Effective Date: January 1, 2026 | Last Updated: July 31, 2026
Version 1.0
The data controller responsible for your personal data is:
If you have any questions about how we handle your data, or if you wish to exercise any of your rights described in this policy, please contact us at the email above.
We collect personal data that you provide directly to us when you register, use our platform, or communicate with other users. The categories of data are described below.
When you create an account as a buyer or supplier, we collect:
If you register as a supplier, we additionally collect:
If you register as a buyer, we additionally collect:
If you are assigned as a platform Manager, we additionally collect:
Under the GDPR, we process your personal data only when we have a valid legal basis. The applicable bases are:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of a contract (Art. 6(1)(b)) |
| Facilitating RFQs, bids, and supplier-buyer matching | Performance of a contract (Art. 6(1)(b)) |
| Chat communication between users | Performance of a contract (Art. 6(1)(b)) |
| Sending platform notifications and alerts | Legitimate interest (Art. 6(1)(f)) |
| Supplier verification and qualification review | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and platform security | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Analytics and service improvement | Legitimate interest (Art. 6(1)(f)) — anonymized data only |
Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
If you are located in the People's Republic of China, the PIPL requires us to inform you of the following:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Necessary for contract performance |
| RFQ, bid, and matching services | Necessary for contract performance |
| Chat communication | Necessary for contract performance |
| Platform notifications | Necessary for service provision |
| Supplier verification | Necessary to ensure service quality |
| Security and fraud prevention | Necessary to protect platform security |
| Legal compliance | Required by law |
Under the PIPL, you have the right to withdraw consent at any time. We will process your personal information only within the scope and for the purposes you have consented to.
We use your personal data for the following specific purposes:
We take the security of your data seriously and implement the following measures:
We do NOT sell, rent, trade, or share your personal data with third parties for their marketing purposes. Period.
Your data may be shared only in the following limited circumstances:
International Data Transfers: When data is transferred outside the EU/EEA (e.g., to suppliers in China), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where applicable.
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:
| Right | Description |
|---|---|
| Right of Access (Art. 15) | Request a copy of all personal data we hold about you, including the purposes of processing, categories of data, and recipients. |
| Right to Rectification (Art. 16) | Request correction of inaccurate or incomplete personal data without undue delay. |
| Right to Erasure (Art. 17) | Request deletion of your personal data ("right to be forgotten") when the data is no longer necessary, consent is withdrawn, or processing is unlawful. |
| Right to Restrict Processing (Art. 18) | Request limitation of how we process your data in certain circumstances (e.g., during accuracy disputes). |
| Right to Data Portability (Art. 20) | Receive your personal data in a structured, commonly used, machine-readable format (JSON/CSV) and transmit it to another controller. |
| Right to Object (Art. 21) | Object to processing based on legitimate interests, including direct marketing. We will cease processing unless we demonstrate compelling legitimate grounds. |
| Right to Withdraw Consent (Art. 7(3)) | Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal. |
| Right Not to Be Subject to Automated Decision-Making (Art. 22) | You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. |
How to Exercise Your Rights:
If you are located in the People's Republic of China, you have the following rights under the Personal Information Protection Law (PIPL):
| Right | PIPL Article | Description |
|---|---|---|
| Right to Be Informed | Art. 17 | Right to know how your personal information is processed, including the purpose, method, and scope of processing. |
| Right to Decide | Art. 44 | Right to restrict or refuse the processing of your personal information. |
| Right to Access and Copy | Art. 45 | Right to access your personal information and obtain copies from the personal information handler. |
| Right to Correction | Art. 46 | Right to request correction of inaccurate or incomplete personal information. |
| Right to Deletion | Art. 47 | Right to request deletion of personal information when the purpose has been achieved, the service is terminated, or processing is unlawful. |
| Right to Data Portability | Art. 45 | Right to request transfer of your personal information to a personal information handler designated by you, where conditions are met. |
| Right to Withdraw Consent | Art. 15 | Right to withdraw consent at any time. The handler must provide a convenient way to withdraw consent. |
| Right to Refuse Automated Decision-Making | Art. 24 | Right to refuse decisions made solely by automated processing that have a significant impact on your rights. |
Cross-Border Data Transfer: When transferring personal information outside of China, PIPL requires that we:
How to Exercise Your Rights:
We use only essential cookies required for platform functionality:
We do NOT use advertising cookies, analytics tracking cookies, third-party tracking pixels, or any form of behavioral advertising. We do not sell cookie data to third parties.
You can manage or disable cookies through your browser settings. Note that disabling essential cookies may prevent you from using the platform.
LSM is a B2B platform intended for business professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features.
For any questions, concerns, or requests related to this Privacy Policy or your personal data:
| General Inquiries | info@lsm-platform.eu |
| Privacy & Data Protection | privacy@lsm-platform.eu |
| Legal & Compliance | legal@lsm-platform.eu |
| Data Protection Officer | dpo@lsm-platform.eu |
| Platform URL | / |