Privacy policy

Effective Date: 08.08.2025
Last Updated: 08.08.2025

This Privacy Policy explains how BonoLab ApS (“we”, “us”, or “our”) collects, uses, and protects your personal data when you access our website, register for our online courses, or interact with our services.

We are committed to complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

1. Who We Are

BonoLab ApS
Hestkøbvej 11B, 3460 Birkerød, Denmark
Reg. 42293172
mail@bonolab.com
Data Controller: BonoLab ApS

2. What Personal Data We Collect

We collect and process personal data that you provide to us voluntarily or that is collected automatically when you use our services:

a) When You Register for a Course

• Name

• Email address

• Password (encrypted)

• Country or region (if requested)

• Any optional data you add to your profile (e.g. biography, image)

• Consent timestamp

b) When You Use the Course Platform

• Course progress and completion data

• Surveys within the course to understand the learner group better
• Posts, comments, or messages you create in course communities

• Profile information you choose to share publicly in the course community (optional)

c) When You Contact Us

• Name

• Email address

• Message content

• Consent timestamp

d) When You Sign Up for the Newsletter

• Email address

• Consent timestamp

e) Automatically Collected Data

• IP address

• Browser type and version

• Device type

• Usage data (via cookies and analytics)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

4. How We Use Your Data

We use your personal data for:

• Registering and managing your course access

• Providing course content and monitoring progress

• Enabling optional community interaction within course environments

• Responding to your inquiries

• Sending you newsletters if you have opted in

• Improving our services and user experience

5. Sharing Your Data

We do not sell your data.

We may share your data with:

• Technology providers (e.g., LMS platforms, email marketing services, analytics tools) under data processing agreements. We are using Tally.so, a survey tool to collect data and feedback. We utilise Mailer to manage our email marketing activities.

• Course co-creators/partners, only in the context of specific courses and only when community functionality is active. These partners will only see information you choose to share publicly in your course profile or posts.

All third-party providers are GDPR-compliant and operate under strict confidentiality and security agreements.

6. Data Retention

We retain your data:

• For as long as your account is active or as needed to provide services

• For legal or tax obligations, as required by applicable laws

• Until you withdraw your consent (for newsletters or community participation)

You can request deletion of your data at any time by contacting us at mail@bonolab.com.

7. Your Rights under GDPR

You have the following rights:

• Access – You can request a copy of your personal data.

• Rectification – You can correct incorrect or incomplete data.

• Erasure – You can request deletion of your data (“right to be forgotten”).

• Restriction – You can ask us to limit the use of your data.

• Objection – You can object to data processing based on our legitimate interests.

• Data Portability – You can request your data in a structured, machine-readable format.

• Withdraw Consent – You may withdraw your consent at any time.

To exercise any of these rights, email us at mail@bonolab.com.

You also have the right to lodge a complaint with your local Data Protection Authority (DPA).

8. Automated Decision Making or Profiling

We do not engage in any automated decision-making or profiling of users based on personal data. If this changes, we will update this policy accordingly.

9. International Data Transfers

We primarily store and process your data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).

10. Media Uploads

If you upload media files (e.g. images or videos) to our website or course platform, please ensure that these files do not include embedded location data (EXIF GPS), as this data may be accessible to other users who can download the files.

11. Third-Party Data

We do not receive personal data about you from third-party advertisers or external data brokers. If we begin such data collection in the future, this policy will be updated.

12. Data Breach Procedures

In the event of a personal data breach, we have established internal protocols to detect, report, and investigate any incidents. Affected users will be informed without undue delay, and we will notify relevant supervisory authorities as required by GDPR.

13. Cookies and Tracking Technologies

We use cookies to:

• Enable core website functionality

• Understand user behaviour (via tools like Google Analytics)

• Improve the performance and usability of our platform

When you visit our site for the first time, a cookie banner will ask for your consent. You can manage your preferences at any time or disable cookies via your browser settings.

Learn more in our Cookie Policy below.

14. Data Security

We implement appropriate technical and organisational measures to:

• Protect personal data from loss, misuse, unauthorised access or disclosure

• Use encrypted connections (SSL/TLS)

• Maintain regular backups and access control.

15. Updates to This Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated via email or through our website. Continued use of our services implies acceptance of the updated terms.

Contact
For questions or data rights requests, contact:
📧 mail@bonolab.com

Cookie policy

Effective Date: 08.08.2025
Last Updated: 08.08.2025

This Cookie Policy explains how BonoLab ApS (“we”, “us”, or “our”) uses cookies and similar technologies on our website and learning management system (LMS).

By using our site, you consent to the use of cookies as described below, unless you change your browser settings or opt out through our cookie banner or consent manager.

1. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or smartphone) when you visit a website. They help the site function, remember your preferences, and understand how you interact with the content.

Cookies can be:

• Session cookies – deleted when you close your browser

• Persistent cookies – remain on your device for a specified duration or until deleted

• First-party cookies – set by our website

• Third-party cookies – set by external services we use (e.g., analytics, video embeds)

2. Types of Cookies We Use

3. Cookies in the LMS and Course Communities

When you register and access a course, cookies may be used to:

• Keep you logged in securely

• Track course progress

• Enable course-specific features like quizzes, forums, or video playback

• Remember your profile settings if you join a community

All cookies used in the LMS are configured to comply with GDPR and are minimized to what is strictly necessary for platform functionality, unless you give additional consent.

4. Third-Party Services

We may use third-party services that place cookies on your device. These include:

• Google Analytics – For anonymized website analytics

• Mailchimp / Brevo / etc. – If used for newsletter tracking

• YouTube / Vimeo – If course content includes embedded videos

• LMS providers – If the system is hosted by an external provider (e.g., MoodleCloud, Thinkific, LearnWorlds, etc.)

Each third party is responsible for its own cookie and privacy practices. Where required, we seek consent before activating their cookies.

5. Cookies from Embedded Content

Some pages may include embedded videos from platforms such as YouTube or Vimeo. These platforms may set cookies on your device to track interactions and preferences. These cookies are only activated with your explicit consent and follow the third party’s own privacy policies. Learn more:

– YouTube: https://policies.google.com/privacy  

– Vimeo: https://vimeo.com/privacy

6. LiteSpeed and QUIC.cloud

Our site uses LiteSpeed caching and QUIC.cloud services to improve performance. These services may temporarily store copies of web pages to enhance user experience. No personal data is stored in these cached pages, and cache files expire on a defined schedule. For more, see: https://quic.cloud/privacy-policy/

7. How to Manage or Disable Cookies

You can manage your cookie preferences in several ways:

a) Via Our Cookie Banner

When you first visit our site, a cookie banner will ask for your consent. You can:

• Accept all cookies

• Reject non-essential cookies

• Customize your preferences

You can update your preferences anytime by clicking the cookie settings icon or banner footer.

b) Via Your Browser

Most web browsers allow you to:

• See which cookies are stored

• Delete cookies individually or all at once

• Block all or selected cookies

Links to manage settings:

• Chrome: Manage Cookies

• Firefox: Manage Cookies

• Safari: Manage Cookies

• Edge: Manage Cookies

Note: Disabling certain cookies may affect the functionality of our website or LMS.

8. Changes to This Cookie Policy

We may update this Cookie Policy to reflect changes in technology, applicable laws, or our services. Updates will be posted on this page with a revised “Last Updated” date.

9. Contact Us

For questions or requests related to our use of cookies:

📧 mail@bonolab.com

Newsletter