Privacy
This notice explains how we process personal data when you visit bonumworks.com or contact us by email.
Last updated: 8 September 2026
Who is responsible
Bonum Works UG (haftungsbeschränkt), represented by managing director Ahmed Alashwal, is the controller under the General Data Protection Regulation (GDPR).
Ausblick 1, 33100 Paderborn, Germany
Email: info@bonumworks.com
Visiting the website
Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Delivering the website involves processing your IP address and technical request information, such as the requested page, request time, browser information, and referring website where transmitted. Technical logs may be processed to diagnose errors and prevent abuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a reliable, secure website. These connection details are necessary to deliver the pages to your browser. Log data is retained for the time needed to investigate technical failures or security incidents and is then deleted or anonymised, unless continued retention is legally required.
Vercel operates globally, so processing may take place outside the European Economic Area, including in the USA. Vercel states that it participates in the EU–US Data Privacy Framework, which provides an adequacy basis under Article 45 GDPR for covered transfers. Its data processing terms also provide standard contractual clauses for applicable transfers. Details and safeguards are available in Vercel’s privacy notice and data processing terms.
Emailing us
If you email us, we process your email address, name where supplied, message, attachments, and associated delivery information to respond to your enquiry. Our email service provider is Migadu-Mail GmbH, Rohnen 587, CH-9414 Schachen, Switzerland.
For enquiries about entering into or performing a contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is Article 6(1)(f) GDPR: our legitimate interest in responding to business correspondence. Providing information is voluntary, but we need a reply address and sufficient context to answer.
We retain correspondence while it is needed to handle the enquiry and any resulting business relationship. We then delete it unless statutory retention duties or the establishment, exercise, or defence of legal claims require further storage. Statutory retention is based on Article 6(1)(c) GDPR; retaining information for legal claims is based on Article 6(1)(f) GDPR.
Switzerland benefits from a European Commission adequacy decision under Article 45 GDPR. Further information about the provider’s processing and safeguards is available in Migadu’s privacy and data processing policy.
Cookies, fonts, and the animation
We do not use advertising trackers or audience analytics in this website. The site itself does not set cookies or store preferences in your browser. Our hosting provider may apply technical security measures to protect the service.
Fonts are served with the website. The interactive animation runs in your browser; its pointer and keyboard interactions are used locally to control the visual and are not sent to us. We do not use this website for profiling or automated decisions about you.
Links to other websites
Aquilix and other external websites are linked, rather than embedded. Following a link takes you to another website, whose own privacy notice applies. No Aquilix content is loaded merely by viewing this page.
Your rights
Subject to the conditions in the GDPR, you can request access to your personal data, correction, erasure, restriction of processing, and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
To exercise your rights or ask about our processing and transfer safeguards, email info@bonumworks.com.
You also have the right to complain to a data protection supervisory authority, particularly in the country of your habitual residence, workplace, or the alleged infringement. The authority responsible for our registered location is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).