Privacy Policy
1. Introduction
This Privacy Policy explains how Unismartech GmbH (hereinafter "we" or "us")
collects, uses, and processes your personal data when you visit and use our online
store at www.nitigo.eu (the "Online Store"). Unless otherwise stated in this Policy, we
are responsible for all personal data collected through the Online Store.
Personal data means any information that can identify an individual, such as name, email
address, or telephone number, as well as technical data that can be linked to a person.
2. Contact Information
Unismartech GmbH
Sternstr. 67, 40479 Düsseldorf, Germany
Managing Director: Alan Yang
Phone: +49 157 3333 6389
Email: alan@unismartech.com
3. Overview of Processing Activities
Our Online Store involves the following main data processing activities:
Automatic collection of server log files
Data collection when you contact us
Use of cookies
Order processing and fulfilment
3.1 Server Log Files
Each time you visit our Online Store, we automatically collect the following technical data
(including personal data):
IP address
Pages or files visited
Date and time of access
Volume of data transferred
Success status of access
Browser type and version
Operating system
Device information (e.g., MAC address)
Referrer URL (previously visited page)
This data is not merged with other personal data you actively provide. We collect log files
to manage the Online Store and to detect and defend against unauthorised access.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests). Our legitimate interest is to ensure the
secure operation of the website and to track attacks.
Retention period: Server log files are automatically deleted after 180 days. In the event of
unauthorised access attempts (e.g., hacking), we reserve the right to retain the files for a
longer period.
3.2 Data Collected When You Contact Us
When you contact us by email or phone, we store the information you provide (e.g., email address, name, phone number) in order to process your inquiry.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures at
your request).
Retention period: We will delete the data once it is no longer needed to process your
inquiry. If statutory retention obligations apply, we will restrict processing.
3.3 Use of Cookies
We use cookies to improve user experience, analyse website usage, and enhance our
services. The cookies we currently use serve the following purposes:
Analyse product interactions and performance
Debug and identify functional errors
Detect security incidents and prevent fraud or illegal activities
Improve or enhance our website and products
Please note that if you do not accept cookies, certain functions of the website may be
limited.
What are cookies? Cookies are small text files stored on your device when you visit our
Online Store. Session cookies are automatically deleted when you close your browser.
Persistent cookies have a retention period of no more than two years. We may also use
third-party cookies.
You can restrict or disable cookie storage through your browser settings. However, this
may affect website functionality and ease of use.
Legal basis: Necessary cookies are processed on the basis of Art. 6(1)(f) GDPR (legitimate
interests) to ensure the proper functioning of the website. Non-necessary cookies are only
set with your explicit consent via the consent manager when you first visit our Online
Store, based on Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time.
3.4 Order Processing and Fulfilment
When you place an order, we collect the personal information required to process and fulfil
the order (e.g., name, address, contact details, payment information).
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: We will delete the data once it is no longer needed for order processing.
If statutory retention obligations apply, we will restrict processing.
4. Your Rights
You have the following rights:
To request, free of charge, information about the personal data we hold about you
To request rectification of inaccurate data
To request restriction of processing or deletion of unlawfully or excessively stored data
(subject to statutory retention obligations and Art. 17(3) GDPR)
To receive the data you have provided in a structured, commonly used, and machine
readable format (right to data portability), provided that the processing is based on
consent or contract performance
To lodge a complaint with a supervisory authority. A list of data protection authorities in
Germany and Europe can be found at:
5. Right to Object to Processing (Art. 21 GDPR)
If we process your personal data on the basis of public interest (Art. 6(1)(e) GDPR) or
legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time. We will
stop processing unless we can demonstrate compelling legitimate grounds that
override your interests, rights, and freedoms, or where the processing is necessary for
the establishment, exercise, or defence of legal claims.
To exercise your right to object, please send an email to: alan@unismartech.com
6. Withdrawal of Consent
If you have given your consent to the processing of your personal data, you may
withdraw it at any time without giving any reason. Withdrawal does not affect the
lawfulness of processing based on consent before its withdrawal.
To withdraw your consent, please send an email to: alan@unismartech.com
7. Recipients of Data
As a general rule, we do not disclose your personal data to third parties unless
otherwise stated in this Policy. Possible categories of recipients include:
Service providers: Vendors who perform services on our behalf (e.g., order fulfilment,
payment processing, communication optimisation, fraud prevention, product support).
These third parties use your data only as necessary to provide the services.
Other users: Content you publicly post (e.g., your name in a review) may be visible to
other users. We are not responsible for the privacy practices of other users.
Legal and similar disclosures: We may access, preserve, or disclose your information if we
believe it is necessary to comply with legal processes (e.g., court orders, government
requests), to protect rights, property, safety, or to investigate fraud.
Merger, sale, or other asset transfers: In the event of a merger, acquisition, reorganisation,
bankruptcy, or sale of assets, your information may be transferred as part of such
transaction, subject to the then-current Privacy Policy.
8. Transfers to Countries Outside the European Economic Area
In the course of our business operations, your personal data may be transferred to
third countries outside the European Economic Area (EEA). Such transfers are made
solely for the purpose of performing contracts or maintaining our business relationship
with you.
The European Commission has issued adequacy decisions for certain third countries (list
and copies available at: https://commission.europa.eu/law/law-topic/data
protection/international-dimension-data-protection/adequacy-decisions
For countries without an adequacy decision, we implement appropriate safeguards, such
as binding corporate rules, EU standard contractual clauses, certifications, or approved
codes of conduct.
9. No Obligation to Provide Personal Data
We do not condition the conclusion of a contract on your prior provision of personal
data. You are generally not under any legal or contractual obligation to provide us with
your personal data. However, certain services may be limited if you do not provide the
necessary information (in which case you will be informed accordingly).
10.No Automated Decision-Making
We do not engage in automated decision-making, including profiling, as defined in Art.
22(1) and (4) GDPR.