Privacy policy

Privacy Notice of NIKIN AG 

1.               General Information

In this Privacy Notice, NIKIN AG (hereinafter also referred to as «NIKIN», «we» or «us») explains how we process your personal data in connection with the provision of our websites https://nikin.com/ (the «websites»). This is not an exhaustive description; other privacy policies, general terms and conditions and similar documents may govern specific matters.

We use the term «data« here interchangeably with «personal data».

If you transmit or disclose data to us about persons other than yourself, we assume that you are authorised to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this Privacy Notice.

2.               Controller

Unless we tell you otherwise in an individual case, the person responsible for processing your data under this Privacy Notice («Controller») for the purposes of data protection law is:

NIKIN AG

Graben 33

5000 Aarau

Switzerland

You can contact us regarding data protection matters and to exercise your rights at: team@nikin.com.

3.               Collection and Processing of Data

We collect data when you visit our websites and use the functionalities or services available on the websites. The processing of your data is limited to data that is necessary for the operation of a functional website and the provision of our content available on it. The processing of your data is based on the purposes agreed or on a legal basis. The specific data we process about you depends on the reason for and purpose of the processing. We only collect data that is necessary for the implementation and processing of our products and services or that you provide to us voluntarily. As far as it is not unlawful, we also collect data from public sources (e.g. debt collection registers, land registers, commercial registers, the media, or the Internet including social media) or receive data from public authorities and from other third parties (such as credit agencies, address brokers, associations, contractual partners, Internet analysis services, etc.).

The categories of data that you have provided to us directly and the categories of data that we receive about you from third parties include, but are not limited to:

• Technical Data: IP address; information about the operating system of your terminal device; cookies; name and URL of any websites visited; amount of data transferred; region, date and time of access; websites accessed via our websites; websites from which any access takes place; type of browser; name of the internet provider; protocols; etc.;

• Master Data: Name; salutation/title, address; email address; telephone number; gender; date of birth; nationality; details of the employer or company on whose behalf you are contacting us; role and function; details of your relationship with us; details of interactions with you; consent forms (e.g. newsletter or online contact form); social media profiles; photos and videos; copies of ID; payment information etc.;

• Communication Data: Data transmitted via contact form, email, telephone, letter or other means of communication; name; contact details; type, manner, place and time of communication and, as a rule, its content (i.e. the content of e-mails, letters etc.); details of your request if you use an online contact form; order number; returned items etc.;

• Contract and Service Data: Information when using our online services and/or with regard to a possible conclusion of a contract; information about your contracts (e.g. type and date of conclusion); information about the products and the services provided or to be provided; information about feedback (e.g. complaints, feedback on satisfaction, etc.); information required for the execution and administration of the contracts (e.g. information in connection with billing, customer service, technical support and the enforcement of contractual claims), etc.;

• Registration Data: Name; address; email address; telephone number; date of birth; credit card information; bank account details, etc.;

• Behavioural and Preference Data: Information about user behaviour on our websites; information about the use of our products and services; information about your response to electronic communications; information about your location, e.g. if you search for a shop at a desired location via the websites using Google Maps; information from input fields (e.g. search function), etc.;

• Other Data: We may also collect data from you in other situations. For example, data may be collected in connection with official or legal proceedings (e.g. files, evidence, etc.). As part of the events we offer, we may collect data about who participates in events and when, and we may create photos, videos and sound recordings in which you can be recognised.

As part of our business relationship, it is necessary for you to provide us with data that is required for the establishment and fulfilment of the contractual relationship. In general, there is no legal obligation to provide us with this data. However, without this data, we may not be able to enter into or continue the contract with you or the organisation/person you represent. In addition, certain information must be disclosed to enable data traffic on the websites, e.g. an IP address.

4.               Purposes of the Processing

The data collected is mainly used for the conclusion and processing of contracts with you and business partners, in particular in connection with the products and services offered on our websites. We also process the data in order to fulfil our legal obligations, both domestically and internationally.

In addition, in accordance with applicable law and where appropriate, we may process data for the following purposes, which are in our legitimate interest or in the legitimate interest of third parties:

• Product/Service Development and Innovation: We process your data in order to further develop our products, services, websites and other platforms on which we operate and to expand our products and services.

• Communication: We process your data for the purpose of communicating with you, in particular to respond to your enquiries, when you exercise your rights and to contact you in the event of queries.

• Security: We process your data to protect our operations, our IT and other infrastructure as well as our websites and other platforms.

• Marketing: We process your data for market, media and opinion research, optimisation of advertisements in order to show you advertisements and offers that are genuinely tailored to your interests and for sending newsletters if and insofar as you give us your consent, provided this is required by applicable law.

• Relationship Management: We may use a Customer Relationship Management System («CRM») to store and process your data as described.

• Risk Management, Corporate Governance and Business Development: We process your data as part of our risk management and corporate governance in order to protect us from criminal or abusive activities. As part of our business development, we might sell businesses, parts of businesses or companies to others or acquire them from others or enter into partnerships, which might result in the exchange and processing of data based on your consent.

• Litigation: We process your data for the enforcement of legal claims and for defence in legal disputes and official proceedings.

• Compliance with Law: We process your data to comply with legal requirements (e.g. prevention and investigation of criminal offences and other misconduct; conducting internal investigations, data analysis to combat fraud).

5.               Legal Basis for the Processing

Where we have asked for your consent for certain processing (e.g. for receiving newsletters), we process your data based on such consent. You may withdraw your consent at any time with effect for the future by providing us written notice (email sufficient). If you like to withdraw your consent to online tracking, please refer to para. 8. Withdrawal of your consent does not affect the lawfulness of the processing that we have carried out prior to your withdrawal, nor does it affect the processing of your data based on other processing grounds.

Where we have not asked for your consent, we process your data for other legal reasons, such as a contractual obligation, a legal obligation, a vital interest of the data subject or of another natural person, to perform a public task or a legitimate interest, which includes compliance with applicable law and the marketing of our products and services, the interest to better understand our markets and in managing and further developing our company, including its operations, safely and efficiently.

6.               Profiling and Automated Decision Taking

We might automatically evaluate certain of your personal characteristics for the above-mentioned purposes using your data («profiling») if we want to determine preference data, but also to identify risks of misuse and security, to carry out statistical analyses or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioural and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics. We may also use profiling to assess your creditworthiness. We do not use profiling that can produce legal effects concerning you or similarly significantly affect you without human review.

In certain situations, for reasons of efficiency and consistency of decision-making processes, it may be necessary for us to automate discretionary decisions with legal effects or potentially significant disadvantages for you («automated individual decisions»). In this case, we will inform you accordingly and take the measures required by applicable law.

7.               Disclosure of Data to Third Parties

In order to perform our contracts, fulfil our legal obligations, protect our legitimate interest and fulfil the other purposes and legal grounds mentioned above, we may disclose your data to third parties, in particular to the following categories of recipients:

• Service providers: We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (e.g. IT providers, banks, insurance companies, telecommunications companies, credit information agencies, address verification providers, payment service providers, lawyers) or who we engage to process data for any of the purposes listed above on our behalf and in accordance with our instructions only.

• Contractual partners: If it is required under the respective contract, we share your data to other contractual partners, merchants, subcontractors, etc.

• Legal Authorities: We may disclose personal data to government offices, courts and other authorities in Switzerland or abroad if we are legally obliged or authorised to do so or if this appears necessary to protect our interests. The legal authorities process data about you that they receive from us under their own responsibility.

8.               Newsletter

If you subscribe to one of our newsletters, you can cancel the subscription at any time by using the unsubscribe option contained in the newsletter.

In connection with our newsletter and on the basis of your consent, we use the data specified in Section 12 mentioned tools to collect your data when you sign up for our newsletter or other updates and to ensure that you only receive newsletters and updates that match your actual or perceived interests.

9.               Cookies

We use cookies on our websites that allow us to identify your browser or device and that may allow certain third parties to do so as well. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our websites.

Some cookies are necessary for the functioning of our websites or for certain features. These cookies are only temporary («session cookies») and are deleted after you have visited our websites. Other cookies are necessary to store user configurations and other information beyond a session («persistent cookies»). Irrespective of this, you have the option of setting your browser to reject cookies, to save them for a single session only or to delete them before their usual expiry date.

Most of the cookies we use are so-called session cookies. We only use pesistent cookies to save user settings (e.g. language etc.) and to understand how you use our services and content. Some cookies are sent to you by us, others by business partners we work with. If you choose to block cookies, you may not be able to use certain features (e.g. language settings, etc.).

By using our websites and agreeing to other marketing emails, you consent to the use of such techniques. However, depending on the purpose of these cookies, we may ask for your explicit consent beforehand. You can accept or decline consent via the cookie banner on our websites.

10.            Social Plug-ins

We partly use social plug-ins from YouTube and Instagram on our websites. This is recognisable to you in each case (usually by corresponding symbols). We have configured these elements so that they are deactivated by default. If you activate them (by clicking on them), the providers of the respective social networks can register that and where you are on our websites and use this information for their purposes. The processing of your data is then the responsibility of the respective provider in accordance with their data protection regulations. We do not receive any information about you.

11.            Our Appearance on Social Networks

We have various appearances on social media platforms. We operate these pages with the following providers: Facebook, LinkedIn, Instagram, Threads, Pinterest, TikTok, YouTube, Twitter/X and Snapchat.

We receive data from you and the platforms when you come into contact with us via our online presence. At the same time, the platforms evaluate your use of our online presence and link this data with other data about you known to the platforms. They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes and to manage their platforms.

We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). For details about the collection and storage of your data and about the type, scope and purpose of its use by the social media provider, please refer to the privacy policy of the respective social media provider.

12.            Tools

 

 

13.            Transfer of Data Abroad

As we have explained in the Sections above, we also disclose data to other parties. Not all of them are located in Switzerland. Your data may therefore be processed in Europe as well as in the USA, Hong Kong, Ireland, India, Canada, Lithuania, Denmark, Germany, Estonia, Israel, the UK, Latvia and France; in exceptional cases, however, in any other country in the world.

We only transfer data to countries without an adequate level of data protection if this is necessary for the performance of a contract or for the exercise or defence of legal claims, or if such a transfer is based on your explicit consent or is subject to safeguards that assure the protection of your data, such as the standard contractual clauses approved by the European Commission (adapted to Switzerland, if applicable).

14.            Retention Periods for the Data

We will only process your data for as long as it is necessary to fulfil the purposes we collected it for, including for the purposes of complying with legal retention requirements and where required to assert or defend against legal claims, until the end of the relevant retention period or until the claims in question have been settled. Upon expiry of the applicable retention period, we will securely destroy your data in accordance with applicable laws and regulations.

15.            Data Security

We take appropriate security measures to protect the confidentiality, integrity and availability of your data, to protect it against unauthorised or unlawful processing and to counter the risks of loss, unintentional alteration, unwanted disclosure or unauthorised access. However, we and your data can still become victims of cyber-attacks, cybercrime, brute force, hacking and further fraudulent and malicious activities, including but not limited to viruses, forgeries, malfunctions and interruptions, which are out our control and responsibility. We have also put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

16.            Your Rights

You have various rights in relation with our processing of your personal data, depending on the applicable data protection law: right of access, right to rectification, right to erasure, right to restriction, right to data portability, right to withdraw consent, right to lodge complaints and right to object.

Please note that we reserve the right to assert legal restrictions if necessary, e.g. if we are obliged to store or process certain data, have an overriding interest (insofar as we can invoke such interests) or need the data to assert claims. If the exercise of certain rights involves costs for you, we will inform you in advance. We have already referred to the possibility of withdrawing consent in Section 8 above. It is important to note that exercising these rights may conflict with your contractual obligations and could have consequences such as premature termination of the contract or associated costs. Should this occur, we will inform you in advance, unless this has already been contractually agreed.

If you like to exercise the above-mentioned rights, please contact the persons listed in Section 2 unless otherwise stated or agreed. Please note that we need to identify you to prevent misuse, e.g. by means of a copy of your ID card or passport, unless identification is possible otherwise.

In addition, every data subject has the option of asserting their rights in court or lodging a complaint with the competent data protection authority. In Switzerland, the competent data protection authority is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

17.            Updating and Amending this Privacy Notice

Due to the continuous development of our websites and their content, as well as changes in law or regulatory requirements, we may need to amend this Privacy Notice from time to time. The version published on the websites is the current version.

 

Last updated: 15.07.2026