Privacy policy
Privacy Policy
Last updated: August 2026
1. Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
NIQUA Vertriebs GmbH
Schulstr. 19
56290 Beltheim
Germany
Phone: +49 (0)6762 4093-0
Email: info@niquagroup.com
Website: www.niqua-shop.de
2. General Information on Data Processing
We process personal data only to the extent necessary to operate and provide our online shop, process orders, communicate with customers, and for the other purposes described in this Privacy Policy.
Personal data means any information relating to an identified or identifiable natural person. This may include, in particular, your name, postal address, email address, telephone number, IP address, payment information, order data and usage data.
Depending on the purpose of processing, we rely in particular on the following legal bases:
- Art. 6(1)(a) GDPR – consent
- Art. 6(1)(b) GDPR – performance of a contract or steps taken prior to entering into a contract
- Art. 6(1)(c) GDPR – compliance with a legal obligation
- Art. 6(1)(f) GDPR – legitimate interests pursued by us or a third party
Where processing is based on Art. 6(1)(f) GDPR, our legitimate interests may include the secure, stable and economically efficient operation of our online shop, fraud prevention, improvement of our services and handling of customer enquiries.
3. Data Retention
We retain personal data only for as long as necessary for the respective processing purpose or for as long as statutory retention obligations apply.
Data relating to contractual and business relationships may, in particular, be subject to retention requirements under German commercial and tax law.
The applicable retention period depends on the type of document concerned. Under German tax law, different retention periods may apply, including periods of ten, eight or six years.
Once the relevant purpose no longer applies and any applicable statutory retention period has expired, the data will be deleted unless another legal basis permits or requires continued storage.
4. Your Rights
Subject to the applicable legal requirements, you have the following rights in relation to your personal data:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent at any time with effect for the future
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
To exercise your rights, please contact us using the contact details provided above.
Right to Lodge a Complaint
You also have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Art. 77 GDPR.
The supervisory authority responsible for our registered office is:
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 (0)6131 8920-0
Email: poststelle@datenschutz.rlp.de
5. Provision of the Website and Server Log Files
When you access our online shop, certain technical information may be processed automatically.
This may include:
- IP address
- Date and time of access
- Pages and files accessed
- Referrer URL
- Browser type and version
- Operating system
- Device information
- Technical connection information
This data is processed in particular to provide the website, ensure its stability and security, detect attacks or misuse and analyse technical errors.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our online shop.
6. Shopify
Our online shop is operated using the Shopify e-commerce platform.
For merchants in Europe, the relevant Shopify entity is generally:
Shopify International Limited
Ireland
Shopify provides us with, among other things, the technical infrastructure for our online shop, hosting, checkout, security and other e-commerce functionality.
In this context, Shopify may process data including:
- IP address and device information
- Browser and usage data
- Contact information
- Billing and shipping addresses
- Order and shopping cart data
- Payment and transaction information
- Information about your interactions with our shop
Depending on the individual processing activity, the legal basis is Art. 6(1)(b), Art. 6(1)(c) or Art. 6(1)(f) GDPR or, where consent is required, Art. 6(1)(a) GDPR.
Although Shopify processes data of European merchants and customers through its European entity, international transfers may take place as part of the operation and provision of Shopify's services.
Further information on Shopify's processing of personal data can be found in Shopify's privacy notices.
7. Cookies and Similar Technologies
Our online shop uses cookies and similar technologies.
Cookies are small data files that can be stored on or accessed from your device.
Strictly Necessary Technologies
Certain cookies and technologies are required for the proper functioning of our online shop.
These may be used for functions such as:
- Shopping cart
- Checkout
- Login and customer accounts
- Security functions
- Language and country selection
- Storage of privacy preferences
Where the storage of information on or access to a user's device is strictly necessary to provide a digital service expressly requested by the user, such processing is carried out in accordance with Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Subsequent processing of personal data may, depending on the purpose, be based in particular on Art. 6(1)(b) or Art. 6(1)(f) GDPR.
Optional Technologies
Cookies and similar technologies that are not strictly necessary, particularly those used for analytics, personalisation or marketing purposes, are generally only used after you have provided your consent where such consent is legally required.
The legal basis in these cases is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future using the privacy or cookie settings provided on our website.
8. Customer Account
If you create or use a customer account, we may process data including:
- Name
- Email address
- Billing and shipping address
- Telephone number, where provided
- Order history
- Account information
This information is processed for the creation and administration of your customer account and for processing your orders.
The legal basis is Art. 6(1)(b) GDPR.
9. Orders and Contract Processing
When you place an order, we process the information required to perform the contract.
This may include:
- First and last name
- Billing address
- Shipping address
- Email address
- Telephone number, where provided
- Products ordered
- Order and transaction information
- Selected payment method
- Shipping information
We process this information in particular to process your order, handle payment, arrange delivery, issue invoices, process returns and complaints and communicate with you regarding your order.
The legal basis is Art. 6(1)(b) GDPR.
Where we are required to process or retain information due to tax, accounting or commercial-law obligations, the legal basis is Art. 6(1)(c) GDPR.
10. Payment Processing
For payment processing, the information required for the selected payment method is transmitted to or processed by the respective payment service provider.
The payment methods actually available to you are displayed during checkout. Depending on your country and availability, these may include credit card, PayPal, Klarna, Shop Pay, Apple Pay and Google Pay.
PayPal
If you select PayPal, the information required to process your payment is transmitted to companies within the PayPal group.
The processing required to carry out your selected payment is generally based on Art. 6(1)(b) GDPR.
PayPal may also process personal data under its own responsibility in accordance with its applicable privacy policy.
Klarna
If you select a payment method provided by Klarna, the personal data required to process the payment will be transmitted to Klarna.
Depending on the selected payment method, Klarna may process contact, order, payment and transaction information and may conduct additional checks under its own responsibility.
Further information is available in Klarna's applicable privacy policy.
Credit Cards and Shopify Payments
Where credit card payments or payment functions provided through Shopify are used, the information required to process the payment is processed by the payment service providers involved.
We generally receive only the information necessary to confirm and allocate the payment and do not receive complete credit card details where these are processed directly by the payment service provider.
Shop Pay
Where Shop Pay is available and selected, payment processing is carried out using Shopify's Shop Pay service.
In this context, Shopify may process information such as contact details, billing and shipping information and payment information.
Apple Pay and Google Pay
If you select Apple Pay or Google Pay, the payment is processed with the involvement of the respective service and participating payment service providers.
Any additional processing by Apple or Google is governed by the respective provider's terms, privacy information and your relationship with that provider.
The legal basis for payment processing required to perform the purchase contract is generally Art. 6(1)(b) GDPR.
11. Shipping and Delivery
To deliver your order, we transmit the personal data required for delivery to the relevant shipping or logistics provider.
This may include:
- Name
- Shipping address
- Telephone number, where required
- Email address, where required
- Shipping and consignment information
Depending on the destination and selected shipping method, we currently use in particular DHL, Deutsche Post and DPD.
The legal basis for transmitting information required to deliver your order is Art. 6(1)(b) GDPR.
Where additional contact details are used for services such as delivery notifications or flexible delivery options and separate consent is legally required, the processing is based on Art. 6(1)(a) GDPR.
12. Contacting Us
If you contact us by email, contact form, telephone or another communication channel, we process the information you provide in order to handle and respond to your enquiry.
This may include:
- Name
- Email address
- Telephone number
- Content of your message
- Order number and order information, where relevant
If your enquiry relates to a contract or steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR.
For other enquiries, processing is generally based on our legitimate interest in handling and responding to communications pursuant to Art. 6(1)(f) GDPR.
13. Newsletter and Email Marketing
You may subscribe to our newsletter through our online shop.
When you subscribe, we process your email address and any other information you provide voluntarily for this purpose.
Marketing newsletters are generally sent on the basis of your consent pursuant to Art. 6(1)(a) GDPR and in accordance with applicable German competition and marketing laws.
You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link contained in our marketing emails.
Where technically implemented, information regarding the delivery and use of newsletters may also be processed. Where consent is legally required for such tracking, it will only take place on the basis of your consent.
14. Social Media Profiles and Links
Our online shop may contain links to our profiles on social media platforms, including:
- TikTok
- YouTube
Where these are provided solely as links, personal data is generally transmitted to the relevant platform provider only when you click on the respective link.
When you visit a social media platform, the privacy terms and processing practices of the respective platform provider also apply.
If third-party content is embedded directly into our online shop, additional processing may take place. Where consent is legally required for such embedded content, it will only be loaded after the relevant consent has been provided.
15. Analytics, Statistics and Marketing
Shopify provides functions for analysing the use and commercial performance of online shops.
Depending on the functions used, information relating to page views, orders, visitor sources, devices and interactions may be processed.
Where processing is necessary for operating and carrying out basic statistical analysis of our online shop and does not involve access to information on your device that requires consent, processing may be based on Art. 6(1)(f) GDPR.
Our legitimate interest lies in understanding the use of our online shop and improving its functionality and commercial performance.
Where cookies, pixels or similar technologies are used for additional analytics, personalisation or marketing purposes, they will only be used after your consent where required by law.
The legal basis in such cases is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
16. Recipients of Personal Data
Where necessary and legally permitted, personal data may be disclosed to or processed by the following categories of recipients:
- Shopify and Shopify's subprocessors
- Payment service providers and banks
- Shipping and logistics providers
- IT and hosting service providers
- Communication and email service providers
- Tax advisers and other professional advisers
- Public authorities and government bodies where disclosure is required by law
Personal data is disclosed only where a valid legal basis exists.
17. International Data Transfers
The use of certain service providers may involve the processing of personal data outside the European Union or European Economic Area.
This may apply in particular to internationally operating service providers, their affiliated companies and subprocessors.
Where the European Commission has adopted an adequacy decision for the respective country, transfers may be based on that decision.
Where no adequacy decision applies, appropriate safeguards pursuant to Art. 46 GDPR are used where required. These may include European Commission-approved Standard Contractual Clauses, Binding Corporate Rules or other legally recognised transfer mechanisms.
In connection with Shopify, data relating to European merchants and customers is processed through Shopify's European entity, while international onward transfers may occur as necessary to operate and provide Shopify's services.
18. Data Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access and other forms of unlawful processing.
Our website uses encrypted connections for the transmission of data.
Our security measures are reviewed and adjusted where appropriate in light of technological developments and the risks associated with processing.
19. Automated Decision-Making
Individual payment service providers, Shopify or other service providers may use automated procedures under their own responsibility, for example for fraud prevention, risk assessment, identity verification or creditworthiness checks.
Further information on such processing is provided in the privacy information of the respective service provider.
Except for such services used in connection with the processing of your order or selected by you, we generally do not carry out decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, unless expressly stated otherwise.
20. Changes to this Privacy Policy
We may amend this Privacy Policy where changes to our online shop, the services we use or applicable legal requirements make this necessary.
The version currently published on our website applies.
Last updated: August 2026