Privacy Notice

Last updated: 6 November 2026

1. Who is responsible

BONIMPEX Sp. z o.o., ul. Wspólna 47/49, 00-684 Warszawa, Poland (KRS 0001086523), operates boniall.com and acts as the data controller for personal data processed in relation to the website and enquiries addressed to it. Questions and requests concerning personal data may be sent to info@boniall.com.

BONIALL is a corporate brand rather than a separate legal entity. If a business matter is handled by UAB Ripola or another separately incorporated company, that company may act as an independent controller in relation to its own business dealings. We will identify the relevant company when a matter is referred or a transaction proceeds.

2. Personal data and sources

When you contact us, we may process your name, professional contact details, company, position, language preference and the content of your communications. Information may come directly from you, from your organisation or, in the case of professional contacts, from publicly available company sources or business introductions. Where we obtain data from another source, we provide the relevant information as required by law.

Our hosting environment may collect technical records such as IP addresses, access times, requested pages, user-agent information and error or security events needed to deliver and protect the website. This site does not offer user accounts or a contact form.

3. Why we use personal data

We use business contact information to respond to enquiries, evaluate potential cooperation, communicate with manufacturers and suppliers, and administer commercial relationships. Where appropriate, we rely on our legitimate interests in conducting business communications (Article 6(1)(f) GDPR), after considering the interests and rights of the people concerned.

Where processing is necessary for a contract with an individual or steps requested by an individual before a contract, Article 6(1)(b) GDPR may apply. We may also retain certain records to comply with legal obligations (Article 6(1)(c) GDPR). Technical logs may be processed for website operation and information security under our legitimate interests (Article 6(1)(f) GDPR).

These legal bases do not replace any separate permission that may be required under applicable rules governing unsolicited electronic marketing communications.

4. Recipients

Personal data may be accessed by authorised staff, service providers supporting our website and company email, professional advisers, and authorities where disclosure is lawfully required. The website and corporate mailbox use hosting and email services provided through Hostovita. We do not sell personal data.

Where a matter is directed to another operating company, including UAB Ripola, we identify that company and communicate the relevant privacy information. The other company may be independently responsible for data processed in its own transactions.

5. Retention

We keep correspondence for the time needed to handle an enquiry and any reasonable follow-up. If discussions lead to a business relationship, records may be retained for the duration of that relationship and for applicable accounting, legal or claim limitation periods. Information no longer needed for an appropriate purpose should be deleted or anonymised.

Technical access and security logs are kept according to the operational and security requirements of the hosting service. For information on the retention periods or criteria applicable to your data, contact us at info@boniall.com.

6. WhatsApp and international data transfers

Links to WhatsApp open an external service only when you choose to use them. No WhatsApp chat service is embedded into the page itself. WhatsApp and its service providers may process your telephone number, messages and related technical information under their own terms and privacy information. You can contact us by email or telephone instead.

Some service providers or communications may involve personal data being processed outside the European Economic Area. Where BONIMPEX is responsible for a transfer subject to the GDPR, it must ensure an appropriate legal basis and comply with the applicable international transfer requirements. You can ask us for more information about the arrangements relevant to your enquiry.

7. Cookies and analytics

The current website code does not include advertising pixels, analytics scripts, embedded videos or third-party chat widgets. We do not intentionally place optional marketing or analytics cookies through the website code. Essential technical functions or settings of the hosting environment may operate separately. If non-essential technologies requiring consent are introduced, we will provide the appropriate information and choices before using them.

8. Your rights

Depending on the circumstances, you may request access to your personal data, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. If your data is used for direct marketing, you may object to that marketing at any time.

To exercise these rights, email info@boniall.com. You also have the right to complain to a supervisory authority, including the Polish President of the Personal Data Protection Office (UODO).

Providing information in a business enquiry is voluntary; without relevant contact details, we may be unable to respond. No automated individual decision-making or profiling is implemented through the current website.

9. Changes

We may update this notice if the website or our data-processing arrangements change. The revision date above identifies the published version.