GDPR Compliance

Last updated: August 2026 · NH Race Engine, Haagweg 40, 5995 AB Kessel, Netherlands

NH Race Engine is committed to the EU General Data Protection Regulation (GDPR). This page explains your rights over your personal data and exactly how to exercise them. For what data we collect and why, see our Privacy Policy.

Data Controller

The data controller for nhraceengine.nl is:
NH Race Engine · Haagweg 40, 5995 AB Kessel, Netherlands
Email: info@nhraceengine.nl · KvK 83495096 · VAT NL003829663B19

Your Rights Under GDPR

As an EU/EEA resident you have the following rights over your personal data:

Right of AccessAsk us what personal data we hold about you and receive a copy.
Right to RectificationHave inaccurate or incomplete data corrected.
Right to Erasure"Right to be forgotten" — have your data deleted where no legal duty (e.g. tax law) requires retention.
Right to RestrictionHave processing of your data temporarily limited, e.g. while a correction is pending.
Right to PortabilityReceive the data you provided in a structured, machine-readable format.
Right to ObjectObject to processing based on legitimate interest, including any direct marketing — we stop immediately.
Withdraw ConsentWhere processing is based on consent (cookies, newsletter), withdraw it at any time — as easy as giving it.
No Automated DecisionsWe do not make decisions with legal or significant effect based solely on automated processing.

How to Exercise Your Rights

  1. Email [email protected] with the subject "GDPR Request".
  2. Tell us which right you want to exercise and the name/email your data is stored under.
  3. We may ask you to confirm your identity (to protect your data from strangers).
  4. We respond within 30 days — usually much faster. Exercising your rights is free of charge.

Legal Bases We Rely On

ProcessingLegal Basis (GDPR Art. 6)Retention
Processing & delivering ordersPerformance of a contract7 years (Dutch tax law)
Invoicing & accountingLegal obligation7 years (Dutch tax law)
Answering quote/contact requestsPre-contractual steps / consentUp to 2 years
Customer accountPerformance of a contractUntil deletion requested
NewsletterConsent (withdrawable any time)Until unsubscribe
Analytical cookiesConsent via cookie bannerPer cookie settings
Fraud prevention & site securityLegitimate interestUp to 12 months

Who Processes Data for Us

We use a small number of processors, each under a written data-processing agreement (GDPR Art. 28):

  • Payment provider — processes checkout payments (PCI-DSS compliant)
  • Carriers & freight companies — receive name/address/phone to deliver your order
  • Hosting & IT suppliers — store website data, within the EU/EEA wherever possible
  • Email service — sends order confirmations and replies

We never sell personal data. Where a provider processes data outside the EEA, this happens under EU Standard Contractual Clauses.

Data Security & Breaches

The site runs over HTTPS/SSL; access to personal data is limited to staff who need it; systems are kept updated. If a data breach occurs that risks your rights or freedoms, we notify the Autoriteit Persoonsgegevens within 72 hours and affected individuals without undue delay, as GDPR Articles 33–34 require.

Cookies & Consent

Non-essential cookies (analytics, marketing) load only after your consent via the cookie banner. You can change or withdraw consent at any time via the cookie settings link in the footer. Essential cookies (cart, checkout, security) do not require consent.

Complaints

Unhappy with how we handle your data? Contact us first — we respond within 30 days. You also always have the right to complain to the Dutch supervisory authority:
Autoriteit Persoonsgegevens · Postbus 93374, 2509 AJ Den Haag · autoriteitpersoonsgegevens.nl · +31 (0)70 888 85 00

Questions?

NH Race Engine · Haagweg 40, 5995 AB Kessel, Netherlands · info@nhraceengine.nl · KvK 83495096 · VAT NL003829663B19 · Also see: Privacy Policy · Terms & Conditions