Legal

Privacy Policy

Last updated: October 2026

1. Data Controller

This website is operated by Baltijas Inzenieru Birojs SIA ("BIB Parts"), a company registered in Latvia, European Union, registration number 40203552798, address: Salaspils iela 16A, LV-1057, Rīga, Latvia. BIB Parts is the controller of the personal data described in this policy. For any privacy-related questions or requests, contact us at info@bibparts.com.

2. Data We Collect

  • Contact form: name, company name, email address, phone number (optional), your message and any files (drawings, specifications) you attach.
  • Email correspondence: the content and contact details of emails you send us or that we exchange with you.
  • Business contact data: for business-to-business outreach we use business contact details (company name, business email address, country, industry) that companies publish on their own websites or in public business directories.
  • Usage data: only if you accept analytics cookies - pages visited, session duration, device type and approximate region, collected via Google Analytics.
  • Technical data: IP address and browser information processed by our hosting and security provider to deliver the website and protect it from abuse.

We do not collect sensitive personal data (health, biometric, etc.).

3. Purposes and Legal Basis for Processing

  • Responding to enquiries and preparing quotations - legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries you have initiated (Art. 6(1)(f) GDPR).
  • Business-to-business outreach - legal basis: legitimate interest (Art. 6(1)(f) GDPR) in offering our manufacturing services to companies that may need them. Every message offers a simple way to opt out; if you do, we add your address to a suppression list and do not contact you again.
  • Website analytics - legal basis: consent (Art. 6(1)(a) GDPR). Google Analytics is loaded only after you click "Accept" in our cookie banner.
  • Security and operation of the website - legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Data Recipients

We use the following service providers, acting as data processors on our behalf:

  • Cloudflare, Inc. - website hosting, content delivery and security (bot protection).
  • OVH SAS (servers in the EU) - hosts the server that receives contact form submissions and attached files.
  • Resend (Plus Five Five, Inc.) - delivers contact form submissions to our mailbox by email.
  • Google LLC / Google Ireland Ltd - business email hosting and, only with your consent, website analytics (Google Analytics 4).
  • Brevo SAS (France) - sending of business emails and handling of opt-out requests.

We may share enquiry details (for example, drawings and specifications) with manufacturing partners only as needed to prepare a quotation or fulfil an order. We do not sell or rent personal data.

5. International Data Transfers

Some providers (Cloudflare, Resend, Google) may process data outside the European Economic Area (EEA), in particular in the United States. Such transfers are based on the EU-US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Retention

  • Enquiries, correspondence and attached files: as long as necessary to handle your enquiry and any resulting business relationship, typically up to 3 years after the last contact, unless a longer period is required by law (e.g. accounting records).
  • Business contact data used for outreach: until you object or the data is no longer relevant; addresses on our suppression list are kept only to make sure we do not contact you again.
  • Analytics data: 14 months (Google Analytics retention setting).

7. Your Rights Under GDPR

  • Right of access - obtain a copy of the personal data we hold about you.
  • Right to rectification - request correction of inaccurate or incomplete data.
  • Right to erasure - request deletion of your personal data, subject to legal conditions.
  • Right to restriction of processing - request that we limit how we use your data.
  • Right to data portability - receive your data in a structured, machine-readable format.
  • Right to object - object at any time to processing based on legitimate interests, including business outreach.
  • Right to withdraw consent - where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint - with the Data State Inspectorate of Latvia (Datu valsts inspekcija) or the supervisory authority in your country of residence.

To exercise any of these rights, contact us at info@bibparts.com. We will respond within one month.

8. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

9. Cookies

For detailed information on the cookies we use and how to manage them, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when it was last revised.