The
viewRefreshMode means the BBOX will automatically be appended to query string, so you shouldn't need that. (unless changed with <viewFormat>)
So just put the query values you need: (the default ViewFormat will be appended automatically)
<viewRefreshMode>onStop</viewRefreshMode>
<viewRefreshTime>2</viewRefreshTime>
If you really do want a 'fixed' BBOX, then will just need to correctly encode as a URL
Shouldn't be spaces in in a URL, use %20 if must. But standard BBOX doesn't include spaces
And & is the way to 'separate' params in a standard query string.
(its just even more complicated complicated, that & itself needs to be encloded as & in XML - as & is used for XML Entities)
And REMOVE the viewRefreshMode/viewRefreshTime - as its no longer a 'dynamic' link. Its just a plain simple network link.