Privacy Policy

Protecting your data is our top priority. We handle all personal data that you entrust to us responsibly and strictly comply with the General Data Protection Regulation (GDPR) as well as supplementary national data protection regulations, in particular the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021).

Note on the "nydo" brand:
"nydo" is a brand of Designmöbel Direkt GmbH. The contractual partner for orders in the online shop www.nydo-studio.at as well as the provider of all services mentioned therein is exclusively Designmöbel Direkt GmbH. Where "nydo" is mentioned in this privacy policy, it legally refers to Designmöbel Direkt GmbH.

Below, you can learn which data we collect, how we use it, on what basis this occurs, and what your rights are.

I. Controller

Designmöbel Direkt GmbH
c/o K1 Business Club
Neue Rothofstraße 13–19
60313 Frankfurt am Main
Germany
E-Mail: service@nydo-studio.com

We have not appointed a data protection officer, as the legal requirements for doing so are not met in our case. For all inquiries regarding data protection, you can reach us at the email address mentioned above.

II. Categories of Personal Data

We process the following data in particular:

• Usage data: IP address, log files, cookie settings, shopping cart contents
• Customer data: Name, address, email, phone number, encrypted password
• Order data: Products, payment information, delivery details
• Communication data: Inquiries via email, phone, form, or WhatsApp
• Marketing data: Newsletter consent, click and open rates, survey responses
• Social networks: Statistics (insights) regarding our accounts on Facebook, Instagram, TikTok, Pinterest

III. Purposes and Legal Bases

We only process personal data if there is a legal basis for doing so:

Purpose	Legal Basis
Performance of contract (orders, delivery, customer account)	Art. 6 (1) (b) GDPR
Customer service & communication	Art. 6 (1) (b) GDPR; Art. 6 (1) (f) GDPR (legitimate interest)
Newsletter & direct marketing	Consent (Art. 6 (1) (a) GDPR) or § 174 (4) TKG 2021 in conjunction with Art. 6 (1) (f) GDPR for advertising to existing customers
Payment processing & fraud prevention	Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR
IT security & misuse prevention	Art. 6 (1) (f) GDPR
Sweepstakes	Art. 6 (1) (b) GDPR
Social media statistics (insights)	Art. 6 (1) (f) GDPR (joint controllership according to Art. 26 GDPR with Meta/Pinterest/TikTok)

IV. Recipients

• External service providers (IT, hosting, logistics, payment services, marketing tools)
• Authorities, if we are legally obligated to do so
• Partners for sweepstakes or credit checks (e.g., Klarna, KSV1870, CRIF)

You can request a complete list of the service providers we use at any time.

V. Data Transfer to Third Countries

A transfer to countries outside the EU or the EEA ("third countries") only takes place if:

• there is an adequacy decision by the EU Commission (e.g., EU-US Data Privacy Framework), or
• appropriate safeguards are in place, such as EU standard contractual clauses (Art. 46 GDPR).

Information on specific services (e.g., transfers to the USA) can be found in the respective sections of this policy.

VI. How Long We Store Data

• Contract and invoice data: up to 10 years due to legal retention requirements (§§ 132 BAO, 212 UGB; for our registered office §§ 147 AO, 257 HGB)
• Customer accounts: deletion after 6 years of inactivity at the latest
• Log files: 20 days, in individual cases up to 180 days
• Cookies & marketing data: as long as consent exists or until it is withdrawn

VII. Your Rights

Under the GDPR, you have the following rights at all times:

• Access to your stored data (Art. 15 GDPR)
• Correction of incorrect data (Art. 16 GDPR)
• Deletion ("right to be forgotten") (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability in a common format (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of given consent (Art. 7 (3) GDPR)

To exercise these rights, simply send an email to service@nydo-studio.com.

You can also lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR). In Austria, this is the

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at

Since our main office is located in Frankfurt am Main, the lead supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

VIII. Cookies and Tracking

• Necessary cookies: for basic functions, legally permitted without consent (Art. 6 (1) (f) GDPR; § 165 (3) TKG 2021)
• Functional, analytical, and marketing cookies: only with your consent (Art. 6 (1) (a) GDPR; § 165 (3) TKG 2021)

Services used: Google Analytics 4, Meta Pixel, Pinterest Tag, TikTok Pixel, Microsoft Advertising, YouTube, Microsoft Clarity, Klar! Insights

You can withdraw your consent at any time via the cookie consent manager.

Klar! Insights – Attribution

We use the services of Klar Insights GmbH, Clemensstr. 2, 80803 Munich, Germany, a SaaS provider for business intelligence solutions for eCommerce companies. On our behalf, Klar Insights GmbH collects, processes, and stores data (user and session IDs, email address, IP address, online identifiers (cookie ID, device ID)) on this website and its subpages for reach measurement and statistical analysis. We have concluded a data processing agreement with Klar Insights GmbH for this purpose.

The collection of personal data is based on consent pursuant to Art. 6 (1) sentence 1 (a) GDPR. If consent is provided by the user, the data to be processed is collected in a user-related manner, taking into account § 25 (1) sentence 1 TDDDG.

The following cookies are used for the aforementioned different types of collection to ensure each collection method: september_id, september_has_consent, september_do_not_track (in case of objection).

Cookie objection: To object to the use of Klar! Insights in general, please use this link. This will set a cookie named "september_do_not_track" from the domain "nydo-studio.de". Please do not delete this, as otherwise it cannot be guaranteed that you will not be tracked by Klar.

Information regarding data protection and data usage by Klar can be found on the following website: https://app.getklar.com/legal/data-protection

IX. Social Media

• Facebook & Instagram: Joint controllership with Meta (Page Insights Addendum)
• TikTok, Pinterest, YouTube: The respective platform is responsible. nydo only receives aggregated statistics that do not allow for direct identification.

Legal basis: Art. 6 (1) (f) GDPR (marketing/statistics) or Art. 6 (1) (a) GDPR (if cookies or pixels are set).

X. Credit Checks and Automated Decision-Making

If you choose a payment method with a payment default risk during checkout (e.g., Klarna invoice or installment purchase), the respective provider may conduct a credit check and obtain information from credit reporting agencies. The decision regarding the availability of the payment method may be automated (Art. 22 GDPR). The respective payment service provider is responsible for this check according to their own data protection provisions. If a payment method is declined, the other payment methods offered during checkout remain available to you.

XI. Provision of Your Data

To conclude and fulfill a purchase contract, we require certain data, in particular your name, delivery and billing address, email address, and payment information. We cannot process your order without this information. All other information is optional.

XII. Data Security

• SSL encryption for all data transfers
• Access limited to authorized persons
• Regular technical checks and security updates

XIII. Changes

We reserve the right to amend this privacy policy if new services are added or the legal situation changes. The current version is available at www.nydo-studio.at.

As of: 10.09.2026