As provided by current law (Art. 13 General Data Protection Regulation, hereafter GDPR), users who visit the website sponsorship.bkt-tires.com (hereafter the “website”) are provided with information regarding how their data are processed.
THE DATA CONTROLLER AND HOW TO CONTACT IT
The Data Controller (hereafter also the “Controller”) is Balkrishna Industries Limited, BKT HOUSE, C/15, Trade World, Kamala Mills Compound, Senapati Bapat Marg, Lower Parel, Mumbai – 400013, India. The Company may be contacted through the email address privacy@bkt-tires.com
WHAT DATA ARE PROCESSED?
The data processed are browsing data and data that the user voluntarily provides.
Data provided directly by the user
This includes all personal data the user elects to provide (for example, when information is requested at the numbers or the email addresses on the website).
If the user decides to contact the Controller through the addresses on the website, they may obtain details regarding how the requested data are processed by going to the specific disclosures on the pages of interest.
Browsing data and information obtained through cookies and similar tools
During the course of their normal operations, the IT systems and software procedures used for the functioning of this website obtain certain personal data that are typically transmitted when using internet communication protocols.
This is information that is not collected to be associated with identified data subjects, but which by nature could make it possible to identify users through elaboration and association with data held by third parties.
This category of data includes IP addresses or the domain names of the computers utilized by people who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the operating system and the user’s IT environment.
The site uses cookies and other similar systems (pixels) to obtain information regarding the user’s browsing habits. The specifics appear in the cookie disclosure, which can be consulted at any time at the website footer.
WHAT ARE THE PURPOSES AND LEGAL BASES OF THE PROCESSING?
Data directly provided by the user: purposes and legal bases
The personal data that the user elects to provide by contacting the controller at the addresses on the site are used to respond to requests submitted.
The legal basis for processing these data is to complete pre-contractual steps.
If necessary, the data can also be used based on the controller’s legitimate interest in verifying the security and proper functioning of the IT systems used and to present a legal defense or assert or defend legal claims.
Browsing data and information obtained through cookies and similar tools: purposes and legal bases
Browsing data are obtained, including through cookies and similar tools, to permit proper browsing, obtain statistical information on website use, for security purposes and to control its proper functioning, and could be used to determine liability in the event of cybercrimes against the website.
The legal basis for processing these data is legitimate interest and, in the case of requests from the Authorities, legal obligations.
For specifics regarding the cookies the site uses, refer to the cookie disclosure, which can be consulted at the website footer.
HOW ARE THE DATA MANAGED?
The data collected are processed using IT tools that guarantee adequate security measures to prevent data loss, unlawful or improper use, and unauthorized access.
Transfer of data abroad
Hosting and the services used to process data obtained through the website do not result in a transfer of data to non-EU countries. With regard to the services used for analysis purposes through cookies, refer to the information in the cookie disclosure.
Storage times
Browsing data are stored for the time required for the relevant purposes.
Data provided directly by the user are stored only as long as necessary to handle requests and then are deleted, except when needed for defense purposes (which could make it necessary to store them for a longer period).
With regard to data obtained through Google Analytics and other services that use cookies and similar tools, refer to the information in the cookie disclosure.
WHAT HAPPENS IF THE DATA ARE NOT PROVIDED?
Except for the browsing data required to execute IT and online protocols, it is completely optional for users to provide data through the various available methods. Nevertheless, failure to provide said data will make it impossible to respond to requests and use the desired services.
WHO CAN SEE THE DATA?
The Controller will process the data through authorized personnel.
The data will also be processed by the Group company BKT Europe Srl, in its capacity as data processor, for its activities on behalf of the Controller related to site management.
The data will be seen by the companies the controller uses to provide hosting services and manage email connected to the website, by the companies who provide assistance and maintenance for the IT systems used, by consultants to manage disputes, and for legal assistance in the event of litigation that requires the involvement of attorneys. The competent Authorities may also see the data in case of specific requests to which the controller must by law respond.
Additional outside parties involved in processing data obtained through cookies and similar tools are reported in the specific detailed disclosures.
Note that some of the parties indicated operate as data processors and that data are communicated to parties who operate as independent controllers because this is required by law, is necessary to meet contractual obligations, or is in the controller’s legitimate interest, which consists of protecting the security of IT systems and presenting a legal defense through attorneys.
Communication is nevertheless limited to only the categories of data that must be transmitted in order to perform the activities and meet the applicable needs.
The data subject may ask the Controller for the list of outside parties who act as data processors.
WHAT ARE THE DATA SUBJECT’S RIGHTS?
The law gives the data subject the right to ask the data controller for access to their personal data and to rectify or delete them, restrict their processing, or object to their processing, as well as the right to data portability.
The data subject may assert their rights at any time, with no formalities, by contacting the controller at the email address privacy@bkt-tires.com. The Controller will respond within 30 days after receiving the request, as provided by the law in force.
Following are details on the rights recognized by current law on the protection of personal data.
- right of access, that is, the right to obtain confirmation from the data controller as to whether or not their personal data are being processed, and if so, access to the personal data and the following information: a) the purpose of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for the personal data will be stored, or if not possible, the criteria used to determine that period; e) the existence of the data subject’s right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. If the personal data are transferred to a third country or to an international organization, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
- The right to rectification, that is, the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- The right to erasure, that is, the right to obtain from the controller the erasure of personal data concerning them without undue delay if: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing; c) the data subject objects to the processing because it is necessary to perform a task in the public interest or is connected to the exercise of public powers vested in the controller or to pursue a legitimate interest and there are no overriding legitimate grounds for the processing, or the data subject objects to processing for direct marketing purposes; d) the personal data were processed unlawfully; e) the personal data must be erased to comply with a legal obligation under European Union or Member State law to which the controller is subject; f) the personal data were collected in relation to the offer of information society services to minors. The request for erasure cannot be granted, however, if processing is necessary: a) to exercise the right of freedom of expression and information; b) to comply with a legal obligation that requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; c) for reasons of public interest in the area of public health; d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or e) to establish, exercise or defend legal claims.
- The right to restriction, that is, the right to ensure that the data are processed, except for storage, only with the data subject’s consent or for the establishment, exercise or defense of a legal claims, or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State if: a) the data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests that restriction of their use instead; c) the data controller no longer needs the personal data for processing purposes, but they are required by the data subject for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing carried out because it was necessary to perform a task in the public interest or was connected to the exercise of public powers vested in the controller or to pursue a legitimate interest of the controller or other parties, while awaiting verification of the possible overriding legitimate grounds of the data controller over those of the data subject.
- The right to portability, that is the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, and the right to have the personal data transmitted directly from one controller to another, where technically feasible, if the processing is based on consent or on a contract and the processing is performed using automated means. This right does not affect the right to erasure.
- The right to object, that is the right of the data subject to object at any time, on grounds relating to their particular situation, at any time to processing of personal data concerning them because it is necessary to perform a task in the public interest or connected to the exercise of the public powers vested in the controller or to pursue the legitimate interest of the data controller or other parties. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing.
The data subject is also informed that, if they believe their personal data have been processed in violation of the provisions of the GDPR, they have the right to lodge a complaint with the Authority, as provided by Art. 77 of the Regulation or to petition the appropriate courts (Art. 79 of the Regulation).
ADDITIONAL INFORMATION
With regard to cookies and similar instruments used by the website, refer to the cookie disclosure, which is available at any time through the link on the website.
COOKIE DISCLOSURE
Browsing on the website sponsorship.bkt-tires.com (hereafter also the “website”) involves sending cookies and similar instruments to the user’s terminal.
Therefore, as provided by current law (Art. 13 General Data Protection Regulation, hereafter also GDPR, and Art. 122 Privacy Code), users who browse the website are provided information on the cookies used or for which consent is given to install them.
WHAT ARE COOKIES?
A “cookie” is a small text file created on the user’s computer at the time they access a particular site, for the purpose of storing and transporting information. A web server (the computer that executes the website visited) sends the cookies to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) , and they are stored on the user’s computer; they are then re-sent to the website when the user makes subsequent visits.
While browsing, the user could receive cookies on their terminal from different sites (called “third party” cookies), set up directly by the operators of said websites and used for the purposes and in the manners they determine.
WHAT COOKIES ARE USED?
The Site uses technical cookies, which, under Art. 122 of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, require no consent from the data subject.
More precisely, the site uses:
- analytical cookies that make it possible to obtain aggregated browsing data. Following are specifics on the service used for this purpose.
For statistical purposes the Site uses the Google Analytics service.
This is a web analysis service provided by Google LLC (“Google”), an American company that offers adequate safeguards for the transfer of data abroad through standard contractual clauses.
Google uses cookies that are stored on the user’s computer to permit statistical analyses regarding use of the website visited; in addition to cookies, Google also uses a pixel tag (www.google.it/intl/it/policies/privacy/key-terms/).
The Data generated by Google Analytics are stored by Google, who acts as the data processor for this service, as indicated in Google’s document at the following link: developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
Storage time has been set at 26 months.
As expressly indicated by the Privacy Authority through “Clarifications on Implementation of the Law on Cookies” of June 5, 2015, sites that, for purely statistical purposes, use analytical cookies created and made available by third parties are not subject to the obligations and requirements the law provides when tools are adopted to reduce the identifying power of the analytical cookies they utilize (for example, by masking significant portions of the IP address), provided the use of these cookies is subject to contractual obligations between websites and third parties that make express reference to the third party’s commitment to use them exclusively to provide the service, store them separately and not “enrich them,” or the commitment not to “cross-check them” with other information in their possession.
The Owner of this site has decided to use the user IP anonymization function provided by Google (described at the following link: https://support.google.com/analytics/answer/2763052?hl=it) and has accepted the Amendment on data elaboration, through which Google undertakes to process data based on the requests of the Customer – Owner of the site and not to share them with other additional services unless the Customer himself so requests through the services settings. In this regard, the user is informed that the Owner of this site has not connected Google Analytics to any additional service and that no option was elected to publish or share data with Google.
Considering the expedients adopted, the Google Analytics service, which this site uses for purely statistical purposes, is activated at landing, as no consent from the user is required to create the relative cookies.
The following link https://tools.google.com/dlpage/gaoptout?hl=it contains the additional browser component to deactivate Google Analytics.
WHAT HAPPENS WHEN COOKIES ARE NOT INSTALLED?
Except for the technical cookies required for browsing, if the user blocks the installation of additional cookies, they can still browse the site.
HOW DO I DISABLE COOKIES?
The user may eliminate cookies other than the technical cookies strictly necessary for browsing through the methods indicated in this document for certain specific cookies or directly through their own browser.
Each browser has different procedures for managing settings. The user may obtain specific instructions at the following links.
For users who browse from mobile phones, system configurations to prevent the storage of cookies or to delete them vary depending on the brand and/or model of the device used. Therefore, it is necessary to consult the manufacturer’s instructions.
For information on cookies stored on your terminal and to deactivate them individually, go to the link: http://www.youronlinechoices.com/it/le-tue-scelte.
WHO IS THE DATA CONTROLLER AND HOW CAN I CONTACT IT?
The data controller (hereafter also the “Controller”) is Balkrishna Industries Limited, BKT HOUSE, C/15, Trade World, Kamala Mills Compound, Senapati Bapat Marg, Lower Parel, Mumbai – 400013, India. The Company may be contacted at the email address privacy@bkt-tires.com
WHAT ARE THE DATA SUBJECT’S RIGHTS?
The law gives the data subject the right to ask the data controller for access to their personal data and to rectify or delete them, restrict their processing, or object to their processing, as well as the right to data portability.
The data subject may assert their rights at any time, with no formalities, by contacting the controller at the email address privacy@bkt-tires.com. The Controller will respond within 30 days after receiving the request, as provided by the law in force.
Following are details on the rights recognized by current law on the protection of personal data.
- The right of access, that is, the right to obtain confirmation from the data controller as to whether or not their personal data are being processed, and if so, access to the personal data and the following information: a) the purpose of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) where possible, the envisaged period for the personal data will be stored, or if not possible, the criteria used to determine that period; e) the existence of the data subject’s right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject. If the personal data are transferred to a third country or to an international organization, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
- The right to rectification, that is, the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- The right to erasure, that is, the right to obtain from the controller the erasure of personal data concerning them without undue delay if: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing; c) the data subject objects to the processing because it is necessary to perform a task in the public interest or is connected to the exercise of public powers vested in the controller or to pursue a legitimate interest and there are no overriding legitimate grounds for the processing, or the data subject objects to processing for direct marketing purposes; d) the personal data were processed unlawfully; e) the personal data must be erased to comply with a legal obligation under European Union or Member State law to which the controller is subject; f) the personal data were collected in relation to the offer of information society services to minors. The request for erasure cannot be granted, however, if processing is necessary: a) to exercise the right of freedom of expression and information; b) to comply with a legal obligation that requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; c) for reasons of public interest in the area of public health; d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or e) to establish, exercise or defend legal claims.
- The right to restriction, that is, the right to ensure that the data are processed, except for storage, only with the data subject’s consent or for the establishment, exercise or defense of a legal claims, or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State if: a) the data subject contests the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests that restriction of their use instead; c) the data controller no longer needs the personal data for processing purposes, but they are required by the data subject for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing carried out because it was necessary to perform a task in the public interest or was connected to the exercise of public powers vested in the controller or to pursue a legitimate interest of the controller or other parties, while awaiting verification of the possible overriding legitimate grounds of the data controller over those of the data subject.
- The right to portability, that is the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, and the right to have the personal data transmitted directly from one controller to another, where technically feasible, if the processing is based on consent or on a contract and the processing is performed using automated means. This right does not affect the right to erasure.
- The right to object, that is the right of the data subject to object at any time, on grounds relating to their particular situation, at any time to processing of personal data concerning them because it is necessary to perform a task in the public interest or connected to the exercise of the public powers vested in the controller or to pursue the legitimate interest of the data controller or other parties. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing.
The data subject is also informed that, if they believe their personal data have been processed in violation of the provisions of the GDPR, they have the right to lodge a complaint with the Authority, as provided by Art. 77 of the Regulation or to petition the appropriate courts (Art. 79 of the Regulation).
ADDITIONAL INFORMATION ON DATA PROCESSING
Additional information on personal data processing is available in the privacy disclosure for website users, which is available at the website footer.
This privacy disclosure is updated to April 27, 2021