1. Introduction
BMV UEM COMPANY Website:www.bmv.cc (“we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data, especially considering our operations in the fields of medical devices and animal medical devices. This Privacy Policy outlines how we collect, use, store, and disclose your personal data, including special categories of data such as medical information, in compliance with the General Data Protection Regulation (GDPR) applicable in the European Union and the California Consumer Privacy Act (CCPA) applicable in California, USA, as well as other relevant regional laws and regulations.
By accessing our website, using our products or services, or providing us with your personal data, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
2. Collection of Personal Data
2.1 Types of Personal Data Collected
We may collect the following types of personal data:
- Basic identification information: Such as name, address, phone number, email address, and date of birth.
- Medical data: For patients using our medical devices, this may include medical history, diagnosis results, treatment plans, and data generated by the use of our medical devices (e.g., vital signs monitored by the devices). For animal medical devices, this may include information about the animal (e.g., species, breed, age, health status) and data related to its treatment.
- Financial information: If you make purchases through our website or services, we may collect payment details such as credit card numbers, bank account information, and billing addresses.
- Website usage data: Information about your interaction with our website, such as the pages you visit, the links you click, the time and duration of your visits, and the device and browser you use. This data may be collected through cookies and other tracking technologies (see Section 5 for more details on cookies).
- Other information: Any other personal data you voluntarily provide to us, such as feedback, inquiries, or information provided when registering for an account or participating in surveys.
2.2 Legal Basis for Collection (Under GDPR)
Under the GDPR, we collect and process your personal data based on the following legal bases:
- Consent: Where you have given your explicit consent for the processing of your personal data for specific purposes, such as the use of cookies for marketing purposes.
- Performance of a contract: Processing is necessary for the performance of a contract to which you are a party, such as processing your personal data to fulfill an order for our medical devices.
- Legitimate interests: Processing is necessary for our legitimate interests, provided that such interests do not override your fundamental rights and freedoms. For example, we may process website usage data to improve our website and services.
- Legal obligation: Processing is necessary to comply with a legal obligation to which we are subject, such as maintaining records for regulatory purposes.
For the processing of special categories of data (including medical data), we will only do so where one of the following applies:
- You have given your explicit consent.
- Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of ours or of yours in the field of employment and social security and social protection law.
- Processing is necessary to protect the vital interests of you or another person where you are physically or legally incapable of giving consent.
- Processing is carried out in the course of its legitimate activities by a foundation, association, or any other not-for-profit body with a political, philosophical, religious, or trade union aim, provided that the processing relates only to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects.
- Processing relates to personal data which are manifestly made public by you.
- Processing is necessary for the establishment, exercise, or defense of legal claims or whenever courts are acting in their judicial capacity.
- Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices.
3. Use of Personal Data
We may use your personal data for the following purposes:
- To provide and fulfill our products and services, including processing orders, delivering products, and providing after-sales support.
- To communicate with you, including responding to your inquiries, providing information about our products and services, and sending important notices (such as changes to our Privacy Policy or terms of service).
- To improve our products, services, and website, by analyzing usage data and customer feedback.
- To market our products and services, where permitted by law. This may include sending you promotional materials, offers, and other marketing communications, but only if you have consented to receive such communications (under GDPR) or if you have not opted out (under CCPA).
- To ensure the security of our website, products, and services, and to prevent fraud and other illegal activities.
- To comply with legal and regulatory requirements, such as maintaining records for tax, healthcare, and other regulatory purposes.
- To conduct research and development activities related to medical devices and animal medical devices, provided that such activities are conducted in compliance with applicable laws and regulations and that personal data is anonymized or pseudonymized where possible.
4. Disclosure of Personal Data
We will not disclose your personal data to third parties except in the following circumstances:
- Service providers: We may share your personal data with third-party service providers who assist us in operating our business, such as processing payments, delivering products, hosting our website, and providing customer support. These service providers are only permitted to process your personal data in accordance with our instructions and are obligated to protect the confidentiality and security of your data.
- Business partners: In certain cases, we may share your personal data with business partners with whom we collaborate to provide products or services. For example, if we partner with a healthcare provider to offer a combined service, we may share relevant data with that provider, but only with your consent or as necessary to provide the service.
- Legal and regulatory authorities: We may disclose your personal data if required to do so by law, regulation, court order, or other legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, the safety of our employees, customers, or the public, or to investigate or prevent fraud or other illegal activities.
- Business transfers: In the event of a merger, acquisition, sale of assets, or other business transfer, your personal data may be transferred to the acquiring entity as part of the transaction. We will ensure that the acquiring entity is bound by the terms of this Privacy Policy or a similar privacy policy that protects your personal data.
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, or other electronic device) when you visit a website. They are used to store information about your browsing activity and preferences, which can help improve your website experience.
5.2 Types of Cookies We Use
We use the following types of cookies:
- Essential cookies: These cookies are necessary for the proper functioning of our website. They enable you to navigate the website and use its features, such as accessing secure areas of the website. Disabling these cookies may prevent the website from functioning properly.
- Analytical cookies: These cookies are used to collect information about how visitors use our website, such as which pages are visited most frequently and whether users encounter any errors. This data helps us analyze and improve the performance and usability of our website.
- Marketing cookies: These cookies are used to track your browsing activity across websites and to deliver personalized advertisements to you based on your interests. We may use third-party marketing cookies for this purpose.
5.3 Your Choices Regarding Cookies
You can control the use of cookies through your browser settings. Most browsers allow you to block or delete cookies, and you can set your browser to notify you when a cookie is being placed on your device. However, please note that disabling certain cookies may affect the functionality of our website.
Under the GDPR, we obtain your consent before placing non-essential cookies (such as marketing cookies) on your device. You can withdraw your consent at any time by adjusting your browser settings or by using the cookie consent mechanism provided on our website.
Under the CCPA, you have the right to opt out of the sale of your personal data, which may include data collected through cookies for marketing purposes. For more information on how to opt out, please see Section 7.
6. Data Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data during transmission and storage.
- Secure access controls to limit access to personal data to authorized personnel only.
- Regular security audits and updates to our systems and processes.
- Training of our employees on data protection and security practices.
However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your personal data.
7. Your Rights (Under GDPR and CCPA)
7.1 Rights Under GDPR
If you are a resident of the European Union, you have the following rights regarding your personal data:
- Right to access: You have the right to request access to the personal data we hold about you, including information about the purposes of processing, the categories of personal data processed, and the recipients to whom the data has been disclosed.
- Right to rectification: You have the right to request that we correct any inaccurate personal data we hold about you.
- Right to erasure: You have the right to request that we erase your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent (if processing was based on consent).
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
- Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible.
- Right to object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on our legitimate interests. We will cease processing the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
- Right to withdraw consent: If you have given your consent for the processing of your personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the contact details provided in Section 9. We will respond to your request within one month of receipt, and in certain cases, this period may be extended by a further two months if the request is complex or we receive a large number of requests.
7.2 Rights Under CCPA
If you are a resident of California, you have the following rights regarding your personal data:
- Right to know: You have the right to request information about the personal data we have collected about you in the past 12 months, including the categories of personal data, the sources from which the data was collected, the purposes for which the data is used, and the categories of third parties with whom the data has been shared.
- Right to delete: You have the right to request that we delete the personal data we have collected from you, subject to certain exceptions (e.g., if we need to retain the data to comply with a legal obligation).
- Right to opt out of sale: You have the right to opt out of the sale of your personal data. We do not sell your personal data to third parties for monetary consideration, but we may share your data with third-party marketing partners for advertising purposes, which may be considered a “sale” under the CCPA. To opt out of such sharing, please contact us using the contact details provided in Section 9.
- Right to non-discrimination: You have the right to be free from discrimination for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices or rates, or provide you with a different level or quality of goods or services because you have exercised your rights under the CCPA.
To exercise any of these rights, please contact us using the contact details provided in Section 9. We will verify your identity before responding to your request, which may involve requesting certain information from you to confirm that you are the person to whom the data relates. We will respond to your request within 45 days of receipt, and this period may be extended by an additional 45 days in certain circumstances, with notification to you.
8. Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. The retention period will vary depending on the type of data and the purposes for which it is used. For example:
- Medical data may be retained for the period required by applicable healthcare regulations, which may be several years after the last treatment or interaction.
- Data related to orders and transactions may be retained for the period required for tax and accounting purposes.
- Website usage data collected through cookies may be retained for a period specified in our cookie policy, which is typically a few months to a year.
When personal data is no longer needed, we will securely delete or anonymize it to ensure that it can no longer be associated with an individual.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:
[Insert contact information: e.g., email address, phone number, physical address]
You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR. The supervisory authority in your country of residence, work, or the place where the alleged violation occurred can be contacted for this purpose.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will revise the “Last Updated” date at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.
Last Updated: 2025-9-12
