Legal Notice & GDPR

Data controller

Personal data collected

As part of our activity, we may collect the following data:

• Identification data: first name, last name, email address, phone number
• Professional data: company name, website, job title
• Browsing data: IP address, cookies, pages visited
• Correspondence data: messages sent via the contact form

Purposes of processing

Your personal data is collected for the following purposes:

• Responding to your contact and quote requests
• Managing the customer relationship
• Improving our services and our website
• Sending commercial communications (with your consent)
• Compiling traffic statistics

Legal basis for processing

Orion Ascend, a company under Andorran law operating under the Bonu brand, processes your data in accordance with Andorran legislation on personal data protection. For visitors residing in the European Union, the General Data Protection Regulation (GDPR) also applies. Processing is based on: your explicit consent, the performance of a contract or pre-contractual measures, our legitimate interest (improving our services), or compliance with legal obligations.

Retention period

Data recipients

Your data is intended solely for Orion Ascend (Bonu) and is never sold to third parties. It may be transmitted to our technical subcontractors (hosting, emailing) strictly within the scope of the performance of our services, in compliance with the GDPR.

Your rights

In accordance with the GDPR and applicable data protection law, you have the following rights:

To exercise these rights, contact us at: contact@bonu.ad

Complaint to the supervisory authority

If you believe that the processing of your personal data constitutes a violation of your rights, you may lodge a complaint with the Agència Andorrana de Protecció de Dades (APDA), the supervisory authority in the Principality of Andorra: www.apda.ad. Visitors residing in the European Union may also contact the data protection authority of their country of residence.

Data security

We implement all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data: SSL/TLS encryption, restricted access, regular backups, system updates.