Privacy Policy

BHowCo Trading GmbH · Last updated: 09.08.2026

1. Overview

We are pleased that you are interested in our company. Data protection is a high priority for BHowCo
Trading GmbH (“BHOWCO,” “we,” “us”). Using our website is possible without providing personal data;
however, if you wish to use specific services offered on this website, processing of your personal
data may become necessary. Where processing is necessary and no statutory basis exists, we obtain your consent.

The processing of personal data — such as your name, address, email address, or phone number — is always carried out in accordance with the General Data Protection Regulation (GDPR) and the
country-specific data protection provisions applicable to BHOWCO. This Privacy Policy informs you of
the nature, scope, and purpose of the personal data we collect, use, and process, and of the rights to
which you are entitled.

As the controller, BHOWCO has implemented technical and organizational measures to protect personal data processed through this website. Internet-based data transmissions may nonetheless have security gaps; absolute protection cannot be guaranteed. You are free to transfer personal data to us via alternative means, e.g., by telephone.

2. Definitions

This Privacy Policy uses terms as defined by the GDPR, including:

  • Personal data — any information relating to an identified or identifiable natural person
  • Processing — any operation performed on personal data, whether automated or not
  • Controller — the entity that determines the purposes and means of processing personal data
  • Processor — an entity that processes personal data on behalf of the controller
  • Consent — a freely given, specific, informed, and unambiguous indication of agreement to processing

3. Controller

The controller responsible for data processing on this website is:

BHowCo Trading GmbH
Hahnstr. 38, 60528 Frankfurt am Main, Germany
Phone: +49 69 4080 2990-92
Email: bhowco-legal@bhowco.de

4. Your Rights as a Data Subject

Under the GDPR, you have the right to:

  • Confirmation — ask whether personal data concerning you is being processed
  • Access — obtain a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure (“right to be forgotten”) — request deletion of your data under certain conditions
  • Restriction of processing — request that we limit how your data is used, in certain cases
  • Data portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on our legitimate interest, at any time, including for direct marketing
  • Withdraw consent — revoke any consent previously given, with effect for the future
  • Lodge a complaint with a data protection supervisory authority

To exercise any of these rights, contact us at bhowco-legal@bhowco.de.

5. Legal Basis for Processing

Where you have given consent, processing is based on Art. 6(1)(a) GDPR. Where processing is necessary for the performance of a contract with you (or pre-contractual measures), it is based on Art. 6(1)(b) GDPR. Where required by a legal obligation, processing is based on Art. 6(1)(c) GDPR. Where processing serves our legitimate interest and does not override your rights and freedoms, it is based on Art. 6(1)(f) GDPR.

6. Hosting

This website is hosted on a dedicated server operated by [NEEDS CLIENT INPUT: hosting provider name and address]. Server log data is processed on the basis of our legitimate interest in the secure and reliable operation of our website, Art. 6(1)(f) GDPR.

7. Cookies

Our website uses cookies — small text files stored on your device via your browser. Some cookies are technically necessary for core website functions; others help us understand how visitors use our site.
You can control or delete cookies at any time through your browser settings. Disabling cookies may
limit some website functionality.

8. Server Log Files

Our server automatically collects information your browser transmits to us, including browser type
and version, operating system, referrer URL, hostname, time of the server request, and IP address. This data is not merged with other data sources and is processed under Art. 6(1)(f) GDPR — our legitimate interest in the technically error-free operation of our website.

9. Account Registration

You may register an account on this website to access member services. Data entered during registration is used only for the purposes of that registration and is stored until you request deletion or your account is closed, subject to statutory retention obligations. Registration is based on your consent, Art. 6(1)(a) GDPR, or on the performance of our contract with you, Art. 6(1)(b) GDPR.

10. Contact Forms and Support Tickets

If you contact us via a contact form, support ticket, or email, the information you provide is stored
to process your inquiry and for any follow-up. We do not share this data without your consent. Processing is based on Art. 6(1)(b) GDPR where related to a contract, or Art. 6(1)(f) GDPR (our legitimate interest in handling inquiries efficiently) otherwise.

11. Newsletter

If you subscribe to our newsletter via MC4WP (Mailchimp for WordPress), we require a valid email address and use a double opt-in confirmation process. We record the IP address and timestamp of registration to demonstrate consent and prevent misuse. Processing is based on your consent, Art. 6(1)(a) GDPR, and is not shared with third parties beyond what is necessary for the newsletter service itself. You may unsubscribe at any time via the link in any newsletter email.

12. Google Analytics

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. IP anonymization is enabled, shortening your IP address within the EU/EEA before further
processing. This occurs on the basis of your consent, Art. 6(1)(a) GDPR and § 25(1) TTDSG, revocable at any time via our cookie consent tool. See
policies.google.com/privacy.

13. Website Performance & Caching

We use performance optimization tools, including WP Rocket and WP Asset CleanUp, to improve page load speed. These tools operate on our own server infrastructure and do not transmit personal data to external servers.

14. Security

We use a server-side security tool that may process visitor IP addresses for threat detection and
protection against malicious activity, on the basis of our legitimate interest in platform security,
Art. 6(1)(f) GDPR.

15. AI-Assisted Content Tools

We use AI language processing tools, including OpenAI’s API, to assist in drafting and organizing
exhibitor profile content and editorial material. This process is not fully automated: all AI-assisted
content is reviewed, fact-checked, and edited by our editorial team before publication. No content is
published without human review.

Legal basis: our legitimate interest in producing accurate, well-structured content efficiently,
Art. 6(1)(f) GDPR. We have a data processing agreement with our AI provider under Art. 28(3) GDPR. See
openai.com/policies/privacy-policy.

16. Payment Processing

Credit/Debit Card Payments (Stripe)

Processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Data may be transferred to Stripe Inc. in the United States under the Standard Contractual Clauses of the European Commission. We have a data processing agreement with Stripe under Art. 28(3) GDPR. See stripe.com/privacy.
Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR.

Cryptocurrency Payments (USDT)

Made as a direct wallet-to-wallet blockchain transfer, without a third-party payment processor. We store only the transaction hash and amount needed to confirm payment. Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR.

Direct Bank Transfer

Processed only by your bank and ours via standard SEPA/international transfer. We do not receive or
store your banking credentials — only the transaction reference and amount needed to confirm payment.

17. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected, or as
required by applicable statutory retention periods (e.g., German commercial and tax law).

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal
requirements. The current version is always available on this page.

For company registration details, see our Imprint.
This page requires final legal review before publication and does not itself constitute legal advice.