Privacy Policy

At bonvu, protecting your personal data is a top priority.

"Personal Data" means any information relating to an identified or identifiable individual, including but not limited to:

• Name, address, email address
• Phone number
• IP address
• Account details
• Payment and billing information

This Privacy Policy does not apply to third-party companies or websites that are not owned or controlled by bonvu.

By accessing or using our Website, you agree to this Privacy Policy.

If you do not agree, you must not use the Website.

bonvu reserves the right to update this Privacy Policy at any time.

Changes become effective upon publication on the Website. The latest version will always be indicated by the "Last Updated" date.

a) Non-Personal Data

When you visit our Website, we may automatically collect certain information, such as:

• Browser type and operating system
• Website usage data
• Referring URLs
• Pages visited

This is done via cookies, tracking technologies, and analytics tools. This data is generally anonymized and used to improve our services.

b) Personal Data

We collect Personal Data when you:

• Register for an account
• Use our services (e.g. shipping, storage, logistics)
• Contact us via email, chat, or support
• Complete transactions

We may also receive data from third-party providers (e.g. payment processors).

We use your data to:

• Provide and improve our services
• Process transactions and payments
• Manage shipments and notifications
• Provide customer support
• Send communications (where permitted)
• Comply with legal obligations

a) Non-Personal Data

May be shared without restriction (e.g. analytics).

b) Personal Data

We may share your data:

• With service providers (e.g. payment processors, logistics partners)
• To fulfill contractual obligations
• To comply with legal requirements
• In case of mergers or business transfers
• With your consent

All partners are contractually required to protect your data.

Your data may be transferred to countries outside your jurisdiction (e.g. the United States).

Where required, we ensure appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)
• Compliance with applicable data protection laws

You can manage or disable cookies through your browser settings. Please note:

• Some features of the Website may not function properly without cookies
• Third-party providers may use their own tracking technologies

Google Tag Manager, Google Analytics and Google Ads

We use Google Tag Manager to load measurement and advertising tags, Google Analytics 4 to understand how the Website is used, and Google Ads conversion measurement to see which advertisements lead to enquiries and orders. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may be transferred to Google LLC in the United States on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

These services run only after you have given consent in our cookie banner (Art. 6(1)(a) GDPR and § 165(3) TKG). Without your consent Google Tag Manager is not loaded at all, so no data - not even your IP address - reaches Google. That applies both before you answer the banner and if you decline it. If you agree to only one of the two categories, Google Consent Mode keeps every function you did not agree to switched off. You can withdraw your consent at any time with the "Cookie Settings" link in the footer, with effect for the future.

Campaign origin (advertising click identifiers)

If you reach the Website through an advertisement or a tagged link, the address contains parameters such as gclid, gbraid, wbraid or utm_source. We store these parameters in a first-party cookie named bonvu_attribution for up to 90 days and, for the duration of your visit, in your session. The cookie is set only when such parameters are actually present - visiting the Website normally sets no such cookie. The legal basis is our legitimate interest in measuring the effectiveness of our own advertising (Art. 6(1)(f) GDPR).

If you register, the parameters are copied to your account and kept for as long as the account exists, because a shipment paid weeks later has to be attributable to the advertisement that led to it. The same applies to a copy stored with each enquiry and each completed order. Deleting the bonvu_attribution cookie in your browser removes that browser copy and stops it from being read again. It does not end the copy held in your session for the rest of your current visit, and it does not delete the copies stored with your account, your enquiries and your orders. To have those erased or to object to this processing, contact us using the details below and we will remove the campaign data from your account and records.

If you have an account and you have agreed to analytics cookies, we also give Google Analytics a randomly generated identifier for your account so that visits from your phone and your computer can be recognised as the same customer. That identifier is a random string created for this purpose alone: it is not your name, your email address, your customer number or a code derived from any of them, and it means nothing outside Google Analytics. It is not sent at all if you decline analytics cookies, if you agree only to advertising cookies, or while you are not signed in.

You can ask us to delete that identifier at any time using the contact details below, and it is also removed automatically if your account is closed. Deleting it stops any further visits being associated with your account and removes our ability to connect your account to the analytics records. Data that Google Analytics already holds is not deleted by that step alone: for that we additionally submit a deletion request to Google for the identifier, which we will do as part of handling your request. Neither step has any other effect on your account.

Contact form

The details you enter in the contact form are stored in our systems so that we can answer your enquiry and so that it is not lost if an email fails to send. We keep them for as long as necessary to handle your enquiry and to meet our record-keeping obligations. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).

Depending on applicable law, you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

To exercise your rights, please contact us.

We retain your data only as long as necessary for:

• The purposes described in this policy
• Legal and regulatory obligations

bonvu implements appropriate technical and organizational measures to protect your data.

You are responsible for keeping your login credentials secure and avoiding sharing sensitive information publicly.

Our services are not intended for children under the age of 13. We do not knowingly collect personal data from children.

Our Website may contain links to external websites. bonvu is not responsible for their privacy practices or content.

If you have any questions about this Privacy Policy, please contact us.

For users located in the European Economic Area (EEA):

Legal Basis for Processing

• Contract performance
• Legal obligations
• Legitimate interests
• Consent

Additional Rights

• Lodge a complaint with a supervisory authority
• Restrict processing
• Request data portability