Privacy
How BMDA handles personal data collected through this website.
Last updated: 24 October 2026
Who we are
The Baltic Management Development Association (BMDA), Gedimino str. 50-130, LT-44239 Kaunas, Lithuania, is the controller of personal data collected through this website. For any privacy question write to info@bmda.net.
What we collect, why, and on what legal basis
- Membership applications: organisation, contact person, email, country, website, recommendation and your reasons to join. We use them to review the application. Legal basis: steps before entering into membership (GDPR Art. 6(1)(b)).
- Conference registrations: title, name, email, phone number, organisation, participation fee, your answers to the conference questions (for example which parts of the programme you attend), dietary needs and invoice details. We use them to organise the conference and invoice the fee. Legal basis: contract (Art. 6(1)(b)) and accounting obligations (Art. 6(1)(c)). Dietary needs are optional and used only for catering.
- Photos and video at the conference: if you tick this consent when you register, we may use photos and video in which you appear in articles, press releases and social media posts about the conference. Legal basis: your consent (Art. 6(1)(a)).
- Information about BMDA events: if you tick this consent when you register, we send information about this and other BMDA events to the email address you gave. Legal basis: your consent (Art. 6(1)(a)).
- Member accounts: the representative’s name, email and the institution’s profile, to run the member area. Legal basis: membership (Art. 6(1)(b)).
- Newsletter: your email address, to send association news. Legal basis: your consent (Art. 6(1)(a)).
- Contact form: name, email and message, to answer you. Legal basis: our legitimate interest in replying to enquiries (Art. 6(1)(f)).
- Photos and news: photos from past BMDA events and news about members may show people. Photos from conferences with registration through this website follow the consent above. Legal basis: our legitimate interest in reporting on the association’s activities (Art. 6(1)(f)). If you appear in a photo and want it removed, write to us.
You can withdraw any consent at any time by writing to info@bmda.net. This does not affect what we did with your consent before you withdrew it.
To protect the forms against spam, we record the IP address of each form submission for 24 hours. Legal basis: our legitimate interest in keeping the website secure (Art. 6(1)(f)).
We do not sell personal data, use it for advertising or make automated decisions about you.
How long we keep it
- Membership applications and conference registrations: 3 years, then deleted.
- Member accounts: while the institution is a member, then deleted or anonymised.
- Newsletter addresses and consent to information about events: until you withdraw your consent.
- Photos and video: as long as the article or post they appear in is published, or until you ask us to remove them.
- IP addresses of form submissions: 24 hours.
- Contact messages: up to 1 year after the conversation ends.
- Invoices: as long as accounting law requires.
Who processes it for us
We use two service providers under data processing agreements:
- Supabase stores the database and uploaded files on servers in Ireland (EU).
- Cloudflare hosts and delivers the website. To do so it processes technical data such as your IP address. Cloudflare is a US company certified under the EU–US Data Privacy Framework.
The website itself, including its fonts, is served from our own hosting, so no data goes to Google or other third parties when you open a page. Some news articles link to other websites; their own privacy rules apply there.
Archive of the old website
The previous BMDA website is kept as a read-only archive at old.bmda.net, so that older news, photos and documents stay available. We removed personal email addresses and phone numbers from it, and its directory of people is hidden from search engines. The archive uses no cookies, analytics or tracking. If you appear in the archive and want something removed, write to us.
Cookies and browser storage
This site uses no advertising, analytics or tracking cookies, so it does not ask for cookie consent. When a member logs in, the login session is kept in the browser’s local storage. This is strictly necessary for the member area and is removed when you log out.
Your rights
You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Write to info@bmda.net; we reply within one month.
You can also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).