Privacy Policy

Welcome to NRF.EU

NRF B.V., Nederlandse Radiateuren Fabriek (hereinafter referred to as “NRF” or “us” or “we”) respects your privacy and processes personal data as a data controller in accordance with the European General Data Protection Regulation (hereinafter referred to as “GDPR”).

We welcome your visit and thank you for your interest in the NRF website and products.

The personal data you provide to us in connection with your visit on the website or registration and use of the NRF webshop is processed by NRF, which is the controller of this data within the meaning of GDPR.

In this Privacy Policy we explain:

what personal data we collect and how,
for what purposes and on what grounds we process your personal data,
how long we keep your personal data,
who we share your personal data with,
how your personal data is protected,
the rights you have as data subject,
our use of cookies,
how you can contact us.

NRF respects your privacy

The protection of your privacy when processing personal data, as well as the security of all commercial information, is our top priority and occupies a key position in all our activities. We process personal data collected during your visit to our site, as well as when you order products through our site, with confidentiality and always in accordance with the law. Data protection and information security are part of our company policy. We also require adequate protection of your personal data from our business partners and service providers with whom we work.

Collection and processing of personal data

Personal data is any information relating to an identified or identifiable natural person. Personal data that we process may include:

basic information such as your first and last name, prefix, title,
contact details such as your e-mail address, postal address and phone number,
data related to the device you use to visit our website, such as an IP address,
data related to your visit to our website,
personal data you provide us for the purpose of attending events or meetings,
personal data you may provide us for the purpose of a job application, such as your full name, date of birth, address, phone number, nationality,
marital status and any other personal data set out in your application,
any other personal data relating to you which you may provide us or that we may obtain in relation to the purposes and based on grounds set out below

Your data is processed by us for the purposes indicated below, related to the functioning of the NRF website and provision of services offered therein. These services may consist, among other things, in sending newsletters.

Basis of data processing – depending on the activities undertaken by you, these may be:

- a contract for the provision of services or actions taken at your request aimed at concluding such a contract,
- a legal obligation imposed on us, e.g., related to accounting,
- your consent given on the service – if you choose to give it,
- our legitimate interest, consisting of processing:
  - for the establishment, investigation or defense of possible claims,
  - for direct marketing purposes,
  - for analytical and statistical purposes,
  - for the purpose of customer satisfaction surveys.

Provision of data is voluntary, but in some cases may be necessary to conclude a contract (e.g., in the case of a newsletter agreement).

Effect of failure to provide data – depending on the purpose for which the data is provided:

inability to use the services of the website, such as receiving a newsletter,
lack of possibility to receive information on promotions or special offers offered in the service.

When you visit our website, we record, among other things, your IP address as well as the address of the website from which you came to us, your browsing history on our website as well as the date and duration of your visit (“Website Usage Information”). This information is processed anonymously by our analytics tools. Other personal information is only collected if you provide it to us, such as when you register, take part in a survey, send a request, and for contractual purposes.

Regardless of the sales or contact channel, NRF is committed to protecting customer and user privacy by ensuring the protection, confidentiality and security of the personal information entrusted to us, in accordance with applicable laws.

Key principles

NRF is committed to the important principles of respect for fundamental rights and all applicable laws and regulations (we collect and process personal data in accordance with the following principles: (i) lawfulness, fairness and transparency; (ii) purpose limitation of data processing; (iii) data minimization; (iv) data accuracy; (v) data storage limitation; (vi) integrity and confidentiality):

transparency: we provide all relevant information about the purposes of data collection and the recipients of the data collected,
compliance and reasonableness: we only collect and process data that is necessary for the stated purposes,
confidentiality and integrity: we implement all reasonable technical and organizational measures to protect personal data against disclosure, loss, alteration or access by unauthorized third parties,
retention: we retain personal data only for as long as is necessary for the purposes of the processing or the performance of the specified services,
accountability: we collect and process personal data in accordance with the following principles: (i) lawfulness, fairness and transparency; (ii) purpose limitation of processing; (iii) data minimization; (iv) data accuracy; (v) data retention limitation; (vi) integrity and confidentiality,
right of access: we offer customers and users the opportunity to directly access, modify and correct their personal data through personal accounts on our websites. If a user or customer wishes to exercise the right to erasure of their data, they have every right to do so, and we will assist them.

Use, purpose of processing and transfer of personal data

The personal data that you entrust to us, in particular: your name, your address, your e-mail address, your telephone number, are processed for various purposes:

to the extent necessary to establish, shape the content, change, terminate and properly perform services provided electronically and to fulfill orders placed by you,
for the purpose of processing orders placed by you for products available in the NRF Webshop,
for the purpose of processing your complaints and returns in the event of withdrawal from the contract (return of goods),
performance of sales contracts concluded through the NRF Webshop, including the enforcement of claims arising from these contracts,
if you consent to receiving marketing information from us, including sending you electronic commercial information, your personal data will also be processed by us in order to provide you with information about our store, offers and promotions, as well as information regarding the products and services of entities cooperating with us (with our knowledge and explicit consent).
Running our website and offering products through the webshop requires collecting certain personal data obtained from you. NRF is the administrator of the personal data provided in the registration/order form, the data necessary to set up a user account (e.g., password, login), payment data, vehicle data, information related to your orders and empty “baskets”, “wish lists”, IP address (used for fraud prevention purposes), information about called-up pages and any other information processed for the purpose of processing your order. While it is not obligatory for you to provide all the requested information, failure to provide basic data (such as your name, surname, email address, postal address and, in the case of registered users, your login) may prevent NRF from correctly processing your order.

NRF is also entitled to make personal data available in order to fulfil statutory obligations (e.g., at the request of law enforcement agencies), to process claims, and to protect the rights, property and safety of individuals.

Third parties to whom we transfer your personal data are themselves responsible for compliance with privacy legislation. NRF is neither responsible nor liable for the processing of your personal data by these third parties. To the extent that a third party processes your personal data as a data processor of NRF, NRF will conclude a processor agreement with such party that meets the requirements set out in the GDPR.

To be able to provide our services, it may be necessary for us to transfer your personal data to a recipient in a country outside of the European Economic Area. An appropriate level of protection of your data, including using appropriate safeguards, is ensured by the application of the standard data protection clauses adopted by the European Commission.

Your rights in relation to the processing of personal data

We ensure the exercise of your rights as indicated below. You can exercise your rights by submitting a request to email: info@nrf.eu. Additionally, you can make selected changes to your Account settings in the Settings (Privacy) tab after logging into your account.

Right to Revoke Consent

You have the right to withdraw any consent that you have given at the time of registration to the NRF Webshop, as well as during the use of services and functionalities offered on the Website. The withdrawal of consent has effect from the moment of withdrawal. Withdrawal of consent does not affect the processing carried out by us in accordance with the law before its withdrawal.

Withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from continuing to use services or functionalities that we can only lawfully provide with your consent (e.g. Profile Sharing).

If you would like to unsubscribe from the newsletter you can do so by clicking on the unsubscribe button in the footer of each newsletter.

Right to object to the use of your data

You have the right to object at any time to the use of your personal data.

By opting out of receiving marketing communications relating to our products or services, or our customers, we will be deemed to have objected to the processing of your personal data, including profiling for these purposes.

If your objection proves to be valid and we have no other legal basis for processing your personal data, we will delete your data against the use of which you have objected.

Right to erasure (“right to be forgotten”)

You have the right to request deletion of all or some of your personal data. We will treat a request to delete all your personal data as a request to delete your account with the NRF Webshop.

You have the right to request deletion of your personal data if:

you have withdrawn a specific consent, to the extent that personal data was processed based on your consent,
your personal data are no longer necessary for the purposes for which they were collected or processed,
you have objected to the use of your data for marketing purposes,
you have raised an objection to the use of your data for the purpose of conducting statistics concerning the use of the ucando.pl Internet Shop and satisfaction surveys, and the objection has been considered justified,
your personal data are processed unlawfully.
Despite your request to delete your personal data, due to filing an objection or withdrawing consent, we may retain certain personal data to the extent necessary for the establishment, investigation or defense of claims. This applies, in particular, to personal data including your name, e-mail address and order history, which we retain for the purpose of investigating complaints and claims relating to the use of our services.

Right to restrict data processing

You have the right to request that we restrict the processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services, the use of which will involve the processing of the data covered by the request, until the request is considered. We will also not send you any communications, including marketing communications.

You have the right to request that we restrict the use of your personal data in the following cases:

when you question the accuracy of your personal data, in which case we will restrict the use of your personal data for the time we need to verify the accuracy of your data, but for no longer than 7 days,
when the processing of your data is unlawful and instead of erasing your data you request the restriction of its use,
when your personal data is no longer necessary for the purposes for which we collected or used it, but it is necessary for you to establish, assert or defend your claims,
when you have objected to the use of your data – in which case the restriction is for the time needed to consider whether, in view of your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.

Right of access

You have the right to obtain confirmation from us as to whether we are processing your personal data, and if this is the case, you have the right:

gain access to your personal data,
obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of retention of your data or the criteria for determining that period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union,
obtain a copy of your personal data.

Right to rectification

You have the right to rectify and complete the personal data you have provided. You can do this yourself in the “Your account” section. Regarding other personal data, you have the right to request us to rectify this data (if it is incorrect) and to complete it (if it is incomplete). To this end, you can also request that we delete your entire customer account by sending a request to the e-mail address: info@nrf.eu from the email address currently registered with NRF Webshop.

Right to data portability

You have the right to receive your personal data that you have provided to us and then transfer it to another personal data controller of your choice, such as another operator of similar services. You also have the right to request that we send your personal data directly to such other controller, insofar as this is technically possible.

Time for compliance

If, in the exercise of the aforementioned rights, you submit a request to us, we shall comply with such request or refuse to comply with it immediately, but no later than within one month after receipt. If, however, due to the complexity of the request or the number of requests, we are unable to meet your request within one month, we will meet it within a further two months by informing you in advance of the intended extension of the deadline.
For technical reasons, we always need 72 hours to update the settings you have selected in our systems. Therefore, you may receive an email from us while our systems are being updated that you have opted out of receiving.

Cookies and similar technologies

General Information

We use cookies, web beacons and other similar technologies to improve the quality, security and speed of your information search, and for advertising purposes.

A cookie is a text file that contains information collected by your computer or mobile device when you visit a website. Cookies are sent back to the originating website (or to another website that recognizes them) each time you visit.

Cookies are stored in the memory of your device (computer, phone, etc.); enable you to use all functions of the Website and do not change the settings of your device.

Using the appropriate options of your browser, you can at any time:

delete cookies,
block the use of cookies in the future.

On this Website cookies are used to/for:

store information about your session,
statistical purposes,
marketing purposes,
make Website functions available.

To learn how to manage cookies, including how to disable their use in your browser, you can refer to the help file of your browse. In addition, you will find relevant instructions on the following pages, depending on the browser you are using:

Firefox
Chrome
Safari
Microsoft Edge
Or any other browser you use.

More information about cookies can be found on Wikipedia.

Web beacons (also known as Internet tags, pixel tags or GIFs) are electronic files that typically contain an image consisting of a single pixel. They can be placed on websites or in emails to transmit information. Similar technologies are methods of storing information by your web browser or device other than cookies and web beacons, such as flash cookies, HTML 5 cookies and other software solutions.

It is possible to block, delete or deactivate cookies, web beacons and similar technologies using the appropriate browsing settings on your device, provided that your device allows it. If you block or deactivate the aforementioned technologies, you will still be able to use certain features on our websites. However, certain useful features do not work without active cookies. In addition, if cookies are deactivated, you may need to enter your password more frequently while browsing.

EXTERNAL SERVICES / DATA RECIPIENTS
In order to provide our services, we use third parties to whom your data may be transferred (only for the purposes indicated in this policy).

Below is a list of possible recipients of your data:

persons who cooperate with us based on civil law contracts, supporting our current activities,
communication software provider,
project management software provider,
e-mail box provider,
accounting office,
mailing system provider,
entity providing marketing services,
service optimization facilitator,
social networking service provider,
office suite provider,
hosting provider,
entity providing technical support,
relevant public authorities to the extent that the Administrator is obliged to share data with them.

What cookies do we use?

We use several types of cookies, web beacons and similar technologies:

“session-only” technologies, which function on your device only for the duration of your web browser,
persistent technologies, which continue to function even after a single visit to the site has ended and are typically used to personalize a visitor’s next visit to the site.
proprietary technologies implemented by the NRF.
third party technologies from third party sites other than this website.

Please note that we do not collect or store your personal information through cookies or similar technologies.

For what purposes do we use cookies?

Necessary: Our own cookies, web beacons and other similar technologies may be used to the extent necessary for the operation of this website. The above includes technologies that enable you to access our websites. This is also needed to detect website disruptions, prevent abuse, and improve security and to enable you to use various features of our site, such as shopping carts, saving search results, or similar functions.
“Behavioral” cookies: Proprietary cookies, web beacons and similar technologies may be used for purposes related to evaluating the performance of the site, improving the content on the site, analyzing how users use our site, and determining whether a user views an item offered or a referral.
“Functional” cookies: Our own cookies, web beacons or other similar technologies may be used to provide you with enhanced functionality when you visit our site or use our site. This includes, but is not limited to, identifying you when you log on to the site, or remembering your interests, preferences and previously viewed items.
Advertising or targeting cookies: Cookies, web beacons and similar technologies both proprietary and from third parties may be used to provide content, including advertising, on the Site that is consistent with your interests.

Google Analytics

We use analysis services from Google Analytics provided by Google Inc. for the purpose of continuous improvement of our website. In the interests of data security, an anonymous user IP address is sent to Google servers. Google undertakes activities on behalf of NRF in the scope of analysing the use of the website, preparing reports on website activity and providing additional services related to the use of the website and the Internet.

In addition, we use Google Analytics reports to analyse anonymous information about the demographics (such as age and gender) and interests of visitors to our website, as well as to analyse the effectiveness of advertisements placed by us on other websites.

How long do we keep your information?

We store your personal data for the duration of your Customer account for the purposes of operating your account and related functionality and other services in accordance with the Terms and Conditions, as well as for marketing purposes. After deleting your account, your data will be deleted, except for the following information: hash of your e-mail address and date of unsubscribing from our database.

In the case of data provided for the purpose of processing an order placed by you, we will store your data for the period required by law, including the Accounting Act and tax regulations.

In the case of data provided for marketing purposes, we store your data for as long as we have a legal basis for doing so, which generally means until you withdraw your consent, with exceptions arising from applicable law or in specific cases justified by the Administrator’s interest.

We store personal data of users who are not logged in for a period corresponding to the life cycle of cookies stored on their devices.

Security

NRF uses technical and organizational measures to protect against manipulation, loss, destruction, access by unauthorized persons and unwarranted disclosure of your data that we administer. The safeguards we use are constantly being developed and adapted in line with developments in technology in this area.

NRF ensures the security of your personal data by means of appropriate technical and organizational measures to prevent unlawful processing and the accidental loss, destruction and damage of data.

Furthermore, we take special care to ensure that personal information is:

correct and processed in a lawful manner,
obtained only for specified purposes and not further processed in a way incompatible with those purposes
adequate, relevant and not redundant
accurate and up to date,
not kept longer than necessary,
obtained in accordance with the rights of the individuals to whom it relates, including the right to object access,
securely stored,
not transferred without adequate protection.

For your security, please remember to:

log out of the NRF Webshop at the end of a session (completed purchases, adding messages to the forum, etc.). Simply closing your browser window does not mean logging off from the ucando.pl website. Logging out of the ucando.pl website will take place when you click on the “Log out” button, which is in the top right corner of the page,
keep the login and password to the Customer’s account confidential, in particular not to disclose the data (login, password) to any third party,
use anti-virus programs, including regular scanning of disks for viruses,
use the website and the webshop only via trusted computers on which only verified software has been installed. Using someone else’s computer creates a risk that your login, password or other data you provide will be intercepted,
if, however, you are using the website or the webshop from a foreign computer, e.g. in an internet cafe, remember not to save data on your computer and delete the history of pages you have visited. The saved data can be used by the person who will use the computer after you.

Request for consent

With your consent, we would also like to use your data to inform you about our products and sometimes to seek your opinion on them. Participation in these campaigns is completely voluntary. In order to process your data for commercial and marketing purposes, we make sure to obtain your consent and that you know what you are agreeing to and under what conditions.

Contact

If you have any suggestions or are not satisfied with the way we handle your personal information, please contact us. If, despite our best efforts to ensure data accuracy, we discover errors in our databases, we will make the appropriate corrections upon your request. We encourage you to contact us if you have any doubts about your rights or concerns.

info@nrf.eu
+31485476476

NRF B.V.
Langenboomseweg 64,
5451 JM,
Mill, Netherlands.

This Privacy Policy was last updated on December 1st, 2022.