Skip to content

BHATTI X

Privacy notice

Last updated: September 2026

1. General information

This privacy notice explains how personal data is processed when you use bhattix.de. Personal data is information relating to an identified or identifiable individual. Processing is subject to the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Controller

Daud Bhatti, trading under the BHATTI X brand

Panoramastraße 51

72622 Nürtingen

Germany

Phone: +49 1529 2620128

Email: info@bhattix.de

Website: https://bhattix.de

BHATTI X is a brand of BhattiLabs.

3. Hosting

This website is hosted by manitu GmbH, Welvertstraße 2, 66606 St. Wendel, Germany.

When the website is accessed, the host processes technically necessary data which may be recorded in server logs: IP address, time of access, requested page or file, browser type and version, operating system, referrer URL and accessing device hostname.

The purpose is secure, stable and reliable website operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure provision of the website.

Further information: https://www.manitu.de/datenschutz/

4. TLS encryption

This website is provided exclusively over HTTPS with TLS encryption. An encrypted connection is indicated by https:// in the address bar. This protects transmission between your browser and the web server.

5. Contact by email and telephone

When you contact us by email or telephone, we process the information you provide to respond to your enquiry. This may include your name, company, email address, telephone number, message and information about a requested transport service.

General enquiries: info@bhattix.de

Operational and time-critical transport requests: ops@bhattix.de

Article 6(1)(b) GDPR applies where processing is necessary for a contract with you or pre-contractual measures at your request. Other business and general enquiries are processed under Article 6(1)(f) GDPR. Our legitimate interest is handling and responding to enquiries.

6. Transport request form

Submitting the form transmits your enquiry to our server and Microsoft 365 / Exchange Online for delivery to ops@bhattix.de. Validation, size limits and a hidden check field help reject abusive input. A reference identifies the enquiry and prevents duplicate processing on retries. Security checks are based on Article 6(1)(f) GDPR and our legitimate interest in protecting the enquiry channel.

The form is exclusively for non-binding operational transport enquiries to ops@bhattix.de. For general questions, use info@bhattix.de or telephone.

The form processes the information you enter: collection and delivery locations, timing, shipment contents, number of pieces, dimensions, total weight, transport mode, company, contact person, email address, phone number and optional notes. Collection and delivery locations, name, email address, phone number and transport mode are required. Company, timing, shipment contents, number of pieces, weight, dimensions and notes are initially optional.

We use this information to assess transport options, communicate with you and, where applicable, prepare an offer or contract. Article 6(1)(b) GDPR applies where you are the contracting party or request pre-contractual measures. For business contact persons, processing is based on Article 6(1)(f) GDPR and our legitimate interest in handling business enquiries. The checkbox acknowledges this notice; it is not additional consent to advertising.

Do not enter patient names, health data or other special categories of personal data under Article 9 GDPR. Describe medical or diagnostic shipments without identifying individuals. If such data becomes necessary for an assignment, agree a suitable transmission channel with us in advance.

7. Microsoft 365 / Exchange Online

We use Microsoft 365 and Exchange Online for business email. The provider in Europe is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Email contents and communications data are processed on Microsoft systems for the purposes and on the legal bases described in section 5. Microsoft provides a data protection addendum for business services. Processing locations and safeguards depend on the contracted services and their configuration. We do not claim that processing occurs exclusively within the European Economic Area.

Transfers to third countries must satisfy Articles 44 et seq. GDPR, for example through an applicable adequacy decision or suitable safeguards such as EU Standard Contractual Clauses. Contact info@bhattix.de for information about the safeguards applicable to our services and how to obtain them.

Further information: https://privacy.microsoft.com/en-us/privacystatement

Contractual terms: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

8. Recipients and service providers

We do not sell personal data. External providers may be used for hosting, email, IT, technical support and, where necessary for a specific enquiry, transport and logistics services. Data is disclosed only where there is a legal basis and disclosure is necessary for the purpose. Where providers act as our processors, the requirements of Article 28 GDPR apply.

9. Data processing for transport enquiries

Where necessary to assess, plan, quote for or carry out transport, relevant information may be shared with suitable transport, courier, forwarding or logistics partners. This can include collection and delivery addresses, time windows, shipment contents, dimensions, weight, specific shipment requirements and necessary collection or handover contact information.

Article 6(1)(b) GDPR applies to contractual or pre-contractual processing. Only information needed for the transport is shared. For contact persons who are not contracting parties, necessary business communications are based on Article 6(1)(f) GDPR. International transfers outside the EEA must also meet Articles 44 et seq. GDPR.

10. Retention

We retain personal data only for as long as required for its purpose. For Microsoft 365 form delivery, we retain a technical reference, timestamps, processing status and hashes of the enquiry and email address on our server for up to 30 days, to prevent duplicates and abuse. This technical store contains no message text. Sent emails follow the retention rules below. The legal basis for technical protection is Article 6(1)(f) GDPR.

General enquiry data is normally deleted after the enquiry has been resolved unless statutory obligations, contractual requirements or other legitimate grounds require retention. If a contract is concluded, business records may be retained for longer under applicable commercial or tax retention obligations.

11. Cookies and local storage

The website uses no analytics or marketing services and no tracking cookies. Fonts and the two logistics images are served by the website itself.

When you switch between light and dark appearance, your choice is stored in your browser under “bhattix-theme”. It contains only “light” or “dark” and is not transmitted to us as an identifier. It remains until you change the setting or delete the website data in your browser. Without a stored choice, the system preference is used.

Storage serves only your chosen appearance. Necessary access to local storage is based on section 25(2)(2) TDDDG; any processing of personal data is based on Article 6(1)(f) GDPR and our interest in a usable website.

The website does not persistently store form entries in your browser. In draft mode they remain in the open form; files you download remain on your device until you delete them. If additional services are introduced, we will update this notice and obtain consent where required.

12. Automated decision-making

We do not currently use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR.

13. Your rights

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), objection (Article 21) and withdrawal of consent (Article 7(3)).

Where processing is based on consent, you may withdraw it at any time with future effect. This does not affect the lawfulness of processing before withdrawal. You can contact the controller to exercise your rights.

14. Right to object

Where we process personal data under Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

15. Right to complain

Under Article 77 GDPR, you may lodge a complaint with a supervisory authority. In particular, the competent authority for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

Heilbronner Straße 35

70191 Stuttgart

Germany

Phone: +49 711 615541-0

Email: poststelle@lfdi.bwl.de

Website: https://www.baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen/

16. Changes to this privacy notice

Last updated: September 2026

We reserve the right to update this privacy notice if legal requirements, our website, our technical systems or the services we offer change.

The current version is available on this website.