Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it required for the conclusion of a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only insofar as no different statement is made in the following processing operations.

"Personal data" means all information relating to an identified or identifiable natural person.

Server Logfiles

You can visit our websites without providing any information about yourself.

Whenever you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server logfiles). This stored data includes, for example, the name of the page accessed, the date and time of access, your IP address, the amount of data transferred, and the requesting provider. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring trouble-free operation of our website as well as to improve our offering.

Your data is transmitted, among other things, to Canada. There is an adequacy decision from the EU Commission for data transfers to Canada.

Contact

Responsible Party

Feel free to contact us. The responsible party for data processing is: Swiss Ecommerce Limited, Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong, info@nivome.com

Customer Initiated Contact by Email

If you contact us by email on your own initiative to conduct business, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves to process and answer your contact request. If the contact is for the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, quote preparation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

If the contact is for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.

We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. Data processing serves the purpose of contact.

If the contact is for the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, quote preparation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR. If the contact is for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation. We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Orders

Collection, Processing and Transfer of Personal Data in Orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your requests. The provision of data is required for contract conclusion. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.

Your data is transferred, for example, to the shipping companies and dropshipping providers of your choice, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe statutory provisions. The scope of data transmission is limited to a minimum.

Your data is transmitted, among other things, to Canada. There is an adequacy decision from the EU Commission for data transfers to Canada.

Ratings

Data Collection When Writing a Comment or Review

When commenting on or rating an article or post, we collect your personal data (name, email address, comment text) only to the extent you provide it. Processing serves the purpose of enabling commenting/rating and displaying comments/ratings.

By submitting your comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke this consent at any time by notifying us, without affecting the lawfulness of processing carried out based on the consent until revocation. Your personal data will subsequently be deleted.

If your comment is published, the name you provided and the email address you provided will be published.

Inventory Management

Use of an External Inventory Management System

We use an inventory management system for contract processing under data processing. Your personal data collected during ordering is transmitted to sevDesk for this purpose.

Payment Service Providers

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/en/webapps/mpp/ua/privacy-full

Use of PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of enabling you to pay via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data when the website is accessed (e.g., IP address, device type, operating system, browser type, location of your device). Cookies can also be used for this purpose. Cookies enable the recognition of your browser.

Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in offering various payment options in a customer-oriented manner. You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.

With the selection and use of PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you with your chosen payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. For more information about data processing when using the PayPal Express payment service, please see the privacy policy at www.paypal.com/en/webapps/mpp/ua/privacy-full

Use of PayPal Check-Out

We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of enabling you to pay via the payment service. With the selection and use of payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you with your chosen payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

Credit Card via PayPal, Direct Debit via PayPal & "Pay Later" via PayPal

For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit reference agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default for a balanced decision about establishing, executing, or terminating the contractual relationship. The credit check may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, in the calculation of which address data is included, among other things. Your protected interests are considered in accordance with legal requirements. Data processing serves the purpose of credit checking for contract initiation. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in protection against payment default when PayPal assumes advance liability.

You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR by notifying PayPal for reasons arising from your particular situation. The provision of data is required for contract conclusion with your desired payment method. Failure to provide it means that the contract cannot be concluded with your chosen payment method.

Third-Party Providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. To execute this payment method, the data may subsequently be forwarded by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Local third-party providers may include:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Invoice Payment via PayPal

When paying via the invoice payment method, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is subsequently forwarded by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you with your chosen payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Ratepay may conduct a credit check on the basis of mathematical-statistical procedures (probability or score values) using credit reference agencies according to the procedure already described above. Data processing serves the purpose of credit checking for contract initiation. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in protection against payment default when Ratepay assumes advance liability. For further information on data protection and which credit reference agencies Ratepay uses, please see https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/

For more information about data processing when using PayPal, please see the privacy policy at https://www.paypal.com/en/webapps/mpp/ua/privacy-full

Use of the Payment Service Provider Stripe

All Stripe transactions are subject to the Stripe Privacy Policy. You can find it at https://stripe.com/en/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in your internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide on acceptance individually, as well as prevent the storage of cookies and transmission of the data they contain. Previously stored cookies can be deleted at any time. However, we point out that you may not be able to use all functions of this website fully.

Under the links below you can find information on how to manage (including disable) cookies in the most important browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Safari: https://support.apple.com/en-us/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in the privacy policy below, we only use technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or similar technologies is carried out on the basis of § 25 (2) TTDSG. Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in ensuring optimal functionality of the website as well as a user-friendly and effective design of our offering.

You have the right to object at any time to this processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.

Rights of Data Subjects and Storage Duration

Duration of Storage

After complete contract processing, data is initially stored for the duration of the warranty period, and subsequently in compliance with statutory, particularly tax and commercial law retention periods, and then deleted after the expiration of the period, unless you have consented to further processing and use.

Rights of the Data Subject

You have the following rights under Art. 15 to 20 GDPR, provided the statutory requirements are met: right of access, rectification, erasure, restriction of processing, data portability.

Furthermore, you have the right to object under Art. 21 (1) GDPR to processing based on Art. 6 (1) lit. f GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with the Supervisory Authority

You have the right under Art. 77 GDPR to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.

Right to Object

If the personal data processing listed here is based on our legitimate interest under Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.

After a successful objection, processing of the affected data will be stopped, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if processing is necessary for the assertion, exercise, or defense of legal claims.

Last updated: June 10, 2026