Privacy

Last updated: 4 October 2026

Who we are

The Baltic Management Development Association (BMDA), Gedimino str. 50-130, LT-44239 Kaunas, Lithuania, is the controller of personal data collected through this website. For any privacy question write to info@bmda.net.

What we collect, why, and on what legal basis

• Membership applications: organisation, contact person, email, country, website, recommendation and your reasons to join. We use them to review the application. Legal basis: steps before entering into membership (GDPR Art. 6(1)(b)).
• Conference registrations: name, email, organisation, participation category, dietary needs, accompanying person and invoice details. We use them to organise the conference and invoice the fee. Legal basis: contract (Art. 6(1)(b)) and accounting obligations (Art. 6(1)(c)). Dietary needs are used only for catering.
• Member accounts: the representative’s name, email and the institution’s profile, to run the member area. Legal basis: membership (Art. 6(1)(b)).
• Newsletter: your email address, to send association news. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time by writing to us or using the unsubscribe link.
• Contact form: name, email and message, to answer you. Legal basis: our legitimate interest in replying to enquiries (Art. 6(1)(f)).
• Photos and news: photos from BMDA events and news about members may show people. Legal basis: our legitimate interest in reporting on the association’s activities (Art. 6(1)(f)). If you appear in a photo and want it removed, write to us.

We do not sell personal data, use it for advertising or make automated decisions about you.

How long we keep it

• Membership applications and conference registrations: 3 years, then deleted.
• Member accounts: while the institution is a member, then deleted or anonymised.
• Newsletter addresses: until you unsubscribe.
• Contact messages: up to 1 year after the conversation ends.
• Invoices: as long as accounting law requires.

Who processes it for us

We use two service providers under data processing agreements:

• Supabase stores the database and uploaded files on servers in Ireland (EU).
• Cloudflare hosts and delivers the website. To do so it processes technical data such as your IP address. Cloudflare is a US company certified under the EU–US Data Privacy Framework.

The website itself, including its fonts, is served from our own hosting, so no data goes to Google or other third parties when you open a page. Some news articles link to other websites; their own privacy rules apply there.

Cookies and browser storage

This site uses no advertising, analytics or tracking cookies, so it does not ask for cookie consent. When a member logs in, the login session is kept in the browser’s local storage. This is strictly necessary for the member area and is removed when you log out.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Write to info@bmda.net; we reply within one month.

You can also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).