Privacy policy

This Privacy Policy explains how Bonnie Dublin collects, uses, and protects your personal data when you visit bonnie-dublin.com or place an order with us. We are committed to safeguarding your privacy in accordance with the General Data Protection Regulation (GDPR) and Irish data protection law.

1. Information About the Collection of Personal Data & Controller Contact Details

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Bonnie Dublin. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2. Data Collection When Visiting Our Website

When using our website for informational purposes only — i.e., if you do not register or otherwise transmit information to us — we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referral from which you reached the page
  • Browser and operating system used
  • IP address used (where applicable: in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to retrospectively check the server log files should there be concrete indications of unlawful use.

3. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies).

When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data are also processed by individual cookies we have implemented, the processing takes place in accordance with Art. 6(1)(b) GDPR either for the performance of the contract or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies).

Note: You can set your browser to inform you about the setting of cookies and individually decide on their acceptance, or exclude the acceptance of cookies for certain cases or in general. Please note that the functionality of our website may be limited if cookies are not accepted.

4. Contact

When contacting us (e.g., via contact form or email at support@bonnie-dublin.com), personal data is collected. Which data is collected from a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for the processing of data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your request, provided there are no legal retention obligations to the contrary.

5. Data Processing When Opening a Customer Account & Contract Processing

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed when you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms.

Deletion of your customer account is possible at any time and can be done by sending a message to support@bonnie-dublin.com. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use.

6. Use of Your Data for Direct Advertising

6.1 — Email Newsletter Registration

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. We use the so-called double opt-in procedure for sending the newsletter — we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address as well as the date and time of registration. You can unsubscribe from the newsletter at any time via the link provided in the newsletter.

6.2 — Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. We do not need to obtain separate consent from you for this. Data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising pursuant to Art. 6(1)(f) GDPR. You are entitled to object to the use of your email address for advertising purposes at any time.

7. Data Processing for Order Fulfilment

7.1 The personal data we collect will be passed on to the transport company commissioned with the delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of payment processing. The legal basis for the transfer of data is Art. 6(1)(b) GDPR.

7.2 — Payment Service Providers

PayPal: When paying via PayPal, credit card via PayPal, direct debit via PayPal, or — if offered — "purchase on account" or "instalment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

SOFORT: When selecting the payment method "SOFORT", payment processing takes place via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna Group.

8. Review Reminder

We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided you have given us your express consent in accordance with Art. 6(1)(a) GDPR.

9. Use of Social Media: Social Plugins

9.1 — Facebook Plugins (Shariff Solution)

Our website uses social plugins of Facebook (Meta Platforms Inc.). These buttons are not integrated as unrestricted plugins but only using an HTML link. No connection is established with Facebook servers until you click the button.

9.2 — Google+ Plugins (Shariff Solution)

Our website uses social plugins of Google+ (Google LLC). The same Shariff HTML-link solution is used.

9.3 — Instagram Plugin (Shariff Solution)

Our website uses social plugins of Instagram (Instagram LLC). The same Shariff HTML-link solution applies.

10. Online Marketing

10.1 — DoubleClick by Google

This website uses DoubleClick by Google. DoubleClick uses cookies to display relevant ads, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Legal basis: Art. 6(1)(f) GDPR.

10.2 — Google AdWords Conversion Tracking

We use Google AdWords to draw attention to our offers on external websites. The conversion tracking cookie is set when a user clicks on a Google AdWords ad and usually expires after 30 days.

11. Web Analytics Services

Google (Universal) Analytics: This website uses Google Analytics with the "_anonymizeIp()" extension, which ensures anonymisation of the IP address by truncation and excludes direct personal reference. Google will use this information to evaluate your use of the website and compile reports on website activity.

12. Retargeting / Remarketing / Recommendation Advertising

Facebook Custom Audience (Pixel): This website uses the "Facebook Pixel". User behaviour can be tracked after they have seen or clicked on a Facebook ad. Processing only takes place upon express consent pursuant to Art. 6(1)(a) GDPR.

Google AdWords Remarketing: Google sets a cookie which enables interest-based advertising using a pseudonymous cookie ID. Legal basis: Art. 6(1)(f) GDPR.

13. Rights of the Data Subject

13.1 Applicable data protection law grants you comprehensive data subject rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to notification (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Right to lodge a complaint (Art. 77 GDPR) — with the Irish Data Protection Commission (DPC) or any other supervisory authority

13.2 — Right to Object

Right to Object: If we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing for reasons arising from your particular situation.

Direct Advertising: If your personal data is processed for direct advertising, you have the right to object at any time. If you exercise this right, we will stop processing the data concerned for direct advertising purposes.

14. Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal retention period (e.g., commercial and tax retention periods). After expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for the fulfilment or initiation of a contract.