1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data is all data that can be used to personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is NRC International GmbH, Stentenberg Str. 63, 51702 Bergneustadt, Germany, Tel.: +49 16094639674, Email: info@nrc-international.com. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2) Data collection when visiting our website 

If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website you visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the site
Browser used
Operating system used
IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

3) Contact

When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when you use a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

4) Data processing when opening a customer account and for contract processing 

According to Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time and can do so by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data as permitted by law.

5) Use of customer data for direct marketing

5.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means we will only send you an email newsletter once you have explicitly confirmed that you wish to receive it. We will then send you a confirmation email in which you are asked to confirm your subscription by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. When subscribing to the newsletter, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later time. The data collected during newsletter registration is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in the newsletter or by sending a message to the contact named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.

5.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range via email. In accordance with § 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain separate consent from you for this. Data processing in this case is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for advertising purposes at any time with effect for the future by notifying the contact mentioned at the beginning. You will only incur transmission costs according to basic rates. After receiving your objection, the use of your email address for advertising purposes will be immediately stopped.

5.3 Newsletter Delivery via MailChimp

Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when signing up for the newsletter. This transfer is carried out in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using a promotional, secure, and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.

MailChimp uses this information to send the newsletters on our behalf. MailChimp does not use the data of our newsletter recipients to contact them directly or to pass them on to third parties.

To protect your data in the USA, we have entered into a data processing agreement (“Data Processing Addendum”) with MailChimp based on the standard contractual clauses of the European Commission, to allow the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following address:
https://mailchimp.com/legal/data-processing-addendum/

You can view MailChimp’s privacy policy here:
https://mailchimp.com/legal/privacy/

6) Data processing for order processing

6.1 Cooperation with Service Providers for Order Processing

To process your order, we work with the following service providers who support us, in whole or in part, in the execution of concluded contracts. Certain personal data is transmitted to these service providers as described below.

The personal data collected by us will be passed on to the shipping company entrusted with the delivery, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the authorized credit institution as part of the payment process, provided this is necessary for the payment process. If we use payment service providers, you will be informed about them explicitly below. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR.

6.2 Use of Payment Service Providers (Payment Services)

– PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, your payment data will be forwarded to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) as part of the payment process. The data transfer is made pursuant to Art. 6 (1) lit. b GDPR and only to the extent necessary for the payment process.

For payment methods such as credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 (1) lit. f GDPR based on PayPal’s legitimate interest in determining your ability to pay. The result of the credit check regarding the statistical probability of default is used by PayPal to decide on the provision of the respective payment method. The credit report may include so-called score values. If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical method. Address data, among other things, may be included in the score value calculation.

For more information about data protection at PayPal, including the credit agencies used, please refer to PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

7) Web analysis services

Google (Universal) Analytics without Cookies with Google Signals

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This website uses Google (Universal) Analytics without the use of cookies, meaning that the service does not place cookies on your device at any time.
Instead, the browser’s local storage is used to store a unique ID assigned by Google (Universal) Analytics, which allows the analysis of your use of the website. Certain user information is processed through this ID.

The information generated via the ID about your use of this website (including the truncated IP address) is typically transferred to a Google server and stored there. This may also involve a transfer to servers of Google LLC in the USA.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct personal identification. With this extension, your IP address is shortened by Google within member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google LLC server in the USA and shortened there.

Only in exceptional cases will the full IP address be transferred to and shortened by Google LLC in the USA. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to us. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other data from Google.

All processing described above is carried out only if you have given us your explicit consent in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, you can download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, for browsers on mobile devices or if you do not want to use a browser plugin, you can revoke your consent by clicking the following link to set an opt-out cookie that will prevent future tracking by Google Analytics on this website (this opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):
Deactivate Google Analytics

We have entered into a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For data transfers from the EU to the USA, Google relies on the so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with European data protection standards in the USA.

Further information on Google (Universal) Analytics can be found here:
https://policies.google.com/privacy?hl=de&gl=de

This website also uses Google Signals as an extension to Google Analytics.
Google Signals enables us to generate cross-device reports through Google (so-called “Cross Device Tracking”). If you have enabled “personalized ads” in your Google account settings and have linked your internet-enabled devices to your Google account, Google can—provided you have given the appropriate consent to the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR (see above)—analyze your usage behavior across devices and create database models based on that.

This takes into account the logins and device types of all visitors who were logged into a Google account and completed a conversion. The data show, for example, on which device you first clicked on an ad and on which device the associated conversion took place.

We do not receive any personal data from Google in this process, only anonymized statistics generated based on Google Signals.

You can disable the “personalized ads” feature in your Google account settings, thereby deactivating cross-device analysis. Follow the instructions on this page:
https://support.google.com/ads/answer/2662922?hl=de

More information about Google Signals can be found here:
https://support.google.com/analytics/answer/7532985?hl=de

8) Rights of the data subject

8.1 Rights of the Data Subject

Applicable data protection law grants you, as the data subject, the following comprehensive rights with respect to the processing of your personal data by the data controller. Below, we inform you of these rights (rights of access and intervention):

• Right of access pursuant to Art. 15 GDPR: You have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if not collected from you directly, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved, as well as the significance and intended consequences of such processing, and your right to be informed of the safeguards pursuant to Art. 46 GDPR if your data is transferred to third countries.

• Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate correction of inaccurate data concerning you and/or completion of your incomplete data stored by us.

• Right to erasure pursuant to Art. 17 GDPR: You have the right to request the deletion of your personal data under the conditions outlined in Art. 17(1) GDPR. This right does not apply, in particular, if processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

• Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful and you oppose erasure and request restriction instead, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing for reasons relating to your particular situation pending the verification of whether our legitimate grounds override yours.

• Right to notification pursuant to Art. 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, they are obligated to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction unless this proves impossible or involves a disproportionate effort. You have the right to be informed about those recipients.

• Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller, where technically feasible.

• Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw any consent you have given to the processing of your data at any time with future effect. Upon withdrawal, we will delete the affected data immediately unless we can rely on another legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of processing carried out based on the consent before its withdrawal.

• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the place of the alleged violation, without prejudice to any other administrative or judicial remedy.

8.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME.
YOU CAN EXERCISE THIS RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL IMMEDIATELY STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

9) Duration of storage of personal data

The duration of the storage of personal data depends on the applicable legal basis, the purpose of processing, and—where relevant—on the statutory retention periods (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Art. 6(1)(a) GDPR, such data will be stored until the data subject withdraws their consent.

If statutory retention periods apply to data processed within the context of contractual or contract-like obligations under Art. 6(1)(b) GDPR, such data will be routinely deleted after the expiration of the retention periods, provided that they are no longer required for contract performance or initiation and/or there is no legitimate interest on our part in continuing the storage.

When personal data is processed based on Art. 6(1)(f) GDPR, it will be stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

When personal data is processed for the purpose of direct marketing based on Art. 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object under Art. 21(2) GDPR.

Unless otherwise specified in this privacy policy regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.