Privacy Notice

This notice explains how PNC LLC ("PNC", "we", "us") uses personal data about the people we deal with in business: contacts at companies we may work with, customers, suppliers, people who write to us, newsletter subscribers, and visitors to pnc-ks.com. It applies to people in the European Economic Area (EEA), the United Kingdom, Switzerland, Kosovo and elsewhere.

01Who we are

The controller of your personal data is:

For any privacy question or request, write to info@pnc-ks.com or to the address above. More company details are in our Legal Notice.

02What personal data we use

• Business identity and contact details: name, job title, employer, work email address, work phone number, business address and professional profile link (for example LinkedIn).
• Information about your company's work that your company has made public, such as the products and processes described on its website. This is mainly business information, but we may link it to you as our contact.
• Correspondence: emails, messages, call notes, drawings, CAD data and requests for quotation that you send us.
• Contact form: first and last name, email address, phone number (optional), subject and message. The form sends your message to our mailbox by email; it is not stored on the web server.
• Outreach records: which emails or LinkedIn messages we sent you, when, whether you replied, and any request not to be contacted.
• Newsletter: your email address and a record of your consent – the wording you agreed to, the page you signed up on, the date, time and IP address of your sign-up and of your confirmation click, and the date you unsubscribe (see section 05).
• Website data: technical data needed to deliver our website, such as IP address, browser type and pages requested, kept in our hosting provider's server logs, and a cookie that remembers your cookie choice. Only if you agree in our cookie settings: Google Analytics usage data (pages viewed, approximate location derived from your IP address, device and browser information and an online identifier stored in a cookie), and Apollo.io form enrichment (the email address you type into a form on our website is checked against Apollo's business-contact database to pre-fill company details). Details: Cookie Policy.

We do not seek, and ask you not to send us, sensitive personal data (such as health information).

03Where we get it

• From you, when you contact us, use our contact form, request a quote, sign up for our newsletter, meet us or work with us.
• From public sources: your company's website, public company registers (such as Companies House in the UK), trade directories, trade-fair exhibitor lists and professional networks such as LinkedIn.
• From a business-contact data provider: Apollo.io, a database of professional contact details that companies and professionals have published or that Apollo has compiled. We use it to find the right person at a company (for example the production manager) and their work email address.

When we contact you for the first time using data we did not get from you, our first message names us, tells you where we got your details, explains your right to object and how to opt out, and links to this notice.

04Why we use it and our legal basis

Email marketing rules. Data protection law is not the only law that applies to marketing emails, and some countries require the recipient's prior consent even for business-to-business emails. In the United Kingdom we send unsolicited business emails only to "corporate subscribers", meaning limited companies, LLPs, public bodies and similar organisations, as allowed by the Privacy and Electronic Communications Regulations 2003 (PECR); we do not send such emails to sole traders or partnerships in the UK without their prior consent. In countries whose law requires prior consent for marketing emails – for example Germany (§ 7 of the Act against Unfair Competition, UWG), Austria (§ 174 of the Telecommunications Act 2021, TKG) and Kosovo (Article 18 of Law No. 04/L-094 on Information Society Services) – we do not send them without consent, unless a statutory exception for existing customers applies. Every marketing email identifies PNC, gives our postal address and offers a simple way to opt out.

This notice explains how we handle personal data. It does not replace consent where a law requires it, and it is not a statement that any particular message is permitted.

We have weighed our interests against yours: the contact is business-to-business, relevant to your role, low in volume and easy to stop. You can ask us for this assessment.

05Our newsletter

You receive our newsletter only if you ask for it. When you enter your email address in the newsletter form and tick the consent box, we send you an email with a confirmation link ("double opt-in"). Nothing is sent to you until you click that link and confirm. Unconfirmed sign-ups are deleted after 30 days.

The newsletter contains news about our projects, capabilities and manufacturing services. Every newsletter contains an unsubscribe link; you can also reply "unsubscribe" or write to info@pnc-ks.com. Messages you send through our contact form, quotation requests and business correspondence never add you to the newsletter.

Sign-ups and consent records are stored on our web hosting account, outside the publicly accessible part of the website.

06Your right to object

07Who we share it with

We do not sell or rent personal data. We share it only with:

• Service providers who process data for us under contract: Apollo.io (Apollo.io, Inc., USA) – business-contact database and outreach tool; our outreach emails are sent from our own mailbox, which is connected to Apollo through Apollo's service provider Nylas (USA); Apollo also provides the website form enrichment if you consent to it; Google (Google Ireland Limited and Google LLC, USA) – Google Analytics, only if you consent; our website hosting provider – hosts the website, processes the contact and newsletter forms and keeps server logs; our email service provider – hosts our mailboxes.
• LinkedIn, when we contact you or you contact us through it. LinkedIn processes this data under its own privacy policy.
• Logistics partners (freight forwarders and customs agents), only to deliver orders.
• Professional advisers (accountants, lawyers) and authorities where the law requires it.

08International transfers

PNC is established in Kosovo, outside the EEA, the United Kingdom and Switzerland. When you send us personal data, or we collect it, it is processed by us in Kosovo. The European Commission has not adopted an adequacy decision for Kosovo. Kosovo's data protection law (Law No. 06/L-082 on Protection of Personal Data) is closely modelled on the EU GDPR, and we apply EU GDPR and UK GDPR standards to data about people in those regions.

Some of our service providers are in the United States. Apollo's data processing agreement, which forms part of our contract with Apollo, provides for transfers under the EU-U.S. Data Privacy Framework and, where required, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and their adaptation for Switzerland. Google LLC participates in the EU-U.S. Data Privacy Framework. You can ask us for more information about these safeguards.

09How long we keep it

10Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use it;
• object to our use of it (see section 06);
• receive data you gave us in a portable format, where the law provides this;
• withdraw consent at any time, where we rely on consent (for the newsletter: the unsubscribe link; for cookies: "Cookie settings" in the footer). Withdrawal does not affect processing before it.

To use any right, email info@pnc-ks.com. We may ask you to confirm your identity. We answer within one month (within 30 days for requests under the Swiss Federal Act on Data Protection), or tell you within that month if we need up to two more months for a complex request. There is normally no charge.

11Complaints

If you are unhappy with how we have used your personal data, please complain to us first at info@pnc-ks.com with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.

You also have the right to complain to a data protection authority:

• Kosovo: Information and Privacy Agency (Agjencia për Informim dhe Privatësi), aip.rks-gov.net.
• EEA: the data protection authority in the country where you live, work or where the alleged infringement took place – see the list of EEA authorities.
• United Kingdom: Information Commissioner's Office (ICO), ico.org.uk/make-a-complaint, telephone 0303 123 1113.
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.

12Automated decisions

We do not make decisions about people by automated means that have legal or similarly significant effects. When we decide which companies to contact, we look at their published products and processes.

13Security

We protect personal data by limiting access to the people who need it and by securing our business accounts with strong passwords. Our website and its forms use encrypted HTTPS connections. Contact-form messages are not stored on the web server, and newsletter records are kept outside the public part of the website. If you want to send us confidential drawings or CAD data, please ask us for a secure way to transfer them rather than using the contact form.

14Cookies

We use one strictly necessary cookie to remember your cookie choice. Google Analytics and Apollo.io form enrichment run only if you agree. You can change your choice at any time with Cookie settings. Full details are in our Cookie Policy.

15Changes to this notice

We may update this notice. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you where we reasonably can.