Privacy Policy

Privacy Policy

Privacy Policy (GDPR / RODO)

§ 1. Personal Data Controller

The controller of your personal data is:

„BUSINESS MARKETPLACE GROUP EUROPA" Sp. z o.o.
ul. Henryka Dobrzańskiego „Hubala" nr 22D, 01-473 Warszawa, Polska
KRS: 0001228088  ·  NIP: 5223367467

Contact regarding personal data protection:
E-mail: bmpgroup.eu@gmail.com
Tel.: +48 503 158 698

§ 2. Scope of Processed Data

Depending on your actions in the Store, we process the following categories of personal data:

  • order data – name and surname, delivery address, e-mail address, phone number;
  • payment and invoice data – address, and for B2B customers – company name and NIP (tax identification number);
  • user account data – e-mail address, order history, preferences;
  • technical data – IP address, browser type, cookies, data regarding website behavior;
  • correspondence data – content of inquiries, complaints, and contacts with Store support.

§ 3. Purposes and Legal Basis for Processing

  • Performance of a sales contract, delivery, payment – Art. 6(1)(b) GDPR.
  • Issuing invoices, keeping accounting records, fulfilling tax obligations – Art. 6(1)(c) GDPR.
  • Handling complaints and returns – Art. 6(1)(b) and (c) GDPR.
  • User account management – Art. 6(1)(b) GDPR.
  • Marketing, newsletter dispatch, remarketing – Art. 6(1)(a) GDPR (consent of the data subject).
  • Analytics, website improvement, security – Art. 6(1)(f) GDPR.
  • Protection against abuse, assertion and defense of claims – Art. 6(1)(f) GDPR.

§ 4. Transfer of Data to Third Parties

Your personal data may be transferred to trusted entities solely to the extent necessary for the performance of a given service, in particular:

  • courier companies and logistics operators (DHL, DPD, InPost, Poczta Polska);
  • payment operators;
  • Shopify platform provider;
  • CRM system;
  • analytical and advertising tools (Google, Meta, TikTok);
  • accounting office and legal advisors.

All listed entities are obliged to protect personal data in accordance with GDPR regulations.

§ 5. Transfer of Data Outside the European Economic Area

Some service providers (Shopify, Google, Meta) may process personal data outside the European Economic Area (EEA). In such cases, data transfer takes place based on Standard Contractual Clauses of the European Union (SCC), ensuring an adequate level of data protection.

§ 6. Data Retention Period

  • Order and invoice data – for the period required by tax law (generally 5 years);
  • user account data – until the account is deleted;
  • data processed for marketing purposes – until consent is withdrawn;
  • technical and analytical data – according to the cookie retention period.

§ 7. Rights of Data Subjects

In accordance with GDPR regulations, you have the following rights:

  • right to access personal data;
  • right to rectification of data;
  • right to erasure of data ("right to be forgotten");
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing;
  • right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal);
  • right to lodge a complaint with the supervisory authority – President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

To exercise your rights, please contact us at the e-mail address: bmpgroup.eu@gmail.com.

§ 8. Cookies

The Store uses cookies. Detailed rules regarding the use of cookies, including the possibilities of managing them, are defined in a separate Cookie Policy available on the Store's website.

§ 9. Voluntariness of Data Provision

The provision of personal data is voluntary, but necessary for the execution of an order, creation of a user account, or handling of a complaint. Failure to provide data required for the above purposes will prevent their fulfillment.

§ 10. Changes to the Privacy Policy

The Administrator reserves the right to update this Privacy Policy, particularly in the event of changes in legal regulations or changes in the manner of personal data processing. The current version of the Policy is always available on the Store's website.