DRAFT – legal review required before going live. Complete all [MISSING] items. Keep section 7 only if Google Analytics/Tag Manager is actually activated. The German version (Datenschutzerklärung) is legally binding; this is a convenience translation.
1. Controller
BM Trading UG (haftungsbeschränkt), represented by its Managing Director Melisa Atesci, Ludowicistraße 25, 75417 Mühlacker, Germany
Email: info@bm-trading.eu · Phone: +49 160 2249828
No data protection officer has been appointed as there is no legal obligation to do so. [verify]
2. Hosting and server log files
This website is hosted by [MISSING: hosting provider, address]. A data processing agreement pursuant to Art. 28 GDPR is in place. [verify]
When you visit the website, the server automatically processes data transmitted by your browser: IP address, date and time, requested page, referrer URL, browser and operating system. This is necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Log files are deleted after [MISSING: e.g. 7–14] days.
3. Encryption
For security reasons, this website uses TLS encryption (recognisable by “https://”).
4. Contact and inquiry forms
If you contact us via a form (contact, partner inquiry, wholesale inquiry), we process the information you provide – e.g. company, name, business email address, country, details of your requirements, your message and, if applicable, an uploaded attachment – to handle your inquiry and any follow-up questions.
The legal basis is Art. 6(1)(b) GDPR where the inquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in handling business inquiries (Art. 6(1)(f) GDPR).
The information is sent to us by email and is not stored in the website database. Attachments are deleted from the server after sending. To prevent abuse, your IP address is temporarily stored for a maximum of 15 minutes in a shortened, non-reversible form (hash). We keep the emails as long as necessary to handle your inquiry or as required by statutory retention periods (e.g. for business correspondence).
We use [MISSING: email/SMTP provider] to send emails. [verify]
You will receive an automatic confirmation of receipt at the email address provided. It does not contain the content of your inquiry.
5. Fonts
The fonts (Manrope, Inter) are hosted locally on our server. No connection is made to servers of Google or other providers.
6. Cookies and local storage
We do not use cookies to operate the website. If you make a choice in our consent banner, we store this decision in your browser’s local storage (localStorage) so that the banner does not appear again. This is strictly necessary (Section 25(2) no. 2 TDDDG). You can change your decision at any time via the “Cookie settings” link in the footer.
7. Web analytics (only with consent)
If you consent, we use [Google Tag Manager and/or Google Analytics 4] provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to record in pseudonymised form how our website is used (e.g. pages viewed, completed inquiries, clicks on contact links). Cookies or similar technologies are used for this purpose.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without consent, no analytics code is loaded. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time with effect for the future via “Cookie settings”. [MISSING: retention period according to GA4 settings, e.g. 14 months]
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time (Art. 7(3) GDPR).
You have the right to lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
9. Automated decision-making
No automated decision-making, including profiling, takes place.
10. Last updated
Last updated: [MISSING: date]. We update this privacy policy when the website or the legal situation changes.