Summer Sale with code 'Sommer15%': Free cushion with selected sofas
00 Days
00 Hours
00 Minutes
00 seconds

Data Protection

Privacy Policy

The protection of your data is our highest priority. We handle all personal data you entrust to us responsibly and strictly adhere to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

Note on the brand "nydo":
"nydo" is a brand of Designmöbel Direkt GmbH. The contractual partner for orders in the online shop www.nydo-studio.de and provider of all services mentioned there is exclusively Designmöbel Direkt GmbH. Where "nydo" is mentioned in this privacy policy, it always legally refers to Designmöbel Direkt GmbH.

Below you will find information on what data we collect, how we use it, on what basis this occurs, and what rights you have.

I. Controller

Designmöbel Direkt GmbH
c/o K1 Business Club
Neue Rothofstraße 13–19
60313 Frankfurt am Main
E-mail: service@nydo-studio.de

II. Categories of Personal Data

We process the following data in particular:

  • Usage data: IP address, log files, cookie settings, shopping cart contents
  • Customer data: Name, address, e-mail, phone number, encrypted password
  • Order data: Products, payment information, delivery data
  • Communication data: Inquiries via e-mail, phone, form, or WhatsApp
  • Marketing data: Newsletter subscriptions, click and open rates, survey responses
  • Social networks: Statistics (Insights) for our accounts on Facebook, Instagram, TikTok, Pinterest

III. Purposes and Legal Basis

We only process personal data if there is a legal basis for it:

Purpose Legal Basis
Contract fulfillment (orders, delivery, customer account) Art. 6 para. 1 lit. b GDPR
Customer service & communication Art. 6 para. 1 lit. b GDPR; Art. 6 para. 1 lit. f GDPR (legitimate interest)
Newsletter & direct marketing Consent (Art. 6 para. 1 lit. a GDPR) or § 7 para. 3 UWG in conjunction with Art. 6 para. 1 lit. f GDPR
Payment processing & fraud prevention Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR
IT security & abuse prevention Art. 6 para. 1 lit. f GDPR
Competitions Art. 6 para. 1 lit. b GDPR
Social Media Statistics (Insights) Art. 6 para. 1 lit. f GDPR (joint responsibility with Meta/Pinterest/TikTok)


IV. Recipients

  • External service providers (IT, hosting, logistics, payment services, marketing tools)
  • Authorities, if we are legally obliged to do so
  • Partners for competitions or credit checks (e.g., Klarna, SCHUFA)

You can request a complete list of the service providers used from us at any time.

    V. Data Transfer to Third Countries

    A transfer to countries outside the EU/EEA ("third countries") only takes place if:

    • an adequacy decision by the EU Commission exists (e.g., EU-US Data Privacy Framework), or
    • appropriate safeguards are in place, for example through EU standard contractual clauses (Art. 46 GDPR).

    Information on specific services (e.g., transfers to the USA) can be found in the respective sections of this declaration.

    VI. How Long We Store Data

    • Contract and invoice data: 10 years (statutory retention obligations)
    • Customer accounts: Deletion at the latest after 6 years of inactivity
    • Log files: 20 days, in individual cases up to 180 days
    • Cookies & marketing data: as long as consent exists or until revocation

    VII. Your Rights

    You have the following rights under the GDPR at any time:

    • Information about your stored data (Art. 15 GDPR)
    • Correction of incorrect data (Art. 16 GDPR)
    • Deletion ("right to be forgotten") (Art. 17 GDPR)
    • Restriction of processing (Art. 18 GDPR)
    • Data portability in a common format (Art. 20 GDPR)
    • Objection to processing based on legitimate interests (Art. 21 GDPR)
    • Revocation of given consents (Art. 7 para. 3 GDPR)

    To exercise these rights, simply send an e-mail to service@nydo-studio.de.
    You can also complain to a data protection supervisory authority at any time.

    VIII. Cookies and Tracking

    • Necessary Cookies: for basic functions, legally permissible without consent (Art. 6 para. 1 lit. f GDPR, § 25 para. 2 TTDSG)
    • Functional, Analytics, and Marketing Cookies: only with your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG).

    Services used: Google Analytics 4, Meta Pixel, Pinterest Tag, TikTok Pixel, Microsoft Bing Ads, YouTube, Microsoft Clarity

    You can revoke your consent at any time via the cookie consent manager.

      IX. Social Media

      • Facebook & Instagram: Joint responsibility with Meta (Page Insights Addendum)
      • TikTok, Pinterest, YouTube: The respective platform is responsible. nydo only receives aggregated statistics that do not allow direct identification.

      Legal basis: Art. 6 para. 1 lit. f GDPR (marketing/statistics) or Art. 6 para. 1 lit. a GDPR (if cookies/pixels are set).

      X. Data Security

      • SSL encryption for all data transfers
      • Access only by authorized persons
      • Regular technical checks and security updates

      XI. Changes

      We reserve the right to change this privacy policy if new services are added or the legal situation changes.

      Status: 21-08-2025