Privacy Notice

Who we are

BuonoPack Ireland is a trading name of BUONOCAFFE LIMITED, a private company limited by shares, registered in Ireland (Companies Registration Office) under company number 805004. Registered office: 2 Aspen Park, Swords, Dublin, K67 TN60.

BUONOCAFFE LIMITED is the controller of the personal data described in this notice. Privacy contact: privacy@buonopack.ie. We have not appointed a Data Protection Officer; please use the privacy contact above.

In short

• When you visit this website, our hosting provider, Cloudflare, processes your IP address to deliver and protect the website. We use no analytics and no advertising.
• When you request a quote, you send us an email from your own email app. Nothing you enter on this website is sent to us until you send that email.

When you visit this website

When your browser loads a page, our hosting provider, Cloudflare, receives your IP address and technical details of the request, such as the page requested, the date and time, and your browser type. Cloudflare uses them to deliver the page and to protect the website against attacks and abuse, and keeps them in its logs for a limited time. We do not use this data to identify you or to build a profile of you.

Legal basis: our legitimate interest in running a secure and working website (Article 6(1)(f) GDPR).

Your quote list (the products, lids and quantities you add) stays in your browser. It is sent to us only if you include it in the email you send. See our Cookies page.

When you request a quote by email

On our Request a quote page you can prepare a request. When you choose to send it, your own email app opens a new email to sales@buonopack.ie with your request filled in: the products, lids and quantities you chose, and the details you entered (company, contact name, email address, delivery county and your message). You can check and change the email before you send it. It does not pass through this website.

When you send it, we receive your email and anything else it contains, such as your email signature. Please do not send information we do not need, such as payment card details. You can also write to sales@buonopack.ie directly.

When you contact us by WhatsApp or phone

This website has a link to WhatsApp so that you can message our business phone number, +353 89 204 7110. It is a plain link: it does not load any WhatsApp or Meta code on this website. Using WhatsApp is optional; you can always email us at sales@buonopack.ie or phone us instead.

If you message us on WhatsApp, we receive your phone number, your WhatsApp profile name (and profile photo, if your settings make it visible to us), and the content of your messages and any files you send. If you phone us, we see your number and any details you tell us. We use them only to answer your enquiry, prepare a quote and follow it up, on the legal bases and for the retention periods set out below. We do not use your number for marketing messages. Please do not send information we do not need, such as payment card details.

WhatsApp is provided to users in the European Region by WhatsApp Ireland Limited (part of Meta), which handles your messages under its own privacy policy (whatsapp.com/legal/privacy-policy-eea). For that service WhatsApp is responsible for its own processing; we are responsible for the messages we receive and keep. WhatsApp's policy says it makes necessary transfers outside the EEA, including to the United States.

Why we use your data and on what legal basis

• To prepare and send the quote you asked for and to follow up on it: our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR); if you ask for a quote for yourself as a sole trader, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• To deal with the contact persons of our business customers and to keep our correspondence after a quote: our legitimate interest in running and documenting our business relationships (Article 6(1)(f) GDPR).
• To keep invoices and accounting records: legal obligation (Article 6(1)(c) GDPR).
• To deliver the goods you ordered and deal with your order: performance of a contract (Article 6(1)(b) GDPR) or, for the contact persons of our business customers, our legitimate interest in fulfilling our orders (Article 6(1)(f) GDPR).

We do not rely on consent. We do not make decisions about you by automated means. We do not sell your data and we do not use it for marketing emails.

We need your company name, contact name, email address, delivery county and the quantity to prepare a quote. Without them we cannot send you one.

Who receives your data

These service providers process personal data on our behalf (processors), under data processing agreements (Article 28 GDPR):

• Cloudflare - hosts this website and keeps the technical logs described above.
• Google Workspace - provides our email mailbox, which receives and stores the emails you send to us.

-

Your own email provider handles the email you send under its own terms.

Our accountant also receives personal data of our customers, such as the contact name, company and delivery details on invoices and in our accounting records. We share it only to keep our accounts and meet our tax obligations (Article 6(1)(c) GDPR: legal obligation under Irish company and tax law). Our accountant is a professional adviser who is responsible for the personal data it handles for its own professional and legal duties.

We deliver orders ourselves, with our own staff. We do not pass your delivery details to a courier company. We do not sell your data and we do not share it with anyone else, except where the law requires us to disclose it, for example to the Revenue Commissioners.

Transfers outside the EEA

Cloudflare, Inc. is based in the United States and may process data outside the European Economic Area. It participates in the EU-U.S. Data Privacy Framework, which the European Commission has found to give adequate protection (Commission Implementing Decision (EU) 2023/1795). Cloudflare's data processing agreement also includes the standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR).

Our email mailbox is provided by Google. Google LLC is based in the United States, and emails in our mailbox may be processed outside the European Economic Area. Google LLC participates in the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795). Google's data processing terms for Google Workspace also include the standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR).

How long we keep it

• Website logs: kept by Cloudflare for a limited time under its own retention settings.
• Quote requests that do not lead to an order: up to 24 months from the last contact.
• Customers: for the duration of the business relationship and 6 years after it ends.
• Invoices and accounting records: for as long as Irish tax law requires.

Your rights

You can ask us for access to your data, to correct it, to erase it, to restrict its use, or to receive it in a portable format. You can object at any time to processing based on our legitimate interest. Write to privacy@buonopack.ie. We reply within one month.

You also have the right to lodge a complaint with the Data Protection Commission in Ireland (www.dataprotection.ie).

Changes

We will update this notice if the way we use personal data changes. The date at the top shows the latest version.