Borgstena Group Companies

The Borgstena Group is an international business group operating in the technical textiles sector for the automotive industry, comprising nine companies established in seven countries, distributed between the Textile and the Cut and Sew (Trim) Divisions.

This page identifies the Group companies covered by the Data Protection Platform. Identifying these companies is relevant because each of them determines, within the scope of its activity, the purposes and means of the processing of personal data it carries out, thereby assuming the capacity of controller.

1. Group structure and data protection

The Borgstena Group originated in Sweden, where it was founded in 1925 in the locality of Borgstena, and carries out its activity in the fields of textile production and cut-and-sew solutions for the automotive sector, organised respectively into the Textile Division and the Cut and Sew (Trim) Division. The internationalisation of the Group has led to the establishment of companies in several European countries, as well as in Brazil, the United States of America and Tunisia.

Each Group company, as a legally autonomous entity, is responsible for the processing of personal data it carries out in the exercise of its activity. The Data Protection Platform serves all of these companies on a cross-cutting basis, ensuring a coherent, harmonised and centralised approach to compliance, without prejudice to the individual responsibility of each company. Whenever two or more Group companies jointly determine the purposes and means of a processing operation, they may assume the capacity of joint controllers under Article 26 of the GDPR.

2. List of Group companies

The nine companies of the Borgstena Group covered by the Platform are set out below, with the identification of the company name, registered office, tax identification number and the Division to which they belong. The data have been confirmed from the Group's official registration documentation.

3. Jurisdictional framework

The geographical distribution of the Group companies directly affects the applicable data protection regime. The companies established within the European Union — in Portugal, the Czech Republic, Romania and Sweden — are subject to Regulation (EU) 2016/679 (GDPR) and to the national implementing legislation of each Member State, the competent supervisory authority in Portugal being the National Data Protection Commission (CNPD).

The companies established outside the European Union observe, when processing personal data, the applicable local legislation: in Brazil, the General Personal Data Protection Law (Law No. 13,709/2018), under the supervision of the National Data Protection Authority (ANPD); in the United States of America, the applicable set of federal sectoral laws and state laws on consumer privacy; in Tunisia, the national legislation on the protection of personal data. Whenever personal data are transferred between Group companies located in different countries, namely outside the European Economic Area, the transfer mechanisms provided for in Chapter V of the GDPR are adopted — adequacy decisions or, in their absence, appropriate safeguards, namely standard contractual clauses approved by the European Commission.

4. Identifying the controller for the exercise of rights

For the exercise of data protection rights, the data subject should, wherever possible, identify the Group company with which they have a relationship — for example, the company that employs them, to which they applied or of which they are a supplier. Should the data subject be unable to determine the responsible company, the Data Protection Officer provides the necessary assistance and ensures that the request is forwarded to the competent entity, guaranteeing that no request goes unanswered due to uncertainty as to the responsible company.