Privacy Policy
Privacy Policy
Nydo – Designmöbel Direkt GmbH
The protection of your data is our highest priority. We handle all personal data entrusted to us responsibly and in strict compliance with the revised Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023) as well as applicable international data protection standards.
Note regarding the "nydo" brand: "nydo" is a brand of Designmöbel Direkt GmbH. The contractual partner for orders placed in the online shop www.nydo-studio.ch and the provider of all services listed therein is exclusively Designmöbel Direkt GmbH. All references to "nydo" in this Privacy Policy refer legally to Designmöbel Direkt GmbH.
I. Controller
Designmöbel Direkt GmbH
c/o K1 Business Club
Neue Rothofstrasse 13–19
60313 Frankfurt am Main, Germany
UID: CHE-278.171.769
Email: service@nydo-studio.ch
II. Categories of Personal Data Processed
We process in particular the following data:
- Usage data: IP address, log files, cookie settings, shopping cart contents
- Customer data: name, address, email, phone number, encrypted password
- Order data: products, payment information, delivery data
- Communication data: enquiries by email, phone, form or WhatsApp
- Marketing data: newsletter consents, click and open rates, survey responses
- Social networks: statistics (Insights) relating to our accounts on Facebook, Instagram, TikTok, Pinterest
III. Purposes and Legal Bases for Processing
We process personal data only where a legal basis exists. The Swiss FADP is the primary applicable law; where individuals in the EU are concerned, the GDPR applies additionally.
|
Purpose |
Legal basis |
|
Contract performance (orders, delivery, customer account) |
Art. 31(2)(a) FADP; Art. 6(1)(b) GDPR |
|
Customer service & communication |
Art. 31(2)(a) FADP; Art. 6(1)(f) GDPR (legitimate interest) |
|
Newsletter & direct marketing |
Consent (Art. 31(1) FADP / Art. 6(1)(a) GDPR) |
|
Payment processing & fraud prevention |
Art. 31(2)(a) FADP; Art. 6(1)(b)/(f) GDPR |
|
IT security & abuse prevention |
Legitimate interest (Art. 31(1) FADP) |
|
Competitions |
Contract performance / consent |
|
Social media statistics (Insights) |
Legitimate interest (Art. 31(1) FADP); joint controllership with Meta/Pinterest/TikTok |
IV. Recipients
- External service providers (IT, hosting, logistics, payment services, marketing tools)
- Authorities, where we are legally required to disclose
- Partners in the context of competitions or creditworthiness checks (e.g. Klarna)
A complete list of service providers used can be requested from us at any time.
V. International Data Transfers
Personal data is only transferred to countries without an adequate level of data protection (as assessed by the FDPIC) where:
- An adequacy decision by the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the European Commission exists (e.g. EU–US Data Privacy Framework), or
- Appropriate safeguards are in place, in particular through standard contractual clauses pursuant to Art. 16 FADP or Art. 46 GDPR.
Information on specific services (e.g. transfers to the USA) can be found in the relevant sections of this policy.
VI. Retention Periods
- Contract and invoice data: 10 years (statutory retention obligations under the CO and VAT Act)
- Customer accounts: deleted no later than 6 years after inactivity
- Log files: 20 days, in individual cases up to 180 days
- Cookies & marketing data: for as long as consent is in place or until revoked
VII. Your Rights
Under the Swiss FADP and, where applicable, the GDPR, you have the following rights:
- Right of access to your stored data (Art. 25 FADP; Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 32 FADP; Art. 16 GDPR)
- Right to erasure ("right to be forgotten") (Art. 32 FADP; Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability in a common format (Art. 28 FADP; Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to withdraw consent given (Art. 7(3) GDPR; Art. 31 FADP)
To exercise these rights, please send an email to service@nydo-studio.ch.
You may also lodge a complaint at any time with the Swiss Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch
VIII. Cookies and Tracking
- Essential cookies: required for basic functions, permitted without consent on the basis of legitimate interest (Art. 31(1) FADP)
- Functional, analytics and marketing cookies: only with your explicit consent (Art. 31(1) FADP)
Services used: Google Analytics 4, Meta Pixel, Pinterest Tag, TikTok Pixel, Microsoft Bing Ads, YouTube, Microsoft Clarity
You may withdraw your consent at any time via the cookie consent manager.
IX. Social Media
- Facebook & Instagram: joint controllership with Meta (Page Insights Addendum)
- TikTok, Pinterest, YouTube: the respective platform is the controller. Nydo receives only aggregated statistics that do not allow direct identification.
Legal basis: legitimate interest (Art. 31(1) FADP) for statistics/marketing; consent where cookies or pixels are set.
X. Data Security
- SSL encryption for all data transmissions
- Access restricted to authorised personnel only
- Regular technical reviews and security updates
XI. Amendments
We reserve the right to amend this Privacy Policy if new services are added or the legal situation changes. The current version is available at www.nydo-studio.ch.
Version: April 2026
