CONTACT FORM NOTICE

With this notice, as envisaged by the legislation in force on protecting personal data (articles 13 and 14 of the General Data Protection Regulation, hereinafter also GDPR), users who wish to contact the Company through the specific form on the website are provided with information on the processing of their data.

WHO IS THE CONTROLLER AND HOW TO CONTACT THEM

The Processing Controller is Balkrishna Industries Limited, BKT HOUSE, C/15, Trade World, Kamala Mills Compound, Senapati Bapat Marg, Lower Parel, Mumbai – 400013, India. The Company can be contacted by email at asia@bkt-tires.com.

WHAT DATA IS PROCESSED

The data processed is identifying and contact data provided by the user through the form.

WHAT ARE THE PURPOSES AND LEGAL BASES OF THE PROCESSING?

The personal data provided by the user through the specific form is used only to respond to and manage the data subject's request.

The legal basis for the processing of such data is the execution of pre-contractual measures adopted at the request of the data subject and those related to the execution of the contractual relationship.

Should it be necessary, the data can also be used given the Controller's legitimate interest in undertaking defensive initiatives or enforcing or defending a right in the courts.

WHO CAN SEE THE DATA?

The data will be processed by employees of the Controller who are authorized to process it.

The external subjects who may see the data being processed are: suppliers of IT services which the Controller uses and legal consultants for managing disputes and legal assistance.

It is noted that some of the indicated subjects operate as processing supervisors and that communication to people who operate as autonomous controllers is undertaken because it is prescribed by legal obligations or is needed to fulfil the obligations arising from the contractual relationship or the Controller's legitimate interest which involves maintaining the security of IT systems with maintenance work and in undertaking defensive action through legal consultants.

The data subject may ask the Controller for the list of external subjects who carry out their work as data processors.

Communication is in any case limited to the sole categories of data the transmission of which is necessary to undertake the activities and purposes being pursued.

HOW IS THE DATA MANAGED?

The collected data is processed with IT instruments and on paper, in compliance with the security obligations prescribed by the law in force to prevent the loss of data, illegal or incorrect use and unauthorized access.

Conservation times

The data conferred directly by the data subject is kept for the time strictly necessary to deal with requests.

This is done without prejudice to any defensive needs for which the data can be kept also beyond the indicated deadlines.

Transferring data abroad

The data will be transferred outside the European Union and the European Economic Space by the supplier of the hosting service and by those used by the Controller to store the data and for email. The data will be transferred to non-EU countries, in the absence of adequacy decisions by the European Commission, but the transfer will be assisted by adequate safeguards; In particular, standard contractual clauses will be used with additional contractual measures.

WHAT HAPPENS IF THE DATA IS NOT PROVIDED?

The transfer of the data is optional, but, if not done, it will be impossible for the Controller to deal with the requests made by the data subject.

WHAT ARE THE DATA SUBJECT'S RIGHTS?

The law recognizes for the data subject the right to ask the Processing Controller for access to the personal data and its rectification or cancellation or limitation of the processing regarding them or to object to its processing, as well as the right to data portability.

The data subject may assert their rights at any time, without formalities, by contacting the Controller through the email privacy@bkt-tires.com

Here below is a breakdown of the rights recognized by the law in force on the protection of personal data.

• The right of access, i.e. the right to obtain from the Data Controller confirmation that processing of personal data regarding the data subject is or is not happening and, if so, to obtain access to the personal data and to the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or the categories of recipients to whom the personal data has been or will be communicated, in particular if recipients in other countries or international organizations; d) when possible, the retention period of the personal data envisaged or, if not possible, the criteria used to determine this period; e) the existence of the data subject's right to ask the Processing controller to rectify or cancel personal data or to limit the processing of the personal data regarding them or to oppose its processing; f) the right to lodge a complaint to a supervisory authority; g) should the data not be collected from the data subject, all the information available on its origin; h) the existence of an automatic decision-making process, including profiling and, at least in these cases, significant information on the approach used, as well as the importance and consequences envisaged of this processing for the data subject. Should the personal data be transferred to another country or international organization, the data subject then has the right to be informed of the existence of adequate guarantees relating to its transfer.
• The right to rectification, i.e. the right to obtain from the Data Controller the rectification of imprecise personal data regarding them without unjustified delay. Taking account of the purposes of processing, the data subject has the right to integrate incomplete personal data, also by providing an additional statement.
• The right of cancellation, i.e. the right to obtain from the processing controller the cancellation of inexact personal data regarding them without unjustified delay if: a) the personal data is no longer necessary in regard to the purposes for which it was collected or otherwise processed; b) the data subject withdraws their agreement on which the processing is based and if there is no other legal basis for the processing; c) the data subject opposes the processing undertaken because necessary to carry out a public service or connected to the exercise of public powers with which the Controller is invested or to pursue a legitimate interest and there is no prevailing legitimate reason to proceed with the processing, or opposes the processing for direct marketing purposes; d) the personal data was illegally processed; e) the personal data must be cancelled to fulfil a legal obligation envisaged by the law of the European Union or of the Member state to which the Processing controller is subject; f) the personal data was collected in relation to the company's offer of services for information to minors. The request for cancellation cannot, however, be accepted if the processing is necessary: a) to exercise the right to freedom of expression and information; b) to fulfil a legal obligation which requires processing as envisaged by the law of the European Union or of the Member state to which the Data Controller is subject or to execute a task undertaken in the public interest or in the exercise of public powers with which the Data Controller is invested; c) for reasons of public interest in the public health sector; d) for the purposes of archiving in the public interest, scientific or historic research or statistical purposes, to the extent to which cancellation risks making impossible or seriously compromising achieving the goals of such processing; or e) for verifying, exercising or defending a right in the courts.
• The right of limitation, i.e. the right to obtain that data is processed, except for its conservation, only with the agreement of the data subject or to verify, exercise or defend a right before the courts or to protect the rights of another natural person or corporation or for reasons of relevant public interest of the European Union or of a member State if: a) the data subject challenges the preciseness of the personal data, for the period necessary for the Data Controller to verify the exactness of this personal data; b) the processing is illegal and the data subject opposes the cancellation of the personal data and instead asks that its use is limited; c) although the Data Controller no longer needs it for processing purposes, the personal data is necessary for verifying, exercising or defending a right in the courts; d) the data subject has opposed the processing undertaken because necessary to carry out a public service or connected to the exercise of public powers with which the Controller is invested or to pursue a legitimate interest of the Data Controller or of third parties, pending verification of the possible prevalence of the legitimate reasons of the Data Controller over those of the data subject. 

• The right to portability, i.e. the right to receive in a structured, shared and legible format from an automatic device the personal data regarding them as provided to the controller and has the right to send this data to another controller with hindrance by the controller to whom they provided the data, as well as the right to obtain the direct transmission of the personal data from one controller to another, if technically feasible, should the processing be based on the agreement or on a contract and the processing is carried out with automated means. This right leaves the right to cancellation unaffected.
• the right to objection, i.e. the right of the data subject to object at any time, for reasons connected to their particular situation, to the processing of personal data regarding them carried out because necessary to execute a task of public interest or to pursue the legitimate interest of the processing controller or of third parties. Should the personal data be processed for direct marketing purposes, the data subject has the right to oppose at any time the processing of the personal data regarding them undertaken for these purposes, including profiling to the extent this is connected to such direct marketing.

The data subject is then informed that, should they believe that the processing of their personal data is taking place in violation of the provisions of the GDPR, they have the right to make a complaint to the Supervisory Authority, as envisaged by art. 77 of the Regulation itself or to seek legal redress (art. 79 of the Regulation).