Privacy Policy
Privacy Policy - NYASERA
Last updated: 19 October 2026 | Version 1.1
- The data controller is Contemporary Constellation, Lda., owner and operator of the NYASERA brand.
- We process contact, order, delivery and billing data, and technical data, only to respond to requests, advise on product choice, process orders and comply with legal obligations.
- We do not sell personal data. We share it only with essential service providers (hosting, payments, transport, accounting) and with authorities where required by law.
- We do not ask for health data. If you provide it on your own initiative for advisory purposes, we process it only with your consent and for that purpose.
- You can exercise your rights of access, rectification, erasure, objection, restriction and portability at [email protected] and lodge a complaint with the Portuguese Data Protection Authority (CNPD).
1. Introduction
This Privacy Policy explains how your personal data is collected and processed when you visit the website nyasera.com, request advice, create an account, buy our products or communicate with us. It is drafted in compliance with Regulation (EU) 2016/679 (GDPR), Law no. 58/2019 and Law no. 41/2004 (electronic communications).
We are guided by the principle of accountability: we process data in accordance with the following principles under Article 5 of the GDPR:
- Lawfulness, fairness and transparency: we explain what we do and why;
- Purpose limitation: we only use data for the purposes described here;
- Data minimisation: we collect only what is necessary;
- Accuracy: we keep data up to date and correct errors;
- Storage limitation: we delete data when it is no longer needed;
- Integrity and confidentiality: we protect data with appropriate measures.
2. Data Controller
The controller of your personal data is:
- Company name
- Contemporary Constellation - Consultoria e Gestão Unipessoal, Lda.
- NIPC (Portuguese tax ID)
- 516 756 583
- Address
- Travessa João Paulo II, 48, 4400-479 Vila Nova de Gaia, Portugal
- [email protected]
- Brand and website
- NYASERA - nyasera.com
We have appointed a Data Protection Officer (DPO), who can be contacted at [email protected]. You may also send privacy-related questions to the email address indicated above.
3. Scope of Application
This policy applies to website visitors, to people who request advice or a demonstration, to customers (consumers and businesses) and to anyone who communicates with us by any means. It does not apply to third-party websites to which our site may link.
4. Categories of Personal Data Processed
4.1. Identification and contact data
Name, email, telephone, country and city, when you provide them in forms, advisory requests or when creating an account.
4.2. Order, delivery and billing data
Selected products and measurements, delivery and billing address, tax identification number (NIF) (when requested for an invoice), order value and status, purchase and return history. Payment data (for example, card number) is processed directly by the payment service provider and is not stored by us.
4.3. Customer account data
Username, email, password (stored in encrypted form), saved addresses and preferences.
4.4. Data contained in communications and advice
Content of messages and advisory requests, comfort preferences and dimensions. We do not request health data. If you decide to share information about physical conditions in order to be better advised, we process it only with your explicit consent, for the advice requested, and we recommend that you share only what is strictly necessary.
4.5. Technical and browsing data
IP address, device and browser type, pages visited, date and time, language and identifiers collected by cookies and similar technologies, in accordance with our Cookie Policy.
5. How We Collect Data
- Directly from you, through forms, advisory requests, account creation, checkout, email or other contacts.
- Automatically, through the operation of the website, security tools and, with your consent, statistics or marketing cookies.
- From service providers involved in your order (for example, payment confirmation or delivery status).
6. Purposes of Processing and Legal Basis
We process your data only where there is an appropriate legal basis:
| Purpose | Legal basis |
|---|---|
| Responding to contact and advisory requests | Pre-contractual steps and legitimate interest |
| Scheduling demonstrations and experiences | Pre-contractual steps |
| Processing, invoicing and delivering orders; managing payments | Performance of a contract |
| Managing the customer account | Performance of a contract |
| Legal guarantee, returns and after-sales support | Performance of a contract and compliance with a legal obligation |
| Tax, accounting and invoicing obligations | Compliance with a legal obligation |
| Handling complaints, the Complaints Book (Livro de Reclamações) and disputes; defence of rights | Legal obligation and legitimate interest |
| Fraud prevention, security and operation of the website | Legitimate interest |
| Statistical analysis and improvement of the website | Consent (cookies) |
| Newsletter and commercial communications | Consent or, for customers, legitimate interest, with the right to object in every communication |
7. Mandatory or Optional Nature of the Data
Data marked as mandatory in forms and at checkout is necessary to respond to the request or complete the order; without it we cannot provide the service or deliver the product. All other data is optional. Creating an account is optional.
8. Recipients and Data Sharing
We do not sell personal data. We may share it, to the extent necessary, with the following categories of recipients:
| Category | Purpose | Data shared |
|---|---|---|
| Website hosting, security, maintenance and technical support | Operation and protection of the website and the store | Technical data and data submitted on the site |
| Payment service providers | Processing payments and preventing fraud | Identification data, amount and order reference |
| Carriers, logistics and assembly partners | Delivery, collection and installation | Name, address, contact and description of the shipment |
| Industrial partners | Fulfilling orders and the guarantee, including made-to-measure products | Data strictly necessary for fulfilment and the guarantee |
| Email, scheduling and communication providers (for example, Brevo, for the newsletter and forms) | Confirmations, advice and support | Name, email and content of communications |
| Accountants, consultants and lawyers | Tax, accounting and legal obligations | Billing data and data necessary for the case |
| Administrative, tax, judicial and supervisory authorities | Compliance with legal obligations | Data required by law |
Whenever a provider processes data on our behalf, it acts as a processor, under a contract pursuant to Article 28 of the GDPR.
9. International Data Transfers
Some providers (for example, analytics and email services) may be established outside the European Economic Area. In such cases, the transfer only takes place with appropriate safeguards: an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, where applicable) or Standard Contractual Clauses, with supplementary measures whenever necessary.
10. Payments and Fraud Prevention
Payments are processed by authorised payment service providers, which act as controllers of the payment data they collect in order to comply with their own obligations (for example, fraud and money laundering prevention). We receive only the payment confirmation, the amount and the reference. We may process order data to detect and prevent fraud, based on our legitimate interest in protecting the store and its customers.
11. Commercial Communications and Newsletter
We only send newsletters and marketing communications with your consent or, in the case of customers and in relation to products or services similar to those already purchased, on the basis of legitimate interest and the possibility of free-of-charge objection (Article 13-A of Law no. 41/2004). Each communication includes a link to unsubscribe. You may also withdraw your consent via [email protected]. Essential communications about your order (confirmation, shipping, guarantee) are not marketing and will continue to be sent.
12. Data Retention
We retain data only for as long as necessary for the stated purposes or to comply with legal obligations:
| Type of data | Retention period |
|---|---|
| Contact and advisory requests without a purchase | Up to 12 months after the last interaction |
| Commercial requests and pre-contractual steps | Up to 24 months after the last interaction |
| Order, delivery, guarantee and returns data | For the duration of the legal guarantee and the applicable limitation periods |
| Invoicing and accounting | 10 years, or the period required by law |
| Customer account | While active and up to 24 months after inactivity, or until a deletion request |
| Newsletter and commercial communications | Until consent is withdrawn or 24 months of inactivity |
| Technical and security logs | Up to 12 months, unless an investigation is ongoing |
| Cookie consent records | For as long as necessary to demonstrate compliance |
Once the period has elapsed, the data is deleted or anonymised.
13. Cookies and Similar Technologies
We use cookies strictly necessary for the operation of the store (session, cart, checkout, security and language) and, with your consent, statistics and marketing cookies. You can manage your choices at any time. See our Cookie Policy.
14. Data Security
We apply technical and organisational measures appropriate to the risk, including encrypted connection (HTTPS), access control, regular updates, backups and restriction of access to those who need the data. No system is completely infallible. In the event of a data breach that poses a risk to data subjects, we will comply with the notification obligations set out in Articles 33 and 34 of the GDPR.
15. Data Subject Rights
Under the GDPR, you have the right to:
- Access your data and information about its processing;
- Rectification of inaccurate or incomplete data;
- Erasure of your data, where applicable;
- Restriction of processing, in the cases provided for by law;
- Object to processing based on legitimate interest and to direct marketing;
- Portability of data processed on the basis of consent or contract;
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
16. Exercising Your Rights
To exercise your rights, write to [email protected], identifying yourself and stating your request. We will reply within one month, extendable by a further two months in complex cases, with prior notice. For your security, we may ask for additional information to confirm your identity. The exercise of rights is free of charge, except for manifestly unfounded or excessive requests.
17. Complaints
Without prejudice to any other means of redress, you may lodge a complaint with the supervisory authority: Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD) - www.cnpd.pt - or with the supervisory authority of the Member State where you live or work. We would appreciate the opportunity to resolve the matter beforehand.
18. Automated Decisions and Profiling
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, nor do we create profiles for that purpose.
19. Children’s Data
The website and the store are intended for persons over 18 years of age. We do not knowingly collect data from minors. If we become aware that we have collected it, we will delete it.
20. Links to Third-Party Websites
The website may contain links to third-party sites (for example, payments, transport or social networks). We do not control those sites or their policies, so we recommend that you read them.
21. Changes to the Privacy Policy
We may update this policy to reflect legal, technical or operational changes. The date of the last update appears at the top of this page. In the event of substantial changes, we will inform you appropriately.
22. Contact
For questions about privacy and data protection: [email protected], or by post to Contemporary Constellation - Consultoria e Gestão Unipessoal, Lda., Travessa João Paulo II, 48, 4400-479 Vila Nova de Gaia, Portugal.
