This privacy policy applies to the website of the Widale brand, operated by Bonaf GmbH. It describes how we collect, store, process, use, and, if applicable, share personal data of customers, prospective customers, and visitors to our website.

The protection of your personal data is of particular importance to us. We process your data confidentially and in accordance with applicable data protection regulations, especially the General Data Protection Regulation (GDPR).

Controller

The controller for data processing on this website is:

Bonaf GmbH
info@widale.com

What types of personal data do we collect?

For the purposes described in this privacy policy, we may collect and process the following categories of personal data in particular:

a) Identification and contact data
For example, first name, last name, billing and shipping address, telephone number, and email address, when you create a customer account, place an order, contact us, or sign up for specific information.

b) Payment information
For example, information required for payment processing, such as details of selected payment methods, payment status, or transaction data. Payment data itself may be processed directly by the payment service providers used.

c) Order and transaction data
For example, information about purchased products, order history, returns, refunds, delivery information, or other contract-related processes.

d) Communication data
For example, content of emails, contact forms, customer inquiries, or other communications with us.

e) Technical data
When you use our website, we may collect technical information about your device and browser, such as IP address, browser type, operating system, language settings, referrer URL, and date and time of access.

f) Usage data
For example, information about which pages you visit, how you navigate our website, which content you access, how long you use our website, or which elements you click on.

g) Marketing and preference data
Insofar as you voluntarily provide us with such information or consent to corresponding processing, we may process information about your interests, preferences, or interactions with our content.

h) Content that you voluntarily provide
For example, information that you send us in the context of messages, inquiries, reviews, or other entries on our website.

Your personal data is either provided directly by you, collected automatically when you use our website, or – as far as legally permissible – collected via service providers or technical systems in connection with the operation of our shop.

If certain data is required for the conclusion or performance of a contract and you do not provide it to us, we may not be able to provide the desired service.

For what purposes do we use your personal data?

We use your personal data for the purposes stated at the time of collection or arising from the circumstances, in particular:

a) For the provision of our website and our online shop
We process data to technically provide our website, to display content correctly, to ensure stability and security, and to ensure the general functionality of our offering.

b) For the processing and fulfillment of orders
We use your data to process your order, for payment processing, for the delivery of products, for the processing of returns, refunds and complaints, and for communication in connection with your purchase.

c) For the processing of inquiries and customer service
If you contact us, we use your data to answer your inquiry, to process your request, and to stay in contact with you if necessary.

d) To fulfill legal obligations
We process personal data insofar as this is necessary to comply with legal obligations, such as commercial and tax retention obligations or official inquiries.

e) For security and abuse prevention purposes
We may process data to protect our website, our company, and our customers from abuse, fraud, unauthorized access, or other illegal activities.

f) To improve our offering and our website
We may analyze data to better understand the use of our website, to optimize content and functions, and to improve the user experience.

g) For marketing purposes
Insofar as legally permissible or based on your consent, we may use your data to inform you about products, content, offers, or news that may be of interest to you.

On what legal basis do we process your data?

The processing of your personal data is carried out in particular on the following legal bases:

• Art. 6 para. 1 lit. b GDPR, if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures
• Art. 6 para. 1 lit. c GDPR, if the processing is necessary for compliance with a legal obligation
• Art. 6 para. 1 lit. f GDPR, if the processing is based on our legitimate interest, for example, in the security, functionality, optimization, or economic management of our offering
• Art. 6 para. 1 lit. a GDPR, if you have given your consent to the processing of your data

To whom do we disclose your personal data?

We only disclose your personal data to the extent legally permissible and necessary for the stated purposes.

Recipients may include, in particular:

a) Technical service providers and processors
For example, hosting, shop, IT, support or software service providers who assist us in operating the website and the online shop.

b) Payment service providers
Insofar as this is necessary for payment processing, we forward data to the payment service provider you have chosen, such as:

• Shopify Payments
• PayPal
• Klarna
• Stripe
• Credit card providers
• Banks or other payment service providers

c) Shipping and logistics service providers
Insofar as this is necessary for the delivery of your order, we pass on your data to shipping service providers.

d) Consulting and administrative partners
For example, tax advisors, accountants, legal advisors or other service providers, insofar as this is necessary for proper business conduct.

e) Authorities and public bodies
If we are legally obliged to do so or if disclosure is necessary for law enforcement, averting danger or fulfilling official requirements.

No further disclosure of your personal data takes place unless you have expressly consented or a legal basis permits this.

Cookies, Tracking Technologies and Similar Procedures

We may use cookies as well as comparable technologies such as pixels, tags or similar procedures on our website.

A cookie is a small text file that is stored on your device and contains certain information. Cookies serve to make our website more user-friendly, effective and secure.

We may use the following types of cookies in particular:

a) Technically necessary cookies
These cookies are required for the website to function properly, for example for page navigation, shopping cart, language settings or security functions.

b) Functional cookies
These cookies enable extended functions and personalizations, such as storing certain settings.

c) Analysis and statistics cookies
These cookies help us to understand how visitors use our website in order to improve content, navigation and presentation.

d) Marketing and tracking cookies
These cookies can be used to measure the effectiveness of campaigns, personalize content or better understand user interests.

Insofar as cookies are not technically necessary, we only use them with your consent.

You can adjust your cookie settings at any time via our consent tool or via your browser settings. Please note that disabling certain cookies may limit the functionality of the website.

Analytics and Marketing Tools

If we use analysis or marketing tools, this is only done within the legally permissible framework. Depending on the actual setup of our shop, this may include services such as web analysis, reach measurement, conversion, or advertising tools.

When such tools are used, we process data in particular to:

• better understand the use of our website
• measure the effectiveness of content and campaigns
• improve our website and our offering
• better tailor marketing measures to interests

If consent is required for this, the processing is carried out exclusively on the basis of your consent.

Hosting and Shop System

Our website is operated via Shopify. In the course of operating our online shop, personal data may be processed by Shopify or technical infrastructures connected with Shopify, in particular order, usage and technical data.

The processing takes place to provide the online shop, to technically process orders and to ensure the security and stability of the system.

International data transfer

In the context of using certain service providers, it may happen that personal data is transferred to countries outside the European Union or the European Economic Area.

Insofar as such a transfer takes place, we ensure that an adequate level of data protection is guaranteed. This is done in particular by:

• an adequacy decision of the European Commission
• standard contractual clauses of the European Commission
• or other legally recognized guarantees

Retention period

We do not store your personal data longer than is necessary for the purposes for which it was collected, unless legal retention obligations or legitimate interests require longer storage.

The following standards apply in particular:

• Data of prospective customers is generally stored only as long as this is necessary for the processing of the respective concern or for a reasonable follow-up
• Customer data is stored for the duration of the contractual relationship and beyond within the framework of legal retention periods
• Commercial and tax-relevant data can regularly be stored for up to ten years
• Data can also be stored if this is necessary for the assertion, exercise or defense of legal claims

Subsequently, the data will be deleted or anonymized.

Your rights

Within the framework of the applicable legal provisions, you have the following rights in particular:

• the right to information about the personal data processed by us
• the right to rectification of inaccurate or incomplete data
• the right to erasure of your data
• the right to restriction of processing
• the right to data portability
• the right to object to processing
• the right to withdraw a given consent at any time with effect for the future
• the right to lodge a complaint with a competent data protection supervisory authority

If you wish to exercise your rights, you can contact us at any time using the contact details provided above.

Protection of your personal data

We take appropriate technical and organizational security measures to protect your personal data against loss, destruction, manipulation, unauthorized access, unauthorized disclosure or other unlawful processing.

Despite careful measures, we point out that data transmission over the Internet can have security gaps and complete protection against third-party access cannot be guaranteed in every case.

Minors

Our offer is generally not aimed at children or persons who do not have the necessary legal capacity. We do not knowingly collect personal data from minors without an appropriate legal basis or consent from their legal guardians.

Links to third-party websites

Our website may contain links to external websites or third-party services. We assume no responsibility for the content, availability and data protection practices of these external providers. The data protection regulations of the respective providers apply.

Changes to this Privacy Policy

We reserve the right to adapt this privacy policy as required to align it with changed legal, technical, or organizational circumstances. The current version published on our website shall always apply.

Contact

If you have any questions about the protection of your personal data or wish to exercise your rights, please contact us at:

Bonaf GmbH
al.bonev@yahoo.de

Status: 15.04.2026