Version as of October 13, 2026
1. Data Controller
The controller of your personal data is BMWorld.OLEKSANDR BEZVERKHYI, al. Wincentego Witosa 10, 20-315 Lublin, Poland, NIP (Tax ID): 7123500086, REGON: 542738051 (hereinafter referred to as the “Controller”). Contact for data protection inquiries: contact@bmworld.eu.
2. What Data We Collect
- Order data: first and last name, delivery and billing address, email address, phone number, order history, billing/invoicing details.
- Account data: username/login, password (in encrypted form), saved vehicles in the “My Car” section (model, year, body type, engine).
- Correspondence: messages sent via email or contact forms.
- Technical data: IP address, browser type, server log data, cookies (for details, see the Cookie Policy).
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Fulfillment of orders and sales contracts, delivery | Art. 6(1)(b) — performance of a contract |
| Accounting, invoicing, and tax obligations | Art. 6(1)(c) — compliance with a legal obligation |
| Handling complaints, returns, and defense against legal claims | Art. 6(1)(f) — legitimate interest |
| Website security and fraud prevention | Art. 6(1)(f) — legitimate interest |
| Account maintenance and vehicle storage in “My Car” | Art. 6(1)(b) — provision of service |
| Analytics and marketing cookies | Art. 6(1)(a) — your consent |
Providing data for order fulfillment is voluntary, but necessary to process and execute the order.
4. Data Recipients
We share data only to the extent necessary to achieve our purposes: delivery and courier services, payment operators and banks, hosting and IT service providers (Hostinger), accounting and legal advisors, notification service providers ((WPTelegram, e-mail-сервіс)), as well as public authorities if required by law. We do not sell your personal data.
5. Data Transfers Outside the EEA
If data is transferred to countries outside the European Economic Area (specifically to Ukraine in connection with delivery), this is conducted on a legal basis permitted under the GDPR: necessity for the performance of a contract with you, standard contractual clauses (SCCs), or an adequacy decision.
6. Retention Periods
- Order data and accounting records — 5 years from the end of the calendar year in which the tax liability arose.
- Data for resolving disputes and claims — until the expiration of the applicable limitation period.
- Account data and saved vehicles — until the account is deleted.
- Data processed based on consent — until consent is withdrawn.
7. Your Rights
You have the right to: access your data, rectify it, request erasure (“right to be forgotten”), restrict processing, data portability, object to processing based on legitimate interests, and withdraw consent at any time (without affecting the lawfulness of processing carried out prior to withdrawal). To exercise your rights, please contact us at contact@bmworld.eu.
You also have the right to lodge a complaint with a supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
8. Automated Decision-Making
We do not make decisions based solely on automated processing that produce legal effects concerning you.
9. Cookies
The website uses cookies. Essential cookies function without requiring consent, while all other cookies are activated only after your consent. For details, refer to the Cookie Policy. You can manage your preferences at any time via “Cookie Settings” in the website footer.
10. Data Security
We apply technical and organizational security measures: HTTPS encryption, restricted data access, backups, and regular software updates.
11. Policy Changes
We reserve the right to update this Policy. The current version is always available on this page.