Ndrackgmbh respects the privacy of visitors and customers and processes personal data in accordance with applicable German and European data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The data controller responsible for processing personal data through this website is:
ND-Rack GmbH
Grüner Weg 11
33449 Langenberg, Germany
Registration: HRB 12066-DE337715632-Amtsgericht Gütersloh
Telephone: +49 52482029910
Email: rack@ndrackgmbh.com
2. Personal Data We Collect
Depending on how you use our website, we may collect information such as:
- Name and contact details;
- Billing and delivery address;
- Email address and telephone number;
- Order details and purchase history;
- Payment-related information required to process an order;
- Communications and information provided when contacting customer service;
- Technical information required for the operation and administration of the website.
We only process information that is relevant to the applicable purpose.
3. How We Use Personal Data
Personal data may be processed for the following purposes:
- Processing and fulfilling orders;
- Arranging delivery and providing order-related information;
- Processing payments;
- Responding to customer enquiries;
- Maintaining customer and transaction records;
- Meeting applicable accounting, tax and legal requirements;
- Protecting the website and transactions from unlawful or fraudulent activity;
- Handling legitimate business and legal claims where necessary.
Where required under the GDPR, processing is based on the performance of a contract, compliance with a legal obligation, our legitimate interests, or consent where consent is required.
4. Payment Processing
Payments made through our website are processed by Stripe.
Stripe may process information necessary to complete and manage payment transactions, which may include payment details, billing information, transaction information, order information and relevant identifiers.
Depending on the specific processing activity, Stripe may act as a data processor on behalf of the merchant or as an independent data controller for purposes determined by Stripe, including activities required for payment services, fraud prevention, regulatory compliance and related operations. Stripe’s current privacy documentation describes these different processing roles.
Stripe may process personal data through affiliated entities and service providers where required to provide its services. Where personal data is transferred outside the European Economic Area, applicable legal transfer mechanisms may be used, including adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.
For further information regarding Stripe’s handling of personal data, customers may consult Stripe’s Privacy Policy and Privacy Centre.
5. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer period is required by applicable law or is necessary for the establishment, exercise or defence of legal claims.
Order, accounting and tax records may be retained for the statutory periods applicable in Germany. Other customer information is reviewed and deleted or anonymised when it is no longer required for its original purpose, subject to applicable legal obligations.
Where consent forms the legal basis for processing, relevant data will generally be retained until the consent is withdrawn, unless another lawful basis or statutory retention requirement applies.
The retention period therefore depends on the type of information, the purpose of processing and any applicable statutory requirements. This approach follows the GDPR principle of storage limitation.
6. Disclosure of Personal Data
Personal data may be disclosed only where necessary for legitimate business purposes, contractual fulfilment or legal obligations.
Depending on the circumstances, relevant information may be shared with service providers involved in payment processing, order fulfilment, delivery, website operation, accounting or other services necessary to operate the website and process orders.
Service providers receive only the information required for their respective purposes and process it in accordance with applicable data protection requirements.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies that are necessary for website operation, order processing and basic functionality.
Where consent is required for non-essential cookies or similar technologies, such technologies will only be used in accordance with the applicable consent requirements.
Further information is provided in our Cookie Policy.
8. Data Subject Rights
Subject to the conditions provided by applicable law, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete data;
- Request erasure of personal data where applicable;
- Request restriction of processing;
- Object to certain processing activities;
- Request data portability where applicable;
- Withdraw consent where processing is based on consent.
Requests concerning personal data may be submitted using the contact details provided above.
You also have the right to lodge a complaint with the competent data protection supervisory authority where you consider that the processing of your personal data does not comply with applicable data protection law.
9. Data Security
We apply appropriate organisational and operational measures to protect personal data against unauthorised access, unlawful processing, accidental loss and other forms of improper handling.
Access to personal data is limited to circumstances where it is required for legitimate business, contractual or legal purposes.
10. Third-Party Services
Where external service providers process personal data on our behalf, appropriate contractual and data protection arrangements are maintained where required by applicable law.
Information processed by third-party service providers is limited to the purposes for which their services are engaged.
11. Changes to This Privacy Policy
This Privacy Policy may be updated where necessary to reflect changes in applicable law, website functions, processing activities or business operations.
The latest version will be made available on this website with its applicable update date.
12. Contact
For questions concerning this Privacy Policy or the processing of personal data, please contact:
ND-Rack GmbH
Grüner Weg 11
33449 Langenberg, Germany
Telephone: +49 52482029910
Email: rack@ndrackgmbh.com