Privacy policy

The controller responsible for personal data on this website is:

This notice covers website visits and enquiries, rather than possible future services at the estate. Please use the contact details above for privacy questions and requests.

The South African company is subject to the Protection of Personal Information Act (POPIA). Where the General Data Protection Regulation (GDPR) applies, the legal bases and rights explained below also apply.

The website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel delivers pages and files through its hosting and network infrastructure.

Requests involve IP addresses, request times, requested addresses, data volumes, status and error information, and information supplied by your browser. This may include browser and operating system details and the referring page. These data arise even without an enquiry.

Processing enables delivery, troubleshooting and protection against abuse and attacks. The GDPR basis is Article 6(1)(f), reflecting our legitimate interest in secure, functional operation. The published website uses HTTPS.

Recipients include Vercel and infrastructure providers involved in operating the service. Processing is not guaranteed to take place exclusively in Germany. See the Vercel Privacy Notice for further details and “Processing in other countries” below.

At the entry URL, the website uses the country code Vercel supplies based on the IP address: Germany receives German, other countries English. A saved manual choice takes priority. Direct links to a language version are not automatically changed.

No GPS data or movement profiles are collected. The application code does not persist the country code. VPNs and certain connections may affect accuracy. You can change the language using DE / EN.

The GDPR basis is Article 6(1)(f), reflecting our legitimate interest in presenting understandable content.

The website uses no analytics or advertising services, cross-site tracking or advertising pixels. Google Analytics, Vercel Web Analytics and Vercel Speed Insights are not embedded. There are no optional tracking categories requiring consent.

• bonanza_language (cookie): After a click on DE or EN, stores only your chosen language for this website for up to 180 days. Your browser sends it with subsequent requests. It contains no individual visitor identifier.
• bonanza_cookie_notice (local storage): After “Understood”, records the notice version and dismissal time. The application uses the entry for up to 180 days and removes expired entries on the next visit. Without another visit, it remains until you or the browser delete it. It is not transmitted to the server.

These entries remember settings you have requested. Where applicable, necessary device access relies on Section 25(2)(2) TDDDG. Processing of personal data relies on Article 6(1)(f) GDPR, reflecting our interest in reliably implementing your settings.

“Understood” only dismisses the notice; it does not provide consent to advertising or analytics. “Cookie settings” in the footer reopens the notice. You can delete or block entries in your browser’s site-data settings. The website remains usable, although language selection or the notice may reappear.

Contact links open your email application with our address. An additional contact window displays the address and offers a copy button. Only after you click it does the website write our public email address to the clipboard. It does not read existing clipboard contents.

There is no contact form with server-side submission. Resend is not integrated. Only when you send an email do we receive your sender address, message, attachments and other information you supply.

Our mailboxes are provided by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. The provider processes message contents and technical connection data for delivery, storage and security. Details: united-domains privacy notice. Your own email provider also handles delivery. The South African company identified above handles your enquiry.

For steps towards a contract requested by you, or performance of a contract, the GDPR basis is Article 6(1)(b). Other correspondence relies on Article 6(1)(f), our legitimate interest in communication. Legally required retention relies on Article 6(1)(c). An enquiry does not subscribe you to a newsletter.

Contacting us is voluntary. Without a working reply address and information needed to understand your request, we may be unable to respond. Please send only information relevant to your enquiry.

Images, videos, fonts and the map image are delivered through this website and its hosting infrastructure. There are no embedded YouTube players, Google Maps widgets, external Google Fonts requests or social-media feeds.

Rendering and scroll animations run in your browser and are not used for behavioural analytics. Opening an external link takes you to another website, whose provider is responsible for its processing.

Our company is based in South Africa. Direct enquiries are supplied to that controller for handling. Messages hosted by united-domains are also accessed from South Africa. Website hosting may involve processing in the United States and other countries in Vercel’s infrastructure.

Vercel states that it participates in the EU-U.S. Data Privacy Framework. Transfers covered by that certification may rely on the corresponding adequacy decision under Article 45 GDPR. This does not state that a data processing agreement has been concluded with us or guarantee protection for every transfer.

You can use our contact details to request information about relevant recipients and any applicable contractual safeguards. Visiting the website or dismissing the cookie notice does not constitute blanket consent to international transfers. POPIA requirements for cross-border processing remain unaffected.

Technical data are processed for necessary operational, troubleshooting and security purposes. Specific incidents may require further retention for investigation or legal claims. Language and notice retention periods are explained above.

Enquiries are retained for handling and any ensuing business relationship, then deleted unless statutory retention duties or necessary evidential or legal-defence interests require further storage. Use is then restricted to the relevant retention purpose.

Access is limited to people handling the matter and necessary service providers. Disclosure to authorities or professional advisers occurs only where legally required or necessary for legitimate legal interests. Data are not sold for advertising.

Where the GDPR applies, its conditions provide the following rights:

• Access and a copy of your personal data (Article 15).
• Correction of inaccurate data and completion of incomplete data (Article 16).
• Erasure and restriction of processing (Articles 17 and 18).
• Data portability for information you provided, where automated processing relies on consent or a contract (Article 20).
• Withdrawal of consent for the future, where processing relies on consent. Earlier lawful processing is unaffected (Article 7(3)).

Contact info@bonanza-ranch.com. Where necessary, we may request reasonable identity verification. Rights under POPIA, including access, correction and, where applicable, deletion and objection, remain available.

No automated decisions producing legal or similarly significant effects, or profiling for such purposes, take place.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests and rights, or processing serves the establishment, exercise or defence of legal claims.

Where data are processed for direct marketing, you may object at any time without giving a particular reason. An informal message to info@bonanza-ranch.com is sufficient.

Under Article 77 GDPR, you may complain to a supervisory authority, particularly in the EU Member State where you normally live, work or believe an infringement has occurred. You do not have to contact us first. Contact details are in the directory of European supervisory authorities.

In South Africa, you may contact the Information Regulator. Its website explains the complaints procedure and electronic complaints portal. General contact: enquiries@inforegulator.org.za.