Privacy notice
Privacy Policy
Last updated: July 2026
This notice describes how the personal data of users who visit and interact with the nrc.company website is processed, pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, “GDPR”).
Data controller
Data we collect
We process the personal data you provide voluntarily through the contact form on the website:
- First and last name;
- Email address;
- Company (optional);
- Message content.
We also automatically collect certain browsing data (for example the IP address) that is necessary for the operation and security of the website.
Purpose and legal basis
- Responding to requests sent through the contact form: the legal basis is the performance of pre-contractual measures and the legitimate interest in responding (art. 6, points b and f, GDPR).
- Operation and security of the website: legitimate interest of the Controller (art. 6, point f, GDPR).
- Legal obligations: statutory obligations to which the Controller is subject (art. 6, point c, GDPR).
Data retention
Data collected through the contact form is retained for as long as necessary to handle the request and, thereafter, for the period required by any legal obligations. Browsing data is retained for a limited period, except where required to investigate offences.
Disclosure of data
Data is neither disseminated nor sold to third parties for marketing purposes. It may be processed by technical service providers (hosting, email) acting as Data Processors. The website is hosted on infrastructure within the European Union.
Your rights
At any time you may exercise the rights provided for in Articles 15–22 of the GDPR: access, rectification, erasure, restriction, portability and objection to processing. You may also lodge a complaint with the Data Protection Authority. To exercise your rights, write to info@nrc.company.
Cookies
For information on the use of cookies, please see our Cookie Policy.