Privacy Policy

1. Data Controller

The data controller responsible for this website is:

Watch Design Industries
Owner: Firdevs Arslan
Hacketäuerstr. 19
51063 Cologne
Germany

Email: info@nivariwatches.com

2. General Information

We process personal data only where this is necessary to operate our website, provide our services, process orders, communicate with customers, improve our website, send newsletters, measure marketing performance, and comply with legal obligations.

Personal data means any information that can be used to identify a natural person, such as name, email address, postal address, IP address, order details, payment-related information or online identifiers.

3. Data We Process

Depending on how you use our website, we may process the following categories of personal data:

• name and contact details

• billing and shipping address

• email address

• order and reservation details

• payment-related information

• IP address, device information and browser data

• communication data, such as customer service inquiries

• newsletter subscription data

• cookie and consent preferences

• analytics and marketing interaction data, if consent has been given

4. Purposes and Legal Bases

We process personal data for the following purposes:

Order Processing and Fulfilment

We process your personal data to handle orders, reservations, payments, shipping, customer communication, returns and warranty matters.

Legal basis: Art. 6(1)(b) GDPR.

Customer Communication

If you contact us by email, we process your data to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR where the inquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR based on our legitimate interest in responding to customer inquiries.

Newsletter

If you subscribe to our newsletter, we process your email address to send product news, launch updates, brand updates and marketing communications.

Newsletter subscriptions are processed only with your consent. You may unsubscribe at any time using the unsubscribe link in each email.

Legal basis: Art. 6(1)(a) GDPR.

Analytics and Marketing

We use analytics and marketing tools to understand website usage, improve our website, measure the effectiveness of advertising campaigns and display relevant advertising.

Analytics and marketing tools are only used where legally required consent has been given through our cookie consent banner.

Legal basis: Art. 6(1)(a) GDPR.

Legal Obligations

We may process and store certain data to comply with legal obligations, including tax, accounting and commercial law requirements.

Legal basis: Art. 6(1)(c) GDPR.

5. Website Platform and Hosting

Our website is operated using Shopify.

In connection with the operation of this website, personal data may be processed by Shopify and its service providers. Data may be processed in the European Union, the United States, Canada or other jurisdictions, subject to applicable data protection safeguards.

Shopify may process personal data necessary for operating the online store, shopping cart, checkout, order management, fraud prevention, security, hosting and technical infrastructure.

6. Payment Providers

Payments are processed through secure third-party payment providers.

Depending on the payment method selected at checkout, payment-related data may be processed by one or more of the following providers:

• Shopify Payments

• Stripe

• PayPal

• Klarna

• credit card networks and payment institutions involved in the transaction

Payment-related data may include name, billing address, email address, order amount, transaction details, payment method, fraud prevention data and other information required to process the payment.

We do not store complete credit card details on our own systems.

The respective payment provider may process payment data under its own responsibility where required for payment processing, fraud prevention, regulatory compliance, risk management and customer authentication.

Legal basis: Art. 6(1)(b) GDPR for payment processing, Art. 6(1)(c) GDPR where processing is required by law, and Art. 6(1)(f) GDPR for fraud prevention and secure payment processing.

7. Shipping Providers

To deliver your order, we may share necessary shipping information with logistics and shipping providers, such as name, delivery address, email address and shipment details.

Legal basis: Art. 6(1)(b) GDPR.

8. Cookies and Consent Management

Our website uses cookies and similar technologies.

Strictly necessary cookies are required for the technical operation of the website, shopping cart, checkout, security, fraud prevention and consent management.

Analytics, marketing and external media cookies are only used if you have given your consent.

You can change or withdraw your cookie preferences at any time through the cookie settings on our website.

Legal basis for strictly necessary cookies: Art. 6(1)(f) GDPR.
Legal basis for analytics and marketing cookies: Art. 6(1)(a) GDPR.

9. Google Analytics

We use Google Analytics to understand how visitors use our website and to improve our content, product pages and user experience.

Google Analytics may process information such as IP address, device information, browser information, visited pages, interaction data, approximate location and usage behavior.

Google Analytics is used only if you have given your consent through our cookie consent banner.

Legal basis: Art. 6(1)(a) GDPR.

Google may process data outside the European Economic Area. Where required, appropriate safeguards such as standard contractual clauses or other legally recognized mechanisms are used.

10. Meta Pixel

We use Meta Pixel to measure the effectiveness of our advertising, understand customer interactions with our website and display relevant ads on Meta platforms such as Facebook and Instagram.

Meta Pixel may process information such as IP address, browser data, device data, page views, interactions, purchase events, cart activity and other online identifiers.

Meta Pixel is used only if you have given your consent through our cookie consent banner.

Legal basis: Art. 6(1)(a) GDPR.

Meta may process data outside the European Economic Area. Where required, appropriate safeguards such as standard contractual clauses or other legally recognized mechanisms are used.

11. MailerLite Newsletter

We use MailerLite to manage our newsletter subscriber list and to send email marketing communications.

If you subscribe to our newsletter, MailerLite may process your email address, subscription status, consent data, IP address, timestamps, email opens, link clicks and related newsletter interaction data.

Newsletter emails are sent only with your consent. You can unsubscribe at any time using the unsubscribe link in each email.

Legal basis: Art. 6(1)(a) GDPR.

MailerLite may process data outside the European Economic Area. Where required, appropriate safeguards such as standard contractual clauses or other legally recognized mechanisms are used.

12. Data Recipients

We may share personal data with the following categories of recipients where necessary:

• Shopify as website platform and technical service provider

• Shopify Payments, Stripe, PayPal and Klarna as payment providers

• shipping and logistics providers

• MailerLite as newsletter provider

• Google Analytics as analytics provider, if consent has been given

• Meta Pixel / Meta Platforms as marketing provider, if consent has been given

• tax advisors, accountants or legal advisors

• authorities where legally required

We only share personal data where this is necessary, legally permitted, or based on your consent.

13. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred to third countries, we ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses or other legally recognized transfer mechanisms.

14. Storage Period

We store personal data only for as long as necessary for the respective purpose.

Order, invoice and business records are stored in accordance with statutory retention periods under German commercial and tax law.

Newsletter data is stored until you unsubscribe or withdraw your consent.

Customer communication is stored as long as necessary to handle the request and any related legal or contractual obligations.

Cookie consent data is stored for the period required to document your consent preferences.

Analytics and marketing data are stored according to the retention settings of the respective tools and only where consent has been given.

15. Your Rights

Under the GDPR, you have the following rights:

• right of access

• right to rectification

• right to erasure

• right to restriction of processing

• right to data portability

• right to object to processing

• right to withdraw consent at any time

• right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:

info@nivariwatches.com

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

The competent authority may be the supervisory authority of your place of residence, your workplace, or the place of the alleged infringement.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or technical processes.

Last updated: June 2026