For the purpose of the General Data Protection Regulation (GDPR), we are the data controller of your personal information.

3.1. Personal Data

• Identity Information (name, date of birth)
• Contact Information (email address, phone number, shipping address)
• Account Information (username, password)
• Transaction Data (purchase history, payment details)
• Communication Records (customer service interactions)

3.2. Technical Data

• IP address
• Browser type and version
• Device information
• Usage data and metadata
• Cookies and similar technologies

We process your personal data on the following legal grounds:

• Contract performance (processing orders, providing services)
• Legal obligations (tax, business records)
• Legitimate interests (improving our services, security)
• Consent (marketing communications, cookies)

• Process your transactions and payments
• Provide customer support
• Send transaction confirmations and updates
• Improve our platform and services
• Detect and prevent fraud
• Send marketing communications (with consent)
• Comply with legal obligations

We may share your information with:

• Payment processors to handle transactions
• Shipping partners for order delivery
• Service providers for platform operation
• Legal authorities when required by law

When we transfer data outside the EU/EEA, we ensure appropriate safeguards through:

• Standard Contractual Clauses
• Adequacy decisions
• Binding Corporate Rules

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ('right to be forgotten')
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

To exercise these rights, contact us at dpo@bakomi.com. We'll respond within 30 days.

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including legal obligations and legitimate business interests. When data is no longer needed, it will be securely deleted or anonymized.

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

If you're unsatisfied with our handling of your personal data, you can lodge a complaint with your local supervisory authority. We encourage you to contact us first to resolve any concerns.

We may update this Privacy Policy periodically. We will notify you of any material changes through our platform or via email.