Data Protection Information for Customers and Suppliers Regarding the Processing of Your Personal Data
The protection of your privacy is of utmost importance to us. We have received your data from you in the context of a contractual relationship. We collect and use your data for our own purposes in accordance with the General Data Protection Regulation (GDPR).
Data Controller
The controller responsible for data processing is:
NPR of Europe GmbH
Siemensstr. 56
D-70825 Korntal-Münchingen
Germany
Tel.: +49 (0)7150 9163-0
Data Protection Officer
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, please contact our Data Protection Officer at:
datenschutz@npr-europe.com
Purpose and Legal Basis of Processing
We collect and process your personal data for the initiation and performance of the respective contractual relationship. The legal basis for this data processing is Article 6(1)(b) GDPR.
Furthermore, we process your personal data in the course of contacting you. If you contact us by email, the data you provide (your email address, and if applicable your name, telephone number, and other information) will be processed by us in order to handle and respond to your inquiry. Where a contractual relationship exists, the legal basis is Article 6(1)(b) GDPR.
If no contractual relationship exists, our legitimate interest in responding to the contact request constitutes the legal basis pursuant to Article 6(1)(f) GDPR.
For electronic advertising purposes by email or telephone, we process your data only if you have given your consent. In this case, your consent pursuant to Article 6(1)(a) GDPR constitutes the legal basis for data processing. You may revoke your consent at any time with effect for the future. The revocation does not affect the lawfulness of the data processing carried out on the basis of the consent prior to revocation. In this case, we store your data until the revocation occurs.
Disclosure to Third Parties, Categories of Data Recipients
Personal data will not be transferred to third parties for purposes other than those listed below.
Where necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR, your personal data will be disclosed to third parties. This includes, in particular, disclosure to external service providers acting on our behalf.
For the processing of our business transactions, we use external domestic service providers (e.g. in the areas of IT, sales, telecommunications, logistics, accounts receivable management, and marketing).
These service providers act only on our instructions and have been contractually obligated pursuant to Article 28 GDPR to comply with data protection regulations.
Where we disclose your personal data to our service providers, this is done on the basis of existing data processing agreements. Disclosure may also take place on the basis of legal obligations, for example for the reporting of suspicious cases pursuant to Section 43 of the German Money Laundering Act (GwG) to the competent authority. The legal basis for such disclosure is Article 6(1)(c) GDPR in conjunction with Section 43 GwG.
Transfer to a Country Outside the EU
Your personal data will not be transferred to a country outside the European Economic Area (EEA) or to an international organization.
Data Categories
The following categories of data are concerned: master data such as name, title, position, address, email address, telephone number (landline and/or mobile), and other business contact details, as well as additional data that you voluntarily provide to us in the context of the contractual relationship.
Retention Period for Your Personal Data
We store your data for as long as this is necessary for order processing, including invoicing, and/or insofar as statutory retention obligations prevent the deletion of your data.
For advertising purposes, we store your data for as long as our legitimate interest pursuant to Article 6(1)(f) GDPR continues to exist in contacting you for direct marketing purposes and as long as you have not objected to the processing of your personal data for direct marketing purposes pursuant to Article 21 GDPR.
Data Subject Rights
You are entitled to the following statutory data subject rights, provided that the respective requirements are met:
- Right of access to your data stored by us pursuant to Article 15 GDPR,
- Right to rectification of inaccurate data pursuant to Article 16 GDPR,
- Right to erasure of data stored by us pursuant to Article 17 GDPR,
- Right to restriction of processing pursuant to Article 18 GDPR,
- Right to data portability pursuant to Article 20 GDPR,
- Right to object pursuant to Article 21 GDPR,
- Right to lodge a complaint with a competent supervisory authority pursuant to Article 77 GDPR if you believe that the processing of personal data relating to you violates the GDPR,
- Right to withdraw at any time, pursuant to Article 7(3) GDPR, any consent granted to us pursuant to Article 6(1)(a) GDPR; this means that we may no longer continue the data processing based on this consent in the future.
Right to Object
Pursuant to Article 21 GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection may be submitted informally to the controller, for example by email to: datenschutz@npr-europe.com.
Automated Decision-Making Including Profiling
Your personal data is not used for automated decision-making.
This data protection information is currently valid and reflects the status as of January 2026.