Privacy policy
Last updated: [date to be completed at launch]
1. Who processes your data
The data controller is the publisher of the website nvpowerstation.com, identified in the legal notice.
For any question about your personal data: sales.eu@nvpowerstation.com
2. What we collect, and why
We only collect what we need. No data is sold, rented or transferred to third parties for commercial purposes.
| What we collect | Why | Legal basis | Retention |
|---|---|---|---|
| Name, company, email, phone, geographical area | Answer a request for a quotation or information | Pre-contractual measures taken at your request | 3 years from the last contact |
| Content of your message | Handle your request | Pre-contractual measures | 3 years from the last contact |
| Billing and delivery details | Fulfil an order | Performance of the contract | 10 years (accounting obligation) |
Mandatory form fields are marked. Without them, we cannot handle your request.
We do not collect any sensitive data within the meaning of article 9 of the GDPR, and the website is not aimed at minors.
3. Who can access it
Your data can be accessed by:
- the publisher's sales and administrative staff, as far as they need it;
- our technical service providers acting on instruction, in particular the website host and our email provider;
- carriers and freight forwarders, for the data strictly needed for a delivery;
- the competent authorities, where required by law.
Each service provider is bound by a contract compliant with article 28 of the GDPR.
4. Transfers outside the European Union
The publisher is established in the United Arab Emirates. Processing your data therefore involves a transfer outside the European Union.
These transfers are covered by the standard contractual clauses adopted by the European Commission, supplemented where necessary by additional technical measures. A copy of these safeguards can be obtained on written request.
Some of our service providers may also process data outside the Union, under the same safeguards.
5. Security
The website is served over HTTPS. Access to data is limited to the people who need it and protected by authentication. The service providers selected offer appropriate security guarantees.
No system is infallible: in the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with article 34 of the GDPR.
6. Your rights
Under the conditions laid down by the GDPR, you have the right:
- of access: obtain a copy of the data concerning you;
- to rectification: have inaccurate data corrected;
- to erasure: have your data deleted, unless there is a legal obligation to keep it;
- to restriction: freeze a disputed processing;
- to object: object to processing based on legitimate interest, and at any time to direct marketing;
- to portability: receive your data in a structured format;
- to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- to set instructions regarding what happens to your data after your death.
To exercise these rights, write to sales.eu@nvpowerstation.com. You will receive an answer within one month, which may be extended by two months for a complex request. Proof of identity may be requested in case of reasonable doubt.
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
7. Cookies
The website does not place any cookies or trackers: see the cookie policy.
8. Changes
This policy may be amended to reflect legal or technical changes. The date of the last update appears at the top of the page. In the event of a substantial change, you will be informed by appropriate means.