Privacy Policy
This notice explains how Branca Bunús Ltd processes personal data in line with the EU General Data Protection Regulation (GDPR) and Irish data protection law.
Last updated: 27 August 2026
1. Data controller
Branca Bunus Limited (trading as Branca Bunús) is the controller of the personal data described in this notice.
- Registered name: Branca Bunus Limited
- Company registration number (CRO): 660602
- Company type: Private limited by shares (type code 1119)
- Date of incorporation: 13 November 2019
- Registered office: Pioneer Life Sciences (Lab No 4), Ground Floor, Building 10, Cherrywood Business Park, Dublin 18, D18 T3Y1, Ireland
- Principal activity (NACE 70.22): Professional, scientific and technical activities — business and other management consultancy activities
- Website: brancabunus.com
For any data protection question, contact info@brancabunus.com.
2. Personal data we collect
We only collect data you actively provide or that is strictly necessary to operate this website:
- Contact and enquiry data: name, company or institution, email address, phone number and the content of your message when you contact us or request materials.
- Technical data: IP address, browser type, device and pages visited, processed by our hosting provider in server logs for security and availability purposes.
- Cookie data: only strictly necessary cookies by default; optional cookies are set exclusively with your consent (see our Cookie Policy).
We do not knowingly collect special categories of personal data or data relating to children through this website.
3. Purposes and legal bases
- Responding to enquiries and managing scientific, commercial or investor relationships — legal basis: our legitimate interest (Art. 6(1)(f) GDPR) or steps taken prior to entering a contract (Art. 6(1)(b) GDPR).
- Operating, securing and improving the website — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Optional analytics or non-essential cookies — legal basis: your consent (Art. 6(1)(a) GDPR), withdrawable at any time.
- Complying with legal, accounting and regulatory obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Recipients and processors
We share personal data only with service providers acting as processors on our instructions, such as website hosting, email and IT support suppliers, and with professional advisers or authorities where legally required. Our strategic partner PolyGene Biotech is an independent entity; we do not transfer your data to it unless your enquiry specifically concerns commercial reagent supply and you ask us to do so.
5. International transfers
Where a provider processes data outside the European Economic Area, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with appropriate technical and organisational safeguards.
6. Retention
Enquiry correspondence is kept for up to 24 months after the last contact unless a business or legal relationship requires longer retention. Server logs are typically retained for a short period for security purposes. Consent records are kept for as long as required to demonstrate compliance.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting prior lawful processing. To exercise these rights, email info@brancabunus.com. You may also lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.
8. Security
We apply appropriate technical and organisational measures, including access control, encryption in transit and supplier due diligence, to protect personal data against unauthorised access, loss or disclosure.
9. Changes to this notice
We may update this policy to reflect legal or operational changes. The revision date at the top of this page always indicates the current version.
