1. Controller
BM Trade, MB, M. K. Čiurlionio g. 84B-76, 03170 Vilnius, Lithuania
Email: sales@bmtradeco.eu
We process personal data only insofar as this is necessary for operating this website, processing your order or answering your enquiries, or if you have given your consent. The legal bases are in particular Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligations, e.g. retention under tax and commercial law) and Art. 6(1)(f) GDPR (legitimate interests, e.g. secure operation of the website, fraud prevention).
2. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit the website, technically necessary data are processed (IP address, date and time, page visited, referrer, browser and operating system). This serves to deliver the website and keep it secure (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Hostinger. Parts of the website (e.g. scripts) may be delivered via Hostinger’s content delivery network.
3. Cookies and local storage
We only use technically necessary cookies and storage technologies (Section 25(2) TDDDG, German Telecommunications Digital Services Data Protection Act):
- WooCommerce cookies for the cart and session (e.g. woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*); stored for up to 2 days or until the end of the session.
- Your language selection (German/English) is stored as a cookie and in your browser’s local storage (bm_lang, stored for 1 year) so that the website is displayed in your language.
- Payment service providers set cookies for fraud prevention during payment (see section 6).
We do not currently use analytics or advertising cookies.
4. Contact
If you contact us by email, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them as soon as they are no longer required, unless statutory retention obligations apply.
5. Orders and customer account
For your order, we process your name, billing and delivery address, email address, telephone number if applicable, the products ordered and payment information (Art. 6(1)(b) GDPR). We retain invoices and accounting records for the statutory periods (up to 10 years, Art. 6(1)(c) GDPR). If you create a customer account, we store your data until the account is deleted.
6. Payment service providers
- Card payment, Apple Pay and Google Pay: WooPayments, operated by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA); payments are processed by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). For Apple Pay and Google Pay, Apple Distribution International Ltd. (Cork, Ireland) and Google Ireland Limited (Dublin, Ireland) respectively are also involved.
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
The payment service providers receive the data required for the payment (e.g. name, amount, order number, payment details) and process technical data from your device for fraud prevention; for this purpose, a script from the provider may be loaded on pages with a payment function (Art. 6(1)(b) and (f) GDPR). A transfer to the USA is possible; it takes place on the basis of the EU-US Data Privacy Framework or standard contractual clauses. The privacy notices of the respective provider also apply.
7. Shipping
Your orders are shipped via the logistics service Amazon Multi-Channel Fulfillment. For this purpose, we transmit your name, delivery address, telephone number if applicable and the items ordered to Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg, and to the parcel services commissioned by Amazon (Art. 6(1)(b) GDPR).
8. Google Customer Reviews
After an order, the order confirmation page shows a window of the Google Customer Reviews service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To display this window, we transmit your email address, order number, delivery country, estimated delivery date and the GTIN of the ordered products to Google; loading the window connects to Google servers (Art. 6(1)(f) GDPR, legitimate interest in customer reviews).
Only if you agree in the window will Google send you an email after delivery asking you to rate your purchase (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. Google processes the data as an independent controller, including in the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: Google privacy policy.
9. Product reviews and review reminder
Review reminder: If you tick the corresponding box when ordering, we will send you one email after delivery asking you to review the products you bought. For this we use your name, email address and order data (Art. 6(1)(a) GDPR). Without your consent you will not receive such an email. You can withdraw your consent at any time with effect for the future, via the link in your order confirmation or by email to sales@bmtradeco.eu.
Product reviews: If you submit a review, we store the star rating, text, date, your name and email address, the related order and the IP address and browser identifier, to prevent abuse. Only the star rating, text, date and your first name with the initial of your last name are published (Art. 6(1)(a) GDPR, your consent by submitting the review; abuse prevention: point (f)). Published reviews are also included as structured data in the source code of the product page so that search engines such as Google can show them in search results.
Your review stays published until you ask us to delete it; a short email to sales@bmtradeco.eu is enough. How we make sure reviews are genuine is explained on the page Review authenticity.
10. Storage period
We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw any consent you have given at any time with effect for the future. To do so, please contact sales@bmtradeco.eu.
You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence. The authority responsible for us is the Valstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate), L. Sapiegos g. 17, 10312 Vilnius, Lithuania, vdai.lrv.lt.
There is no automated decision-making, including profiling. You are not obliged to provide your data; however, without the data required for the order, we cannot conclude the contract.
Last updated: October 2026
