If you have any questions or concerns regarding the processing of your personal data or if you wish to exercise any of your rights, please contact us by the form below or use the contact information provided on the web page.

We will respond to you without undue delay and no later than 30 days after we received the request.

Right of access

You have the right to request confirmation whether or not your personal data is processed by NCC, and if that is the case, get access to your personal data and additional information such as the purposes of the processing.

Right to rectification

You have the right to obtain the rectification of inaccurate personal data concerning yourself. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.

Right to erasure ("right to be forgotten")

You have the right to obtain erasure of your personal data. NCC as the controller have the obligation to erase personal data without undue delay when one of the following conditions apply:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing is based and where there is no other legal ground for the processing.
  • You object to the processing and there are no overriding legitimate grounds for the processing.
  • the personal data have been unlawfully processed.
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which NCC as controller is subject.

Right to object

You have the right to object to processing of your personal data that is based on NCC’s legitimate interest. If your objection is accepted, we will stop processing your personal data. If we want the processing to proceed, we will state our reasons in our response to you. If you object to processing for direct marketing purposes, we will always stop that processing.

Right to restriction of processing

You have the right to ask for a temporarily restriction of the processing of your personal data under certain circumstances such as when the processing is unlawful, during rectification or when you don’t want your data erased.

Right to data portability

The right to data portability entitles you to receive a copy of your personal data; and/or have your personal data transmitted from NCC to another controller.

You have the right to receive your personal data, in a structured, commonly used and machine-readable format. The right to data portability only applies when NCC is the controller for this information and the lawful basis for processing is consent or for the performance of a contract.

Right to not be subject to automated decision-making including profiling

The right of not being subject to a decision solely based on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Your rights based on the respective legal basis for processing

Rights English.

Conditions for consent

You have the right to ask for information about given consent and to withdraw the consent.

Data Subject Access Request Form

1. Data Retention

We will only keep a copy of these documents until your subject access request has been fully processed and issued you and all relevant review or appeal procedure timelines have expired.

2. Requester Name (Data Subject) and Contact Information

3. Proof of Data Subject's Identity

In line with Article 12(6) of GDPR, we will require proof and additional information of your identity before we can proceed with your access request. Hence, you must provide an identification that clearly identify your identity.

Before we proceed with your access request, please provide proof of identification.

*A copy of you holding up your passport, or

*A copy of Driver’s License

4. Information Requested

To assist NCC process your request efficiently, please provide as much details as possible about the personal data you are requesting access to or in relation to your interaction with us in the past. Preferable, include names, type of documents, approximately time frames, areas of department/office you have corresponded with, types of applications you may have made, or any other information that would facilitate us to locate your personal data.
We will contact you for additional information if the scope of your request is unclear or if you don’t provide sufficient information for us to perform an appropriate search.