Data Protection

Privacy Policy.

This Privacy Policy explains how personal data is processed when users visit this website or contact TOPNC through the website.

Controller

Responsible Entity

Shanghai Top Numerical Control Technology Co., Ltd.
上海拓璞数控科技股份有限公司

Registered Address

No. 888 Guanghua Road
Minhang District
Shanghai, China

Europe Office

Innovationszentrum für Nachhaltigkeit und Produktionstechnologie GmbH
Werftstraße 1
26954 Nordenham, Germany

Contact

Email: sales@topnc.com.cn
Phone: +86 021-64980399
Phone: +86 400-820-5993

Data Protection Contact

dataprotection@topnc.de

General information

We process personal data only where this is necessary for the operation of this website, for communication with users, for responding to enquiries, for website analytics or where users have given their consent.

The legal bases may include Art. 6(1)(a) GDPR where consent is given, Art. 6(1)(b) GDPR where processing is necessary for pre-contractual or contractual communication, Art. 6(1)(c) GDPR where legal obligations apply, and Art. 6(1)(f) GDPR where processing is necessary for legitimate interests such as website security and communication handling.

Hosting and server log files

When this website is accessed, technical data may be processed automatically by the web server. This may include the IP address, date and time of access, requested URL, referrer URL, browser type, operating system and transferred data volume.

This processing is necessary to provide the website, ensure technical stability and protect the website against misuse. The legal basis is Art. 6(1)(f) GDPR.

The website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

The website is hosted on servers located in Germany.

Server log files are stored only for as long as technically necessary for website operation, security and error analysis and are then deleted or anonymized, unless a longer retention period is legally required or necessary for the establishment, exercise or defence of legal claims.

Contact forms

Contact Forms

If you contact us via a contact form on this website, the information you provide will be processed in order to handle your enquiry and respond to your request.

The data processed may include your name, company name, email address, telephone number, message content, selected subject or product interest, as well as technical metadata such as the date and time of submission.

The processing is carried out for the purpose of responding to your enquiry, preparing offers, initiating or maintaining business relationships and documenting the communication.

The legal basis is Art. 6(1)(b) GDPR where the processing is necessary for pre-contractual measures or for the performance of a contract. In other cases, the legal basis is Art. 6(1)(f) GDPR based on our legitimate interest in efficiently processing and documenting incoming enquiries.

The data submitted via the contact form may be forwarded internally to the responsible departments or employees. If necessary for handling the enquiry, the data may also be processed in our CRM system or by service providers acting on our behalf.

The data will be stored for as long as necessary to process the enquiry and any follow-up communication. If the enquiry leads to a business relationship or if statutory retention obligations apply, the data may be stored for a longer period in accordance with applicable legal requirements.

We do not use contact form data for marketing purposes without a separate legal basis or consent.

Pipedrive

We may use Pipedrive as a customer relationship management system to process enquiries, manage communication, coordinate sales activities and document customer-related processes.

Data processed in Pipedrive may include contact details, company information, communication history, enquiry content, service or sales topics and internal notes related to the enquiry.

The legal basis may be Art. 6(1)(b) GDPR for pre-contractual or contractual communication and Art. 6(1)(f) GDPR for efficient customer and enquiry management.

Provider:

Pipedrive OÜ
Mustamae tee 3a
Tallinn, 10615
Estonia

Pipedrive may process personal data on our behalf as a data processor. Where required, a data processing agreement pursuant to Art. 28 GDPR is concluded with Pipedrive.

Further information on data protection at Pipedrive can be found in Pipedrive’s Privacy Notice.

Google Analytics

This website uses Google Analytics to analyze website usage and improve the website. Google Analytics may process information such as page views, interactions, approximate location, device and browser information, referrer information and user behavior on the website. Google Analytics is used only with consent where required. The legal basis is Art. 6(1)(a) GDPR. Users can withdraw their consent at any time through the cookie or consent settings on this website. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google LLC in the United States.

YouTube videos

This website may embed videos from YouTube in the future. YouTube is a service provided by Google. When a YouTube video is loaded or played, personal data may be processed by Google, including IP address, device information and information about the video interaction. YouTube videos should be embedded only after user consent or through a privacy-friendly two-click solution. The legal basis is Art. 6(1)(a) GDPR where consent is required. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google LLC in the United States.

Cookies and consent management

This website may use cookies and similar technologies. Some cookies are technically necessary for the operation of the website. Other cookies or technologies, such as analytics or embedded media, are used only with consent where required.

Users can change or withdraw their consent at any time through the cookie or consent settings.

International data transfers

Personal data may be transferred to recipients outside the European Economic Area where this is necessary for processing enquiries, providing services or using third-party tools. This may include transfers to China in connection with TOPNC headquarters and transfers to the United States in connection with certain third-party services. Where required, such transfers are based on appropriate safeguards, consent or another legal basis under the GDPR.

Retention periods

Personal data is stored only for as long as necessary for the respective purpose or as required by legal retention obligations. Enquiry data is generally stored for the duration necessary to process the enquiry and any related business communication.

Rights of data subjects

Users have the right to request access to their personal data, rectification, erasure, restriction of processing, data portability and objection to processing where the respective legal requirements are met. Where processing is based on consent, users may withdraw their consent at any time with effect for the future. Users also have the right to lodge a complaint with a competent data protection supervisory authority.

Updates

We may update this Privacy Policy to reflect changes to this website, legal requirements or processing activities.

Last updated: July, 2026