Privacy Statement

Privacy Statement

Welcome at Nikiforov. We (Nikiforov B.V.) can process personal data, as referred to in the General Data Protection Regulation (hereinafter: “Personal Data”). We can do this when you visit our website www.nikiforov.luxury (hereinafter: the ”Website”) or when you buy our products.

In this privacy statement we explain to you which Personal Data we collect from you and for what purposes we do this. This privacy statement was last amended on 4 December 2024.

  1. When does this privacy statement apply?

This privacy statement applies to the visit to our Website, when you buy our products and when your device interacts with the NFC technology embedded in our products . This privacy statement also only applies to processing of Personal Data by us as controller. If we process the Personal Data as a processor, then this privacy statement does not apply.

  1. Your privacy is of great importance to us

We believe that careful handling of Personal Data is of great importance. Personal Data is therefore processed carefully and in accordance with this privacy statement and the applicable laws and regulations.

This means that we:

  • Clearly define our purposes before we process your Personal Data, via this privacy statement
  • Store as little Personal Data as possible and only process the Personal Data that is necessary for our purposes
  • Only process Personal Data if there is a valid basis
  • The necessary security measures are taken to protect your Personal Data. We also impose these obligations on parties that process Personal Data for us
  • Respect your rights, such as the right to access, correction, data portability or deletion of your Personal Data processed by us

If you have any questions or would like to receive more information about the handling of your Personal Data, please contact us using the contact details provided in this privacy statement.

  1. Personal Data

When we use the term ”Personal Data” in this privacy statement, we mean information that relates to you (see also the definition in the General Data Protection Regulation (hereinafter: the ”GDPR”)).

  1. Nikiforov

For questions and/or comments about the processing of your Personal Data, you can contact us via the contact details below:

Nikiforov B.V.
Reaalruwe 37
6218 CM Maastricht
The Netherlands
[email protected]
(Dutch) Chamber of Commerce number: 88044009

  1. The Personal Data we can process when you visit our Website

When you visit our Website as a visitor, we may process certain Personal Data about you. This concerns the following processing of Personal Data.

When you contact us

You can contact us through the Website via the contact page or via email.  For a contact request, we may ask you for the following information, among other things:

  • First name
  • Last name
  • Email address
  • Other information that is relevant to the request

The basis for processing this Personal Data is Article 6 (1) f of the GDPR: we have a legitimate interest in this processing, because otherwise we cannot contact you.

Cookies

Our Website makes use of cookies. We use functional and analytical cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit the Website. We use cookies with merely technical or analytical functionalities. These ensure that the Website properly and that your preferred settings are remembered, for example. These cookies are also used to make the Website work properly and to be able to optimise them. You can unsubscribe from cookies by setting your internet browser in such a way that it no longer stores cookies. In addition, you can also delete all information that was previously stored via the settings of your browser.

  1. When you register and use your account via our Website

When you register and use an account via our Website, we may process certain Personal Data about you. When registering an account, we may process the following information from you, namely:

  • First name
  • Last name
  • Date of birth
  • Email address
  • Password
  • IP address

We need the above-mentioned information, so we know who you are and an account can be registered for you.

After registering an account, it is possible to enter or import additional data in your account, including Personal Data. But this is not mandatory. This concerns, for example, the following data:

  • Further personal information

Newsletter

You can subscribe to our newsletter by entering your email address and/or by indicating that you wish to receive the newsletter when registering an account. In the newsletter you can read news, tips and information about our products. The basis for the processing of this Personal Data is Article 6 (1) a GDPR: you have given permission for the processing of Personal Data.

After subscribing to the newsletter, your email address will automatically be added to the list of subscribers. Every newsletter contains an unsubscribe link with which you can unsubscribe from the newsletter.

The basis for the processing of this Personal Data is Article 6 (1) a of the GDPR: you have given us permission to process this data, because you have chosen to enter or import this data on the Website.

  1. When you buy our products

When you buy our products, to fulfil the order, we may process certain Personal Data about you, namely:

  • If you have an account, your password
  • First name
  • Last name
  • Email address
  • Address
  • Country
  • Shipping details
  • Payment information
  • IP address

The basis for the processing of this Personal Data is Article 6 (1) b of the GDPR: the processing is necessary for the performance of the agreement between us and you. Without this information, we cannot provide our services to you.

Integrated NFC Technology

We have embedded a Near Field Communication (NFC) tag in our products, to share product-related information with you via a designated URL, including an authenticity certificate with regard to the product(s) purchased. After you interacted with the NFC tag, there are two possible options:

  • read information about the bag via an internet search engine (e.g. Google). Please note that the privacy policies of these internet search engines may apply; and/or
  • read information about the bag, verify its authenticity, and/or receive news(letters) via Zatap. This requires you to download the Zatap (by collectID) app (note that Zatap’s privacy policy may apply).

The basis for the processing of this Personal Data is Article 6 (1) b of the GDPR: the processing is necessary for the performance of the agreement between us and you. Without this information, we cannot provide our services to you.

  1. Security

We protect your Personal Data by taking technical and organisational measures against unauthorised, unlawful or accidental access, loss, destruction or damage to Personal Data. We are constantly taking steps to improve data security.

In this way we ensure that only the necessary persons have access to your Personal Data, that access to Personal Data is secured and that our security measures are regularly checked and evaluated. Among others, we store all Personal Data in encrypted form.

The Personal Data is stored with parties that can ensure careful security. With these parties agreements have been made that are necessary for the processing of Personal Data. Insofar as the data centres of these parties are located outside the European Economic Area (EEA), appropriate safeguards have been put in place to make the transfer possible.

  1. Retention period

We do not keep your Personal Data longer than necessary for the purposes for which they were collected or used. We only keep the Personal Data for a longer period if this is necessary to comply with a legal obligation, such as a tax retention obligation.

  1. Third parties

We do not sell your data to third parties. We may, however, engage third parties who process certain Personal Data under our responsibility.

Some of these third parties are located in the EEA. Some third parties may be located in countries outside the EEA, such as the United States. In order to protect your Personal Data and to comply with our legal obligations, we will only engage third parties as processors if those third parties offer sufficient safeguards for the protection of your Personal Data. We will conclude a data processing agreement with these third parties, which provides appropriate protection with regard to your Personal Data. These third parties may only process the Personal Data in the context of the assignment we have given them, and not for other purposes.

  1. Updates or changes to this privacy statement

The way in which we process Personal Data, and the composition of the data we process, may change over time. We reserve the right to change this privacy statement at any time. For that reason, we encourage you to check the privacy statement regularly to stay informed of such changes. We make commercially reasonable efforts to inform you of major changes. In this way we ensure that you are aware of recent changes.

  1. Your rights

In the context of our processing of your Personal Data, you have, among others, the following rights:

  1. The right to inspect the Personal Data that we process of you
  2. If you have given permission for the processing of your Personal Data, you also have the right to withdraw this permission
  3. The right to exercise data portability
  4. The right to have errors corrected
  5. The right to have outdated Personal Data deleted
  6. The right to object to a particular use of Personal Data

If you wish to exercise these rights, you can contact us. We request that you describe in your request as clearly as possible to which Personal Data your request relates.

You can only exercise your rights to the extent that the law grants you these rights. To ensure that a request has been made by you, we may ask you to send a copy of your identity document with this request. We only ask for this if we deem it necessary to identify you. We destroy the copy of your identity document immediately after we have identified you.

  1. Other

This Privacy Statement does not apply to third-party websites that are linked to our Website(s). We cannot guarantee that these third parties will handle your Personal Data in a reliable or secure manner. We recommend that you also read the privacy statements of these websites.

  1. Complaints

If you have a complaint about the way we process your Personal Data, you can contact us via [email protected]. We then try to find a solution together.

You also have the right to lodge a complaint with the supervisory authority. In the Netherlands this is the Dutch Data Protection Authority (in Dutch: “Autoriteit Persoonsgegevens”).