top of page

Privacy Policy

BM Investment Sp. z o.o.
Last updated: 11 December 2025

This Privacy Policy is intended to inform users about the rules for processing personal data and the rights they are entitled to. The document explains what data is collected, for what purpose it is used, and how it is protected in accordance with applicable laws, in particular the GDPR.

1. General information

This Privacy Policy sets out the rules for the processing and protection of personal data of individuals using the website operated by BM Investment Sp. z o.o., with its registered office in Warsaw (hereinafter referred to as the “Company” or the “Controller”).

The Controller makes every effort to ensure that personal data is processed in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Personal Data Controller

The controller of personal data is:

BM Investment Sp. z o.o.
ul. Zygmunta Słomińskiego 19/81
00-195 Warsaw, Poland

National Court Register (KRS): 0001196527
Tax Identification Number (NIP): 5253062614
Statistical Number (REGON): 542817520

E-mail: invest@bm-investment.pl

3. Scope of processed personal data

The Controller may process the following personal data:

– first and last name,
– e-mail address,
– telephone number,
– data provided in the contact form,
– technical data, including IP address, cookies, and server logs,
– other data voluntarily provided by the user.

4. Purposes and legal bases for data processing

Personal data is processed for the following purposes:

– responding to the user’s inquiry – Article 6(1)(f) GDPR,
– concluding and performing a contract or taking steps prior to entering into a contract – Article 6(1)(b) GDPR,
– fulfilling legal obligations incumbent on the Controller – Article 6(1)(c) GDPR,
– conducting statistical analyses and ensuring the security of the website – Article 6(1)(f) GDPR,
– conducting marketing activities – Article 6(1)(a) GDPR (based on consent).

5. Data sharing

Personal data may be disclosed to:

– entities providing IT, hosting, and accounting services,
– public authorities – only in cases where such an obligation arises from legal regulations.

The Controller uses only services provided by entities that ensure compliance with the GDPR. Personal data is not sold to third parties.

6. Rights of data subjects

Data subjects have the right to:

– access their personal data,
– rectify their personal data,
– request the deletion of their personal data,
– restrict the processing of their personal data,
– data portability,
– object to the processing of their personal data,
– withdraw consent at any time,
– lodge a complaint with the President of the Personal Data Protection Office.

7. Cookies

The website uses cookies for the following purposes:

– ensuring the proper functioning of the website,
– conducting statistical and analytical analyses,
– carrying out marketing activities – only based on the user’s consent.

Users can manage their cookie settings independently in their web browser.

8. Server logs

When using the website, the following information may be automatically recorded:

– IP address,
– date and time of connection,
– information about the browser and operating system.

This data is used solely for technical purposes and to ensure the security of the website.

9. Security measures

The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or unlawful modification.

10. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. The current version of the document will always be published on the Company’s website.

11. Contact

For matters related to personal data protection, please contact:

BM Investment Sp. z o.o.
ul. Zygmunta Słomińskiego 19/81
00-195 Warsaw, Poland
E-mail: invest@bm-investment.pl

12. Data Retention Period

Data is retained:

-For the time needed to respond to inquiries

-For the duration of contracts and as required by law

-Until consent is withdrawn – for marketing purposes

-Technical data is kept as long as necessary for analysis and security

bottom of page