Privacy policy
1. Introduction
This Privacy Policy explains how Unismartech GmbH (hereinafter "we" or "us") collects, uses, and processes your personal data when you visit and use our online store at www.nitigo.eu (the "Online Store"). Unless otherwise stated in this Policy, we are responsible for all personal data collected through the Online Store. Personal data means any information that can identify an individual, such as name, email address, or telephone number, as well as technical data that can be linked to a person.
2. Contact Information
Unismartech GmbH
Breite Straße 3, 40213 Düsseldorf, Germany
Managing Director: Yang Zeng
Email: support@nitigo.eu
3. Overview of Processing Activities
Our Online Store involves the following main data processing activities:
Automatic collection of server log files
Data collection when you contact us
Use of cookies
Order processing and fulfilment
Warranty registration
3.1 Server Log Files
Each time you visit our Online Store, we automatically collect the following technical data (including personal data):
IP address
Pages or files visited
Date and time of access
Volume of data transferred
Success status of access
Browser type and version
Operating system
Device information (e.g., MAC address)
Referrer URL (previously visited page)
This data is not merged with other personal data you actively provide. We collect log files to manage the Online Store and to detect and defend against unauthorised access.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests). Our legitimate interest is to ensure the secure operation of the website and to track attacks.
Retention period: Server log files are automatically deleted after 180 days. In the event of unauthorised access attempts (e.g., hacking), we reserve the right to retain the files for a longer period.
3.2 Data Collected When You Contact Us
When you contact us by email or phone, we store the information you provide (e.g., email address, name, phone number) in order to process your inquiry.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures at your request).
Retention period: We will delete the data once it is no longer needed to process your inquiry. If statutory retention obligations apply, we will restrict processing.
3.3 Use of Cookies
We use cookies to improve user experience, analyse website usage, and enhance our services. The cookies we currently use serve the following purposes:
Analyse product interactions and performance
Debug and identify functional errors
Detect security incidents and prevent fraud or illegal activities
Improve or enhance our website and products
Please note that if you do not accept cookies, certain functions of the website may be
limited.
What are cookies? Cookies are small text files stored on your device when you visit our Online Store. Session cookies are automatically deleted when you close your browser. Persistent cookies have a retention period of no more than two years. We may also use third-party cookies.
You can restrict or disable cookie storage through your browser settings. However, this may affect website functionality and ease of use.
Legal basis: Necessary cookies are processed on the basis of Art. 6(1)(f) GDPR (legitimate interests) to ensure the proper functioning of the website. Non-necessary cookies are only set with your explicit consent via the consent manager when you first visit our Online Store, based on Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time.
3.4 Order Processing and Fulfilment
When you place an order, we collect the personal information required to process and fulfil the order (e.g., name, address, contact details, payment information). Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: We will delete the data once it is no longer needed for order processing. If statutory retention obligations apply, we will restrict processing.
3.5 Warranty Registration
When you register your NITIGO product for the warranty on our Online Store, we collect the following data: email address, place of purchase, order number, product model, country, optionally your phone number and – if you upload it – your proof of purchase. We use this data to register your product, to check and handle warranty claims, and to send you service messages about your warranty (e.g. confirmation of your registration).
Legal basis: Art. 6(1)(b) GDPR (performance of our warranty and customer service obligations). Promotional emails are only sent if you have separately consented (Art. 6(1)(a) GDPR); you may withdraw this consent at any time.
Service providers: Shopify (shop system), Klaviyo (email delivery) and Gorgias (customer service) process this data on our behalf. Transfers to the USA are based on the EU-U.S. Data Privacy Framework or EU Standard Contractual Clauses.
Retention period: We store the data for the duration of the warranty period and delete it afterwards. If statutory retention obligations apply, we will restrict processing.
4. Your Rights
You have the following rights:
To request, free of charge, information about the personal data we hold about you
To request rectification of inaccurate data
To request restriction of processing or deletion of unlawfully or excessively stored data (subject to statutory retention obligations and Art. 17(3) GDPR)
To receive the data you have provided in a structured, commonly used, and machine
readable format (right to data portability), provided that the processing is based on consent or contract performance
To lodge a complaint with a supervisory authority. A list of data protection authorities in Germany and Europe can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
5. Right to Object to Processing (Art. 21 GDPR)
If we process your personal data on the basis of public interest (Art. 6(1)(e) GDPR) or legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
To exercise your right to object, please send an email to: support@nitigo.eu
6. Withdrawal of Consent
If you have given your consent to the processing of your personal data, you may withdraw it at any time without giving any reason. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
To withdraw your consent, please send an email to: support@nitigo.eu
7. Recipients of Data
As a general rule, we do not disclose your personal data to third parties unless otherwise stated in this Policy. Possible categories of recipients include:
Service providers: Vendors who perform services on our behalf (e.g., order fulfilment, payment processing, communication optimisation, fraud prevention, product support). These third parties use your data only as necessary to provide the services.
Other users: Content you publicly post (e.g., your name in a review) may be visible to other users. We are not responsible for the privacy practices of other users.
Legal and similar disclosures: We may access, preserve, or disclose your information if we believe it is necessary to comply with legal processes (e.g., court orders, government requests), to protect rights, property, safety, or to investigate fraud.
Merger, sale, or other asset transfers: In the event of a merger, acquisition, reorganisation, bankruptcy, or sale of assets, your information may be transferred as part of such transaction, subject to the then-current Privacy Policy.
8. Transfers to Countries Outside the European Economic Area
In the course of our business operations, your personal data may be transferred to third countries outside the European Economic Area (EEA). Such transfers are made solely for the purpose of performing contracts or maintaining our business relationship with you.
The European Commission has issued adequacy decisions for certain third countries (list and copies available at: https://commission.europa.eu/law/law-topic/data
protection/international-dimension-data-protection/adequacy-decisions
For countries without an adequacy decision, we implement appropriate safeguards, such as binding corporate rules, EU standard contractual clauses, certifications, or approved codes of conduct.
9. No Obligation to Provide Personal Data
We do not condition the conclusion of a contract on your prior provision of personal data. You are generally not under any legal or contractual obligation to provide us with your personal data. However, certain services may be limited if you do not provide the necessary information (in which case you will be informed accordingly).
10.No Automated Decision-Making
We do not engage in automated decision-making, including profiling, as defined in Art. 22(1) and (4) GDPR.