To improve your user experience, we use cookies. Learn more
Okay
Product finder

Search by vehicle:

Enter BBT part number:

Search for OEM or competitor part number:

Privacy policy

We process your data in compliance with the applicable legal specifications regarding the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws that apply for us. The purpose of this Data Protection Statement is to provide you with comprehensive information about the processing of your personal data by BBT Automotive Components GmbH and the rights to which you are entitled. Personal data is information that make it possible to identify a natural person. In particular this includes your name, date of birth, address, phone number and email address, as well as your IP address.

 

1. The controller of the processing of personal data (Art. 4 (7) GDPR)

 

BBT Automotive Components GmbH (AG Ansbach, HRB 2599)

Gewerbering 12, 91629 Weihenzell

Tel.: +49 (0) 9802 – 95211 26

Fax: +49 (0) 9802 – 95211 95

E-Mail: info@bbt-automotive.de

Homepage: http://www.bbt-automotive.com/

 

2. Terminology

 

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

‘Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

 

‘Profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

 

‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

 

‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

 

 

3. Purposes and legal bases of data processing

 

When processing your personal data, the provisions of GDPR and all other applicable data protection law are complied with. The legal basis for data processing arises in particular from Art. 6. GDPR.
We use your data for initiating business; fulfilling contractual and legal obligations; implementing the contractual relationship; offering products and services; and strengthening the customer relationship, which may also include analysis for the purpose of marketing and direct advertising. 
Your consent also represents a permission instruction under data protection law. We hereby inform you of the purposes of data processing and your right to object. If consent also relates to processing special categories of personal data, we will make explicit reference to this in the consent.
Special categories of personal data, as defined by Art. 9 Para 1 GDPR, may only be processed when necessary due to legal specifications and when there is no grounds to suspect that your legitimate interest in the exclusion of processing takes precedence.

 

4. Categories, sources, and the origin of data (Art. 6 Para. 1 GDPR)

 

Which data we process is determined by the relative context: It depends, for example, on whether you place an order online or enter an enquiry into our contact form, or are submitting a complaint.
Please note that we may also make information for particular processing situations separately available to an appropriate body, for example when a contact enquiry is sent.

 

We collect and process the following data when you visit our website:

1. The name of your internet service provider
2. Information about the website from which you reach our site

3. The web browser and operating system you are using

4. The IP address allocated by your internet service provider 

5. The files requested, data volume transferred, and downloads/file export

6. Information about the webpages that you access on our site, including the date and time

 

We collect and process the following data when you submit a contact enquiry:

1. Surname and first name 

2. Address

3. Email address

4. Title 

5. Information on your requests and interests

 

5. Cookies (Art. 6 Para. 1 lit. f GDPR / Art. 6 Para. 1 lit a GDPR in the event of consent)

 

Our websites use cookies in various places. They are used to make our site more user-friendly, effective, and secure. Cookies are small text files which are stored on your computer and saved by your browser (locally and on your hard drive).


These cookies enables us to analyse how users use our websites. This means that we can design the content of the website to meet the needs of its visitors. Cookies also enable us to measure how effective a particular advertisement is, and for example to place it depending on thematic user interests.
Most of the cookies we use are session cookies which are automatically deleted after your visit. Permanent cookies are automatically deleted from your computer when their term of validity (generally six months) is reached, or if you delete them yourself before the term of validity expires.
Most web browsers accept cookies automatically. However, you can generally also change your browser settings if you would prefer not to send information. You can still continue to use our website without restrictions in this case (with the exception of configurators).


We use cookies to make our site more user-friendly, effective, and secure. In addition, we use cookies that enable us to analyse how users utilise our websites. This means that we can design the content to meet the needs of visitors. Cookies also enable us to measure how effective a particular advertisement is, and for example to place it depending on thematic user interests.


Cookies are stored on the user’s computer and transferred from it to our site. You as a user therefore also have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your web browser. Cookies that have already been set can also be deleted at any time using a web browser or other software programs. This is possible in all standard web browsers.
Please note: If you deactivate the saving of cookies, you may no longer be able to use all of our website’s functions to the full extent.

 

6. Contact form/making contact by email (Art. 6 Para. 1 lit. a, b GDPR)

 

Our website contains a contact form that can be used to make contact electronically. If you write to us using the contact form, we process the personal data you provide in the contact form in order to make contact and respond to your questions and requests.


The principle of data economy and data reduction is taken into account here, in that you only need to provide the data that we need in order to make contact with you. This comprises your email address, title, first name, surname, subject, and the message field itself. In addition, your IP address is processed for reasons of technical necessity and legal safeguarding. All other data fields are voluntary, and you have the option of filling them out (for example for a better-tailored response to your questions).
If you contact us by email, we will process the personal data you provide in the email purely for the purpose of processing your enquiry.

 

7. Disclosure to third parties

 

We will only disclose your data to third parties in the framework of legal provisions or in the event of corresponding consent. Otherwise we will not disclose your data to third parties unless we are required to do so due to compulsory legal stipulations (disclosure to external bodies such as supervisory authorities or law enforcement authorities).

 

8. Data recipients / categories of recipients

 

Within our company, we ensure that only individuals who require your data to fulfil contractual and legal obligations receive access to that data.


9. Transfer to third countries/intention to transfer to third countries

 

Data is transferred to third countries (outside the European Union and/or the European Economic Area) only in as far as this is necessary for carrying out the contractual relationship; required by law; or you have provided us with your consent for us to do so.

 

10. Period of data storage

 

We store your data for as long as is needed for the respective purpose of processing. Please note that many retention periods exist requiring that data continues to be stored. This particularly relates to retention obligations under commercial or fiscal law (such as the Commercial Code (Handelsgesetzbuch, HGB), General Fiscal Law (Abgabenordnung, AbgO), etc.). Unless there are further-reaching retention obligations, the data will be routinely erased once the relevant purpose has been fulfilled.
In addition, we may retain data if you have provided your authorisation for us to do so, or if legal disputes arise within the statutory limitation period and we use pieces of evidence that become subject to legal limitation periods, which may be up to thirty years; the regular limitation period is three years.

 

11. Secure transfer of your data

 

We implement appropriate technical and organisational measures for the best possible protection of the data we store against accidental or deliberate manipulation, loss, destruction, or access by unauthorised individuals. Security levels are reviewed on an ongoing basis in collaboration with security experts, and adapted to new security standards.

 


12. Obligation to provide data

 

Various personal data is required for the establishment, implementation, and termination of the contractual relationship, and the fulfilment of the associated contractual and legal obligations. The same applies for the use of our website and the various functions it offers. In certain cases, data also needs to be collected or made available as a result of legal provisions. Please note that it is not possible to process your enquiry or execute an underlying contractual relationship without the provision of this data.

 

13. Your rights as a data subject

 

Your rights as a data subject are standardised in Articles 15-22 of the European Union General Data Protection Regulation (GDPR). This includes:


(1) The right to access (Art. 15 GDPR)

 

You have the right to obtain confirmation from the controller as to whether or not your personal data are being processed, and, where that is the case, access to the personal data and the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

 

(2) The right to rectification (Art. 16 GDPR)

 

You have the right to obtain from the controller the rectification of inaccurate or incomplete personal data without undue delay.

 

(3) The right to erasure (Art. 17 GDPR)

 

You have the right to obtain from the controller the erasure of your personal data without undue delay and the controller has obligation to erase personal data without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • you withdraw consent on which the processing is based according to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR, and where there is no other legal ground for the processing;
  • you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) GDPR;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where the controller has made the personal data public and is obliged to erase the personal data, we, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data. This shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) GDPR as well as Article 9 (3) GDPR; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) GDPR in so far as the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing; or for the establishment, exercise or defence of legal claims.

 

(4) The right to restriction of processing (Art. 18 GDPR)

 

You have the right to obtain from the controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
  • you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

 

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained restriction of processing you be informed by the controller before the restriction of processing is lifted.

 

(5) The right to notification (Art. 19 GDPR)

 

The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16Article 17(1) and Article 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform you about those recipients if requested.

 

(6) The right to data portability (Art. 20 GDPR)

 

You have the right to receive your personal data, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

  • the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and
  • the processing is carried out by automated means.

 

In exercising of your right to data portability you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Your right to data portability shall not adversely affect the rights and freedoms of others.

 

(7) The right to object to processing (Art. 21 GDPR)

 

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

 

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

 

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

 

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), you, on grounds relating to your situation, have the right to object to processing of your personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

 

(8) GDPR Automated individual decision-making, including profiling (Art. 22 GDPR)

 

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. This shall not apply if the decision:

  • is necessary for entering into, or performance of, a contract between you and a data controller;
  • is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  • is based on your explicit consent.

In the cases referred to above, the data controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

 

(9) The Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

 

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

 

(10) The Right to withdraw your consent (Art. 7 GDPR)

 

You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. 

 

 

14. User profiles/web tracking procedures/Hosting

 

Solutions and technologies are used to record and save anonymised data and to create usage profiles based on this data using pseudonyms, in order to support needs-appropriate design and optimization of this website e.g. IP addresses or usage profiles.

 

15. Use of web analytics

This website uses the open source web analytics service Advanced Web Statistics (AWStats). The IP address is anonymized before it is stored.

Advanced Web Statistics (AWStats) cookies remain on your device until you delete them.

The storage of Advanced Web Statistics (AWStats) cookies is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

The information generated by the cookies about your use of this website will not be disclosed to third parties. You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website.

If you do not agree with the storage and use of your data, you can disable this feature here. In this case, an opt-out cookie will be stored in your browser to prevent Advanced Web Statistics (AWStats) from storing your usage data. If you delete your cookies, this will mean that the opt-out cookie will also be deleted. You will then need to reactivate it when you return to our site if you wish your activity not to be tracked.

For more information about Advanced Web Statistics (AWStats), visit: http://www.awstats.org/.

 

 

 

Sitemap
X

Home

News

Company

Products

Service

Contact