Privacy Policy

1. Data Controller

The data controller responsible for your personal data is BIB Parts (Baltijas Inzenieru Birojs), based in the European Union (Baltics). For any privacy-related questions or requests, contact us at info@bibparts.com.

2. Data We Collect

We collect personal data only when you actively provide it:

• Contact form: name, company name, email address, phone number (optional), and project description.
• Usage data: anonymised website analytics via Google Analytics (pages visited, session duration, general geographic region). No personally identifiable information is included.

We do not collect sensitive personal data (health, financial, biometric, etc.).

3. Purposes and Legal Basis for Processing

We process your data for the following purposes:

• Responding to enquiries — legal basis: legitimate interest (Art. 6(1)(f) GDPR). We have a legitimate interest in responding to business enquiries you have initiated.
• Website analytics — legal basis: consent (Art. 6(1)(a) GDPR). Analytics cookies are only set after you accept cookies via our consent banner.

4. Data Recipients

Your data may be shared with the following third-party service providers acting as data processors:

• Web3Forms — processes contact form submissions and forwards them to our email. Data is not permanently stored by Web3Forms.
• Google LLC — provides website analytics (Google Analytics 4). Data is anonymised and aggregated.
• Cloudflare, Inc. — provides website hosting, content delivery, and security (bot protection).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. International Data Transfers

Some of our service providers (Google Analytics, Web3Forms) may process data outside the European Economic Area (EEA). Such transfers are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data is protected to EEA standards.

6. Data Retention

• Contact form data: retained for as long as necessary to handle your enquiry, typically up to 3 years, unless a longer period is required or permitted by law.
• Analytics data: retained according to Google Analytics retention settings (default: 14 months).

7. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

• Right of access — obtain a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten"), subject to certain conditions.
• Right to restriction of processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — file a complaint with your national data protection authority (e.g. the Data State Inspectorate in Latvia, or the supervisory authority in your country of residence).

To exercise any of these rights, contact us at info@bibparts.com. We will respond within 30 days.

8. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

9. Cookies

For detailed information on the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.