Privacy statement

Controller for the processing of personal data

BM Energy is responsible for the processing of personal data. Our contact details are:

BM Energy. Address: Henri Wenckebachdreef 2, 2132 PH. Email: [email protected]. Telephone: 085 301 6440. Chamber of Commerce (KvK) number: 64289052.

Contact details of the Privacy Officer

BM Energy has appointed a Privacy Officer who can be reached at [email protected].

Personal data we process

BM Energy processes your personal data because you use our services and/or because you provide this data to us directly. Below is an overview of the personal data we process:

After registering, you can create an account using your email address and password. Additionally, we collect data on our website visitors regarding their activities on our website.

Purposes and legal bases for processing personal data

BM Energy processes your personal data for the following purposes:

• Processing your payment.
• Sending our newsletter or promotional material to existing customers. You can always unsubscribe from the newsletter via the unsubscribe link at the bottom of the newsletter.
• Being able to call or email you if this is necessary for the performance of our services.
• Informing you about changes to our services and products.
• Offering you the possibility to create an account.
• Delivering goods and services to you.
• Analyzing website visitor behavior to improve the website and tailor our product and service offerings to user preferences.
• Complying with legal obligations, such as data needed for tax returns.

Retention of personal data

We do not retain your personal data any longer than is necessary for the purposes for which it was collected.

Automated decision-making

BM Energy does not make decisions based solely on automated processing that could have significant consequences for individuals.

Sharing personal data with third parties

BM Energy does not sell your data to third parties and only shares it if necessary for the performance of our agreement with you or to comply with a legal obligation. With companies that process your data on our behalf, we conclude a data processing agreement to ensure the same level of security and confidentiality of your data.

Cookies

Our website uses cookies. On your first visit we ask for your consent before placing non-essential cookies. You can change your choice later via the cookie banner or your browser settings.

• Functional cookies: required for the website to work, such as language, cart and sign-in.
• Analytical cookies: to measure website usage, only with your consent (Google Analytics).
• Marketing cookies: only with your explicit consent.

The BM Energy app and your trade account

This statement also applies to the BM Energy app. You can contact BM Energy at [email protected] or +31 85 3016 440. The public catalogue can be viewed without an account. Our service processes the information you provide for trade accounts, orders and personal features.

• Name, email address, telephone number, company details and delivery addresses for account review, contact and delivery.
• Account identifiers and sign-in details for authentication. Passwords are processed as hashes; the app stores a session token in your device's secure storage.
• Orders, purchase references, favourites and project lists to provide these features and display your order history.
• Contact requests, product reviews and newsletter subscriptions when you submit them.
• Language preference and shopping cart are also stored locally on your device. For an online payment, the app opens the payment service; the app stores a reference to a pending payment, not payment card details.
• Requests to our services include technical connection information, including your IP address, to deliver and secure the service. The app communicates with our API over HTTPS. Hosting, email, payment and administration services process information as needed to provide the services you use.

Saskia, our AI assistant

Saskia is an optional AI assistant for questions about BM Energy, products, your account and your orders. When you use Saskia, OpenAI and MG Decide process your questions, answers and relevant product, account or order data retrieved for your question. OpenAI generates answers and checks content for harmful text; MG Decide checks text for attempts to bypass the AI's instructions. Personal account and order data is available only after signing in and for your own account.

To improve Saskia, we keep a server-side archive of questions and answers about public information, together with technical data and any feedback on whether the answer was helpful. Before storage, this text is sanitised to remove recognisable personal and sensitive data. Private account and order content is excluded from this question-and-answer archive. Archive records have a retention period of 90 days and are then automatically cleaned up.

AI can make mistakes. Check important information against the supplier's official product documentation; that documentation is authoritative. Do not share passwords or payment details with Saskia.

App notifications and language settings

Push notifications are off by default. Under My account > Notifications you can separately opt into order updates and general messages. We link a technical push token, device platform, language and notification preferences to your account and active session. Expo and the Apple or Google push services process the token and message content to deliver notifications. Order notifications on the lock screen do not contain a name, amount or order number.

You can disable notifications in the app or your device settings. The registration is removed when its session ends or expires, or when your account is deleted. Undelivered messages expire after 24 hours; delivery records are cleaned up within the following seven days. Your device language and region help select the initial language; the app does not use GPS or location permission for this.

Deleting your app and webshop account

You can delete your personal account through My account > Delete account in the app or through the webpage below. After password confirmation, we delete your personal account, credentials, active sessions, favourites, saved addresses, project lists and linked product reviews. Verified newsletter subscriptions for the same email address are also removed. You lose access to the trade account. Existing orders are not cancelled: order records and company information needed for ongoing agreements or legal obligations are retained for as long as necessary. For questions about retained data or a deletion request without account access, contact [email protected].