NCR Corporation is committed to implementing leading data protection standards to protect the confidentiality and integrity of Personal Data (as defined below) that we Process (as defined below), including Personal Data to which NCR has access in connection with the provision of products and services to our customers . This policy governs NCR Corporation and its global subsidiaries (collectively “NCR”) worldwide for all operations where NCR is the Controller of Personal Data.
“Contract Data” means any Personal Data about our customers, our customers’ customers, or our customers’ personnel that NCR Processes in connection with providing products or services to a customer under a contract.
“Controller” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.
“Personal Data” means information relating to an identified or identifiable natural person to the extent such information is afforded the protection of law. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number, location data, an online identifier or to one or more factors specific to the individual’s physical, physiological, mental, economic, cultural, or social identity. In the state of California, Personal Data may also include categories of information that identify or could be linked to a particular consumer or household such as identifiers, bank account and payment card numbers, Protected Class characteristics, commercial information, biometric information, professional, educational or employment-related information, Internet or electronic network activity, and inferences used to create a profile about a consumer in accordance with applicable law.
“Process” means any operation or set of operations that is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, blocking, erasure, or destruction.
“Processor” means a natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of a Controller.
“Special Categories,” “Sensitive Personal Data,” or “Characteristics of Protected Class(es)” (collectively, “Special Categories”) means, to the extent designated under applicable law, Personal Data revealing racial or ethnic origin, color, national origin; political opinions, religious, or philosophical beliefs; trade union membership; genetic data or biometric data for the purpose of uniquely identifying a natural person; data concerning age, disability, or health; or data concerning a natural person’s sex life or sexual orientation.
“You” means any individual about whom NCR collects, uses, or discloses Personal Data except as described below.
Collection of Personal Data
The categories of Personal Data NCR may collect about you depend on whether you are a customer, user, employee, or visitor and the requirements of applicable law.
You may provide Personal Data to NCR in a variety of ways, such as:
We may collect Personal Data about you in the following ways:
As described above, NCR websites, applications, and services may employ a variety of tools, including cookies, to help us improve your experience and determine the effectiveness of certain of our marketing initiatives.
Use of Personal Data
NCR is committed to collecting Personal Data for specified and legitimate purposes, to limit its Processing to the stated purpose, and to not Process that data further in a manner incompatible with such purpose.
Lawful Bases for NCR’s Processing. NCR will use Personal Data where reasonably necessary to fulfill NCR’s business needs (as described below), including to:
Additional Business Purposes. In addition to the foregoing, NCR may Process Personal Data in the following specific purposes and circumstances:
NCR is a global company with global operations, partners and suppliers. Where it is necessary for the efficient and effective performance of a business transaction or the fulfilment of one of the uses of Personal Data outlined above, NCR may need to transfer Personal Data from the country of collection to other countries, which may have data protection laws that are different from the laws where you live. Where such a transfer is made from one country or territory to another that is not deemed by the first exporting country (“Exporting Country”) to offer an adequate level of protection to the rights and freedoms of data subjects, NCR’s policy is to do so on the basis of contractual controls between the relevant group companies, partners, or suppliers designed to ensure that substantially the same level of protection is afforded to the Personal Data as in the Exporting Country. NCR’s contractual safeguards are based on the ‘standard contractual clauses’ issued by the European Commission and other data protection regulatory authorities of the Exporting Country.
Disclosure of Personal Data to Third Parties
We may share your Personal Data (including Contract Data) with the following categories of third parties:
Affiliates. We may share Personal Data within NCR.
Service Providers. We may share Personal Data with third-party suppliers and service providers that help us Process Personal Data. Examples of categories of suppliers include:, IT vendors (including IT and related services, security product providers, email providers, and application providers), customer service providers, contingent workers, consultants, and other vendors to support the provision of our products and services. It is NCR’s practice to enter into contracts with our suppliers and service providers that require them to handle your information in a manner consistent with NCR policy and applicable law.
Business Partners. We may provide Personal Data to business partners with whom we jointly offer products or services. In such cases, our business partner’s name may appear along with ours.
Disclosure in the Event of Merger, Sale or Other Asset Transfer. From time to time, NCR may contemplate entering into various business development activities which may include the sale, purchase, merger, or reorganization of one or more of its businesses. These business development activities may require the disclosure of Personal Data to the prospective or actual purchaser(s). When such disclosures are required, NCR will seek appropriate protections of your Personal Data.
Disclosures to Protect Us or Others. In certain circumstances, NCR may use or release Personal Data to third parties when disclosure is required or permitted by law (e.g. statute, judicial proceeding, court order, or subpoena). We also reserve our right to use or provide your Personal Data to third parties, including law enforcement, auditors, consultants, and government officials, to protect NCR’s rights, property, or safety, and/or the rights or property of our customers, business partners, suppliers, or other third parties. We may also disclosure Personal Data to enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.
Your Privacy Rights
Your Preferences. You have certain choices about your Personal Data. Where you have consented to the processing of your Personal Data, you may withdraw that consent at any time and prevent further processing as follows:
Please note you must separately opt out in each browser and on each device. Advertisements on third party websites that contain the AdChoices link may have been directed to you based on information collected by advertising partners over time and across websites. These advertisements may also provide a mechanism to opt out of the advertising partners’ use of this information for interest-based advertising purposes. Furthermore, even if you exercise your choices, you may still receive generic, non-targeted ads from NCR.
Your Individual Rights. In accordance with applicable law, we provide several mechanisms to allow you to:
You may log into your account or use the contact mechanisms specified below to make your request. We will process such requests in accordance with applicable laws. Where necessary to protect your privacy, NCR may take reasonable steps to verify your identity before acting on a request.
Consent Exceptions. Where you have previously provided your consent, you may withdrawal your consent at any time; however, doing so will not affect the lawfulness of NCR’s processing before your withdrawal of consent. Once you withdraw consent, we will no longer Process your information for the purpose(s) to which you originally consented unless there are compelling legitimate grounds for further Processing which override your interests, rights, and freedoms or if Processing is necessary for the establishment, exercise, or defense of legal claims.
Use of Automated Individual Decision Making Including Statistical Analysis and Profiling
NCR may use statistical and analytic techniques to support automated individual decisionmaking including profiling for the purpose of improving the quality, performance or efficiency of our products, services or processes or to screen applicants for employment, to facilitate compliance with law or policy, or to protect our information technology infrastructure.
Protection of Your Personal Data
NCR aims to provide leading data privacy protections to safeguard Personal Data. We prioritize safety across our business and commit to operating in accordance with the laws applicable to the countries in which we conduct business and with our contractual requirements. Furthermore, NCR takes reasonable and appropriate steps designed to safeguard Personal Data in accordance with these laws and requirements.
Retention of Personal Data
NCR retains Personal Data only for so long as it is necessary to support the overall purpose(s) for which NCR collected such information. We will retain and use your personal information as necessary to comply with our business and legal obligations, resolve disputes, protect our assets, and enforce our rights and agreements. We take steps to minimize access, use and retention of Personal Data to what is reasonably necessary.
NCR’s applications and websites are not directed to children under the age of 16. By your use of our applications and websites, you affirm that you are at least 16 years of age. If you are a parent or a guardian, and you believe your child has provided NCR with Personal Data without your consent, please contact us as described below.
Changing Your Preferences and Contacting Us
You may change your marketing preferences by clicking here.
864 Spring Street NW
Atlanta, GA 30308
US Toll-free: 1-800-CALL-NCR
We will respond to your request within 30 days of submission.
If NCR does not satisfactorily address your concerns, you have the right to lodge a complaint with your any national data protection authority of competent jurisdiction.