening hours) | performance of the contract between you and the Merchant, Article 6(1)(b) GDPR, or the Merchant’s legitimate interest under point (f); you agreed to receive these messages by accepting these Terms; the controller is the Merchant | governed by clause 6.2 below |
| Cross offer directly from the Provider | consent, Article 6(1)(a) GDPR | always voluntary, separate consent |
We do not regard notifications of a card update (the first row of the table above) as communications for the purposes of direct marketing within the meaning of Article 13 of Directive 2002/58/EC, since they are a necessary technical part of performing the contract. Messages from the Merchant with promotional content (the second row) are sent by the Merchant on the basis of your agreement given by accepting these Terms on registration (clause 6.2 below). In every case the legal basis for using personal data for promotional content is dealt with in Article 6 below.
The Merchant’s marketing messages reach you as notifications from the loyalty card in your digital wallet; you agreed to them by accepting these Terms on registration, and clause 6.2 sets out the detail. You can switch them off at any time directly on your phone, in the notification settings for Apple Wallet or Google Wallet, or on the card itself. If you wish the Merchant to stop sending you marketing messages altogether, write to support@vexioncards.one or to the Merchant; we will handle an objection within one month and record it. Messages the Merchant sends from its own booking, point-of-sale or other system connected to the card are governed by that system; we will pass an objection to them on to the Merchant, who handles it in its own system. Switching notifications off on your phone also stops those messages.
The scope of the personal data processed is determined by the Merchant through the configuration of the registration form. Registration through a form always involves at least your name and e-mail address. The Merchant may further require a surname, telephone number, date of birth or other data that it determines itself. Alongside this, records of your participation in the programme are processed, that is, of the crediting and redemption of points, stamps and rewards, of the amount and time of a transaction, of the location at which it took place, and of technical identifiers of the card and the device. When you buy in the Merchant’s e-shop or through its POS system, the transaction record may also include the purchase items (name, quantity, price), where the Merchant’s system passes them on. Those data are processed as controller by the Merchant with whom you are a member of the loyalty programme.
The Provider processes those data on behalf of and on the instruction of the Merchant, on the basis of the DPA concluded between the Provider and the Merchant (Annex 1 to the VEXiON cards General Terms and Conditions), as the Merchant’s processor within the meaning of Article 28 GDPR.
Technical and security data necessary for the operation and security of the platform, in particular the card identifier, technical records of the issue and updating of the card in a digital wallet and the device fingerprint in the referral programme, are also processed by the Provider as a separate controller on the basis of its legitimate interest in ensuring the functionality and security of the platform (Article 6(1)(f) GDPR).
Details of the processing of your personal data by the Merchant, of the legal bases, of the retention period and of your rights are set out in the Information on the processing of loyalty club members’ personal data, which forms Annex 1 to these Terms, is made available to you on registration and is published at https://www.vexioncards.one/card-terms. Processing in which the Provider is the controller is governed by the Provider’s Privacy Policy.
The current list of processors used by the Provider is published in Annex A to the Privacy Policy at https://www.vexioncards.one/gdpr#sprostredkovatelia.
The Merchant, as controller, is entitled to obtain a copy of the data on its members, including the record of your opting out of marketing communications, where we have recorded it. If it goes on to process the data obtained in this way in its own tools, it is itself responsible for that as controller.
If you have given the Provider separate consent to marketing communications, the Provider may send you information about new developments in its own products in accordance with your consent, which you may withdraw at any time.
The Merchant’s marketing messages reach you as notifications from the loyalty card in your digital wallet; you agreed to them by accepting these Terms on registration. You can switch them off at any time directly on your phone, in the notification settings for Apple Wallet or Google Wallet, or on the card itself. If you wish the Merchant to stop sending you marketing messages altogether, write to support@vexioncards.one or to the Merchant; we will handle an objection within one month and record it. Messages the Merchant sends from its own booking, point-of-sale or other system connected to the card are governed by that system; we will pass an objection to them on to the Merchant, who handles it in its own system. Switching notifications off on your phone also stops those messages.
The Provider does not use your personal data as a Member for its own third party marketing, for creating aggregate marketing profiles across Merchants, for passing to advertising platforms, nor does it sell them or provide them to third parties for their own purposes. Its own marketing and advertising platforms concern exclusively the contact details of Customers (Merchants, within the meaning of the General Terms and Conditions) and of persons interested in the Service, never Member data; the Merchant may switch on features in its programme that tailor offers and rewards to you according to how you use the programme; the Merchant decides on this and it happens for the Merchant’s own programme. Details are set out in the Provider’s Privacy Policy.
You have the right of access to your personal data, to their rectification, erasure, restriction of processing, portability and the right to object to processing based on legitimate interest, to the extent and on the conditions set out in Articles 15 to 22 GDPR.
You may exercise your rights with the Merchant or directly with the Provider, using the contact details set out in Article 10; if a request is addressed to the Provider and concerns data in respect of which the Merchant is the controller, the Provider will, without undue delay, pass the request on or give the Merchant the cooperation needed to handle it within the statutory period.
You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
We will handle a request for access to data, for their rectification or erasure, as well as a request to opt out of marketing communications, without undue delay and within one month of its delivery at the latest.
As a Member you have no account or login with the Provider; the only interface to your membership is the card stored in your digital wallet. The data we hold about you are described in Article 2 and in Article 5. You therefore make a request under this Article, including an opt-out from marketing communications, by e-mail to support@vexioncards.one or directly to the Merchant. The Merchant’s marketing messages reach you as notifications from the loyalty card in your digital wallet; you can withdraw your consent at any time by switching the notifications for Apple Wallet or Google Wallet off on your phone, or by e-mail to support@vexioncards.one or to the Merchant, with details in clause 4.3.
After you opt out of marketing communications we will continue to send you only operational messages about your card, in particular about a change in the number of points or stamps and about the redemption of a reward; messages from the Merchant's connected system are governed by the Merchant under clause 4.3.
You request the cancellation of your membership in the same way; the procedure and its consequences are governed by Article 8.
You may cancel your membership at any time by a request addressed to the Merchant or to the Provider under Article 7. On cancellation of the membership the points and stamps collected lapse, unless you agree otherwise with the Merchant. We then delete or anonymise your personal data at the latest within the period under clause 8.2. If you expressly ask us to delete your personal data, we will handle the request without undue delay and at the latest within one month of receiving it. You can remove the card stored in your digital wallet yourself on your device.
After the membership is cancelled we will delete or anonymise your personal data from production systems within 90 days at the latest; copies in backups expire within 6 months at the latest and are not used for restoration. If further retention is required by specific legislation, we will keep the data only to the extent and for the period required by that legislation.
The Provider is responsible for the proper functioning of the technical platform. The Merchant is responsible for the content, value and availability of the specific benefits of the loyalty programme.
Nothing in these Terms excludes or limits your rights conferred by mandatory provisions of consumer protection legislation.
You make a complaint concerning rewards, points, stamps and the purchase itself with the Merchant. You make a complaint concerning the functioning of the digital card with the Provider, using the contact details set out in Article 10.
Provider: MAMA media s.r.o., Na Hrebienku 1, 811 02 Bratislava, e-mail: support@vexioncards.one
In the event of a dispute that cannot be resolved directly, you have the right to turn to the Slovak Trade Inspection (Slovenská obchodná inšpekcia) or to another alternative dispute resolution entity listed in the register maintained by the Ministry of Economy of the Slovak Republic, in accordance with Act No. 391/2015 Coll.
If you have your habitual residence in another Member State of the European Union and the dispute is cross-border in nature, you may also turn free of charge to the European Consumer Centre in the Slovak Republic (part of the European Consumer Centres Network, ECC-Net), which provides advice and assistance in communicating with a foreign trader; a similar centre operates in every Member State.
These Terms become valid on the day they are published, 27 September 2026, and are designated version 1.0. If you registered on or after that day, they apply to you from your registration; if you registered earlier, they apply to you from 29 October 2026 and the previous wording applies until then. On registration through the registration form we store a record of which version of these Terms you accepted, and the time of your acceptance.
The Provider is entitled to amend these Terms unilaterally because of a change in legislation, a change in the scope or in the technical solution of the service, a change in the terms of the digital wallet providers, or a change on the Merchant’s side. We will inform you of a change in advance, at least 30 days before it takes effect, by publishing the new wording on the website and by a notice delivered through the card. If you do not agree with the change, you may cancel your membership free of charge at any time up to the day the change takes effect, with a single request to support@vexioncards.one or to the Merchant; the cancellation is free of charge and without penalty. If you do not cancel your membership by the day the change takes effect, the new wording applies to you from the day it takes effect. The new wording is always published at the same time on the Provider’s website together with the date it takes effect and a summary of the material changes. Removing the card from your wallet does not in itself end the membership; you request cancellation of membership following the procedure under Article 8.
Notification of a change to these Terms does not in itself constitute consent to marketing communications for Members who have not given such consent to date; that consent must always be given by a separate, active act under clause 6.1.
This relationship is governed by the law of the Slovak Republic. If you have your habitual residence in another Member State of the European Union, you retain the protection afforded to you by the mandatory provisions of the law of your own state, regardless of the preceding sentence. If you have your habitual residence in the United Kingdom, you similarly retain the protection afforded to you by the mandatory provisions of the consumer law in force at the place of your habitual residence.
These Terms are drawn up in the Slovak language and are also made available in Czech, English and German translation. In the event of a conflict between the language versions, the Slovak wording prevails.
Annex 1 (Information on the processing of loyalty club members’ personal data) and Annex 2 (Template club rules) form an integral part of these Terms. Both are published together with these Terms at https://www.vexioncards.one/card-terms. If the Merchant determines its own loyalty programme rules, its rules under clause 2.2 apply instead of Annex 2; Annex 1 always applies.
This information describes how the personal data of members of a loyalty club operated by the Merchant through the VEXiON cards platform are processed. It forms Annex 1 to these Terms and is made available to you on registration.
Joining the loyalty programme is not a condition of making a purchase, and you can cancel your membership at any time following the procedure under Article 8 of these Terms.
The controller of your personal data is the Merchant stated on the card, that is, the merchant whose loyalty card you use. It is stated on the card and in the registration form. We will give you its business name, registered office and contact details for exercising your rights on request, without undue delay, at support@vexioncards.one; they may also be stated in the Merchant’s club rules.
MAMA media s.r.o., with its registered office at Na Hrebienku 1, 811 02 Bratislava, Company ID: 36 767 549 (the Provider), is the processor. It processes personal data technically, on behalf of and on the instruction of the Merchant, on the basis of a personal data processing contract (Annex 1 to the VEXiON cards General Terms and Conditions), within the meaning of Article 28 GDPR. It does not use them for its own purposes.
In matters of personal data processing you can contact the Provider by e-mail at support@vexioncards.one.
The scope of the personal data processed is determined by the Merchant through the configuration of the registration form. Registration through a form always involves at least your name and e-mail address.
| Data | Purpose |
|---|---|
| Name, and where applicable surname | issuing the card and addressing you |
| E-mail address | delivery of the card and notifications about the programme |
| Telephone number, date of birth or other data determined by the Merchant itself | according to the purpose determined by the Merchant |
| Records of your participation in the programme, that is, of the crediting and redemption of points, stamps and rewards, of the amount and time of a transaction and of the location at which it took place | running the loyalty programme |
| Technical identifiers of the card and the device | issuing and updating the card in a digital wallet and protection against abuse of the referral programme |
When you buy in the Merchant’s e-shop or through its POS system, the transaction record may also include the purchase items (name, quantity, price), where the Merchant’s system passes them on.
The legal basis is the performance of the contract between you and the Merchant under Article 6(1)(b) GDPR and the Merchant’s legitimate interest in running the programme under Article 6(1)(f) GDPR.
The Merchant’s marketing communications beyond the running of the programme rest on your agreement given by accepting these Terms on registration. You can stop them at any time and free of charge, following the procedure in clause 4.3.
Technical and security data necessary for the operation and security of the platform, in particular the card identifier, technical records of the issue and updating of the card in a digital wallet and the device fingerprint in the referral programme, are also processed by the Provider as a separate controller on the basis of its legitimate interest in ensuring the functionality and security of the platform (Article 6(1)(f) GDPR).
The Merchant may switch on features in its programme that tailor offers and rewards to you according to how you use the programme; the Merchant decides on this and it happens for the Merchant’s own programme.
The data are kept for the duration of your membership of the loyalty programme.
After the membership ends, your personal data are deleted or anonymised from production systems within 90 days at the latest; copies in backups expire within 6 months at the latest and are not used for restoration.
If the contractual relationship between the Merchant and the Provider ends, the Merchant has 30 days to export the data; after that period the data are deleted or anonymised from production systems within 90 days at the latest and copies in backups expire within 6 months at the latest. If the Merchant expressly asks in writing, no later than the last day of the export period, the data are kept in an inactive state instead of being deleted, solely for the purpose of a possible restoration of the service, for no longer than 12 months from the end of the contract; during that time they are only stored in separate storage, are not used for any other purpose, and are deleted at the latest within 30 days on request. If the contractual relationship ended before these Terms took effect, these periods do not apply and the data are kept under the previous terms until the Merchant asks for them to be returned or deleted; you can always ask for your own data to be deleted yourself.
If further retention is required by specific legislation, the data are kept only to the extent and for the period required by that legislation.
You have the right of access to your personal data, to their rectification, erasure, restriction of processing, portability and the right to object to processing based on legitimate interest, to the extent and on the conditions set out in Articles 15 to 22 GDPR. You also have the right to withdraw consent given at any time, with effect for the future.
You may exercise your rights with the Merchant or directly with the Provider by e-mail at support@vexioncards.one; if a request is addressed to the Provider and concerns data in respect of which the Merchant is the controller, the Provider will, without undue delay, pass the request on or give the Merchant the cooperation needed to handle it within the statutory period.
As a Member you have no account or login with the Provider; the only interface to your membership is the card stored in your digital wallet. You therefore make a request under this section, including an opt-out from marketing communications, by e-mail to support@vexioncards.one or directly to the Merchant.
We will handle a request for access to data, for their rectification or erasure, as well as a request to opt out of marketing communications, without undue delay and within one month of its delivery at the latest.
You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
The Merchant’s marketing messages reach you as notifications from the loyalty card in your digital wallet; you agreed to them by accepting these Terms on registration. You can switch them off at any time directly on your phone, in the notification settings for Apple Wallet or Google Wallet, or on the card itself. If you wish the Merchant to stop sending you marketing messages altogether, write to support@vexioncards.one or to the Merchant; we will handle an objection within one month and record it. Messages the Merchant sends from its own booking, point-of-sale or other system connected to the card are governed by that system; we will pass an objection to them on to the Merchant, who handles it in its own system. Switching notifications off on your phone also stops those messages.
After you opt out of marketing communications we will continue to send you only operational messages about your card, in particular about a change in the number of points or stamps and about the redemption of a reward; messages from the Merchant's connected system are governed by the Merchant under clause 4.3.
The Merchant uses the Provider as its processor. The Provider uses further processors; their categories and the current named list, stating the purpose, the country of processing and the transfer mechanism, are published in Annex A to the Privacy Policy at https://www.vexioncards.one/gdpr#sprostredkovatelia.
These are in particular hosting and database providers in the European Union, providers of e-mail and SMS messaging and the operators of digital wallets.
If the Merchant has connected its own POS, booking or e-shop system, data are exchanged with it on the Merchant’s instruction.
Digital wallet providers (Apple Wallet, Google Wallet) act, when a card is issued and updated, under their own terms as separate controllers and not as processors of the Provider.
This template wording of the club rules applies under clause 2.5 of these Terms where the Merchant does not determine its own club rules.
The operator of this loyalty club and the controller of your personal data within it is the Merchant stated on the card.
Last updated: 27 September 2026