Privacy policy
Last updated: March 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
NIQUA Vertriebs GmbH
Schulstr. 19
56290 Beltheim
Germany
Phone: +49 (0)6762 4093-0
Email: info@niquagroup.com
Website: www.niqua-shop.de
2. General Information on Data Processing
We process personal data of our users only to the extent necessary to provide a functional website and our services.
Processing is carried out in particular on the basis of:
- Art. 6(1)(b) GDPR (performance of a contract)
- Art. 6(1)(c) GDPR (legal obligation)
- Art. 6(1)(f) GDPR (legitimate interests)
- Art. 6(1)(a) GDPR (consent, where required)
3. Data Retention
Personal data is stored only as long as necessary to fulfill the respective purposes or as required by statutory retention periods.
After expiry of legal retention periods (in particular up to 10 years under commercial and tax law), the data will be deleted.
4. Rights of Data Subjects
Within the framework of the applicable legal provisions, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent
You also have the right to lodge a complaint with a supervisory authority.
5. Provision of the Website (Log Files)
When visiting our website, the following data is automatically collected:
- IP address
- Date and time of request
- Browser type and operating system
- Referrer URL
This data is processed to ensure the technical operation and security of the website.
Legal basis: Art. 6(1)(f) GDPR
6. Cookies
Our website uses cookies.
Technically Necessary Cookies
These are required to provide essential shop functions (e.g. shopping cart, language settings).
Legal basis: Art. 6(1)(f) GDPR
Optional Cookies (e.g. Marketing / Tracking)
These are only set with your consent.
Legal basis: Art. 6(1)(a) GDPR
You can manage or disable cookies at any time via your browser settings.
7. Customer Account / Registration
When creating a customer account, we process:
- Name
- Address
- Email address
- Order data
Purpose: contract processing and customer management
Legal basis: Art. 6(1)(b) GDPR
8. Webshop and Hosting (Shopify)
Our online shop is operated via Shopify Inc.:
Shopify Inc.
151 O’Connor Street
Ottawa, ON K2P 2L8
Canada
Shopify processes personal data on our behalf (hosting and shop operation).
Data may be transferred to third countries (e.g. Canada, USA).
Transfers are carried out based on appropriate safeguards (e.g. standard contractual clauses).
Further information:
https://www.shopify.com/legal/privacy
9. Orders and Contract Processing
Within the scope of orders, we process:
- Name and address
- Contact details
- Order data
- Payment information
Purpose:
- Contract fulfillment
- Delivery
- Customer service
Legal basis: Art. 6(1)(b) GDPR
10. Payment Service Providers
To process payments, data is transferred to payment providers.
PayPal
PayPal (Europe) S.à.r.l. & Cie. S.C.A.
Luxembourg
If PayPal is selected, payment data will be transmitted to PayPal.
Further information:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Other Payment Methods
Depending on the selected payment method, data may be transferred to additional providers (e.g. credit card providers, Klarna).
11. Data Sharing
Personal data is only shared where necessary, for example with:
- Shipping service providers
- Payment providers
- IT service providers
- Authorities (where legally required)
12. International Data Transfers
Personal data may be transferred to countries outside the EU.
In such cases, we ensure an adequate level of data protection (e.g. via standard contractual clauses).
13. Data Security
We implement appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access.
14. Changes
We reserve the right to amend this privacy policy at any time.