ENG
SLO
CRO
Controller
The controller of personal data is LM TRADE d.o.o., Trnoveljska cesta 2F, 3000 Celje, Slovenia, company registration number 5383927000 (BAM Guitar Center). For any questions about personal data and to exercise your rights, email info@bam-music.com or write to our address.
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Processing orders, delivery, payment, complaints | first name, surname, address, email, phone, company and tax number (if you enter them), products ordered, payment method | contract (Article 6(1)(b) GDPR) | until the periods for lack of conformity and guarantee end |
| Invoices and accounting | data on the invoice | legal obligation (Article 6(1)(c) GDPR, VAT Act (ZDDV-1)) | 10 years after the end of the year the invoice was issued |
| Customer account | email, password (encrypted), addresses, order history, wish list | contract | until you delete the account |
| Replying to your message | name, email, content of the message | consent (Article 6(1)(a) GDPR) | until the communication ends, at most 2 years |
| Newsletter | email, name, language | consent | until you unsubscribe |
| Notification when a product is back in stock | email, product | consent | until the notification is sent or you unsubscribe |
| Protection against abuse and bots | IP address, browser data, server logs | legitimate interest (Article 6(1)(f) GDPR) | at most 30 days |
| Visitor statistics | anonymous data on page views (no cookies, IP address not stored) | legitimate interest | aggregated data |
You must enter the data needed for the order, otherwise we cannot process it. Everything else is voluntary. We do not carry out automated decision-making or profiling.
We send the newsletter at most a few times a year. You can unsubscribe at any time with the link in every message, in your customer account or by emailing info@bam-music.com.
Who we share data with
We share data only with providers we need to run the shop. We have data processing agreements with them, or they are independent controllers for their part of the service:
- Pošta Slovenije d.o.o. (and its partners for delivery to Croatia): delivery, name, address, phone, email for parcel notifications;
- PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg: payments by card, PayPal, Google Pay and Apple Pay (independent controller);
- Leanpay: payment in instalments and credit checks (independent controller, if you choose it);
- SiteGround: hosting of the online shop on servers in the EU;
- Brevo (Sendinblue SAS), France: sending order emails;
- Mailchimp (The Rocket Science Group LLC), USA: sending the newsletter;
- Cloudflare, Inc., USA: Turnstile, checking that the login and registration forms are filled in by a person;
- PrestaShop SA, France: online shop platform and payment module;
- e-računi: accounting software for issuing invoices and managing stock;
- competent authorities, when required by law.
For providers in the USA, the transfer is based on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.
Your rights
You can ask for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest. You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before it. You can download the data from your customer account yourself in the My personal information section. We reply to requests within one month at the latest.
If you believe that we process your data unlawfully, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. Customers from Croatia can also contact the Agencija za zaštitu osobnih podataka (Croatian data protection authority) (azop.hr).
Security
The site uses an encrypted connection (HTTPS). We store passwords in encrypted form. Only employees and providers who need the data for their work have access to it.
Cookies
Cookies are small files that a website stores in your browser. We use only cookies that are strictly necessary for the shop to work, so we do not need your consent. We do not use advertising or tracking cookies. We measure visitor statistics with Umami, which does not use cookies.
| Cookie | Purpose | Duration | Set by |
|---|---|---|---|
| PrestaShop-* | basket, login, selected language, form security | 20 days | bam-music.com |
| PHPSESSID | browsing session | 20 days | bam-music.com |
| Cloudflare Turnstile cookies | protecting login and registration from bots | until the browser is closed | Cloudflare |
| PayPal cookies | processing the payment, only if you choose to pay by card or PayPal | under PayPal's rules | PayPal |
You can delete or restrict cookies in your browser settings. Without the necessary cookies, the basket and login do not work.
The site has links to Facebook, Instagram and Google Maps. These providers process data only when you open the link, under their own privacy policies.
Changes
We may update this policy. The current version is always published on this page.