Source: https://www.bardenbearings.co.uk/privacy_policy.html
Timestamp: 2019-04-23 14:47:09+00:00

Document:
We are pleased about your interest in The Barden Corporation, part of the Schaeffler Group (Schaeffler AG and affiliated companies) and our products. The protection of your privacy when using our online offer is very important for us. If personal data is processed, we observe the applicable data protection laws.
If processing is necessary for the purposes of the legitimate interests pursued by The Barden Corporation or by a third party (e.g. to establish or defend legal claims; to ensure IT security; to prevent crimes; to conduct business and to further develop services and products) and if your interests, fundamental rights and freedoms as data subject do not override the aforementioned interest, Art. 6 (1)(f)GDPR serves as the legal basis for processing.
Within The Barden Corporation, those entities gain access to your data who require it as a part of “least privilege” (assignment of user rights to the lowest possible extent) and the “need-to-know” principle (knowledge of data only if necessary). We may only transfer data to third parties outside The Barden Corporation if this is necessary, if statutory provision so requires, if you have given your consent or if any commissioned processors have agreed to comply with the requirements of the GDPR and the BDSG.
The Barden Corporation uses technical and organisational security measures to protect your data that we manage against accidental or intentional destruction, manipulation, loss or access by unauthorised persons. These safeguards are constantly being developed in accordance with the respective new technical possibilities.
While entering into a contract, you must provide the personal data that is necessary to establish, implement and terminate the contract and to satisfy the resulting duties or that The Barden Corporation must collect due to legal provisions. Without these data no contract with The Barden Corporation can be concluded.
We do not use fully automated decision-making pursuant to Art. 22 GDPR. The Barden Corporation basically does not use “profiling”. If we use it in individual cases, we will inform you about this separately, if it is required by law and – if necessary - obtain your prior consent.
9. Sources of your personal data We use data that we receive from you.
On the website we offer the possibility to register for The Barden Corporation info service offers free of charge.
When you register for The Barden Corporation info service offers and give your corresponding consent, you will receive advertising and information (e.g. newsletter, invitations to trade fairs and events, information about products, services, offers and promotions including opinion polls and company news) of the Schaeffler Group, for example, by e-mail, telephone, SMS and/or instant messenger services, such as WhatsApp, to the contacts provided by you when registering for the info service offers via an input mask. In order to use the info services, you need to provide your e-mail address and other information marked as mandatory in the input mask, such as: name, company and telephone number. This data is being collected to send you the advertising and information. For this purpose, we may also engage third parties (service providers) with whom we have a data processing agreement, and transfer your data to any of these third parties. After submitting the registration form, you will receive from us a confirmation e-mail to the e-mail address you provided. The registration will only take effect if you confirm it by clicking on the link in the e-mail.
The data will be erased as soon as it is no longer necessary in relation to the purposes of its collection. Therefore, data is being stored as long as your consent to data tracking is active. You have the right to withdraw your consent to the processing of personal data at any time by sending an e- mail to unsubscribe@schaeffler.com or by clicking the “unsubscribe” link in received messages, with effect for the future, thereby deregistering from data tracking. In this case, all personal data stored for communication will be deleted. Withdrawing the consent does not affect the lawfulness of the processing based on this consent before its withdrawal.
Right of access (Art. 15 GDPR) Upon request you can obtain from us confirmation from us as to whether or not your personal data is being processed by us. If this is the case, you can request us to give you access to the information provided for by law (see Art. 15 (1)GDPR). We will also notify you of appropriate safeguards pursuant to Art. 46 GDPR in the context of data transfer, in case your personal data is being transferred to a third country or to an international organisation. There are restrictions according to Sections 34 and 35 BDSG.
Right to rectification (Art. 16 GDPR) You have a right to rectification and/or completion if the processed personal data is inaccurate or incomplete. We have to rectify the data without due delay.
Right to restriction of processing (Art. 18 GDPR) Provided that the legal requirements are met (see Art. 18 (1)GDPR), you have the right to restrict processing of your personal data. For consequences of the restrictions please refer to Art. 18(2) and (3) GDPR .
Right to erasure (Art. 17 GDPR) You have the right to demand from us erasure of your personal data without undue delay, and we are obliged to immediately erase this data if any of the reasons pursuant to Art. 17 (1)GDPR applies. The right to erasure does not apply in cases of Art. 17 (3)GDPR. Furthermore, there are restrictions pursuant to Sections 34 and 35 BDSG.
Right to notification If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to notify each recipient to whom the personal data have been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. We have to inform you about those recipients upon your request.
Right to data portability (Art. 20 GDPR) You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. For details please refer to Art. 20 GDPR.
Right to object (Art. 21 GDPR) You have the right to object at any time to the processing of your personal data that is based on Art. 6 (1)(e) or (f)GDPR on grounds relating to your particular situation. Further details can be found in Art. 21 GDPR.

References: Art. 6
 Art. 22
 Art. 15
 Art. 46
 Art. 18
 Art. 18
 Art. 17
 Art. 17
 Art. 20
 Art. 6
 Art. 21