{"id":562,"date":"2026-10-17T18:24:15","date_gmt":"2026-10-17T17:24:15","guid":{"rendered":"https:\/\/nyasera.com\/privacy-policy\/"},"modified":"2026-10-19T13:23:29","modified_gmt":"2026-10-19T12:23:29","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/nyasera.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<style>\nhtml{scroll-behavior:smooth}html,body{overflow-x:clip}\nbody:has(.ccl) .page-header,body:has(.ccl) .entry-title,body:has(.ccl) .page-title{display:none}\n.ccl{font-family:Montserrat,system-ui,sans-serif;color:#3b444c;font-size:16px;line-height:1.65;margin:0}\n.ccl *{box-sizing:border-box}\n.ccl-hero{margin:0 calc(50% - 50vw);width:100vw;background:linear-gradient(135deg,#080D14 0%,#1b2430 100%);color:#fff;padding:84px 0 64px}\n.ccl-wrap{max-width:1180px;margin:0 auto;padding:0 28px}\n.ccl-kick{font-size:13px;letter-spacing:.16em;text-transform:uppercase;font-weight:700;color:#C9A98B;margin:0 0 22px}\n.ccl-hero h1{font-size:clamp(34px,5vw,56px);line-height:1.08;font-weight:800;color:#fff;margin:0 0 22px;letter-spacing:-.01em}\n.ccl-upd{font-size:15px;color:rgba(255,255,255,.82);margin:0}\n.ccl-grid{display:grid;grid-template-columns:300px minmax(0,1fr);gap:44px;padding-top:44px;padding-bottom:72px;align-items:start}\n.ccl-toc{position:sticky;top:110px;background:#fff;border:1px solid #E4DCCF;border-radius:14px;padding:20px 20px 14px}\n.ccl-toc-h{font-size:12px;letter-spacing:.14em;font-weight:800;color:#A98365;margin:0 0 12px}\n.ccl-toc ol{list-style:none;margin:0;padding:0;max-height:70vh;overflow:auto}\n.ccl-toc li{margin:0}\n.ccl-toc a{display:block;padding:5px 0;font-size:13.5px;line-height:1.35;color:#3b444c;text-decoration:none}\n.ccl-toc a:hover{color:#A98365}\n.ccl-sum{background:#F5F3EF;border:1px solid #E4DCCF;border-radius:16px;padding:24px 26px;margin:0 0 34px}\n.ccl-sum strong{color:#080D14}\n.ccl-sum ul{margin:12px 0 0;padding-left:20px}.ccl-sum li{margin:6px 0}\n.ccl-body section{scroll-margin-top:110px;margin:0 0 34px}\n.ccl-body h2{font-size:22px;line-height:1.3;font-weight:800;color:#080D14;margin:0 0 12px}\n.ccl-body h3{font-size:17px;font-weight:700;color:#080D14;margin:20px 0 8px}\n.ccl-body p{margin:0 0 12px}\n.ccl-body ul,.ccl-body ol{margin:0 0 14px;padding-left:22px}.ccl-body li{margin:5px 0}\n.ccl-body a{color:#A98365;text-decoration:underline}\n.ccl-tw{overflow-x:auto;margin:14px 0 18px;border:1px solid #E4DCCF;border-radius:12px}\n.ccl-body table{border-collapse:collapse;width:100%;font-size:14.5px;background:#fff}\n.ccl-body th{background:#F5F3EF;color:#080D14;text-align:left;font-weight:700;padding:11px 14px;border-bottom:1px solid #E4DCCF}\n.ccl-body td{padding:10px 14px;border-bottom:1px solid #E4DCCF;vertical-align:top}\n.ccl-body tr:last-child td{border-bottom:0}\n.ccl-note{background:#fff;border-left:4px solid #A98365;border-radius:6px;padding:14px 18px;margin:14px 0;font-size:15px}\n.ccl-kv{display:grid;grid-template-columns:200px 1fr;gap:0;margin:12px 0 16px;border:1px solid #E4DCCF;border-radius:12px;overflow:hidden;background:#fff}\n.ccl-kv dt,.ccl-kv dd{margin:0;padding:10px 14px;border-bottom:1px solid #E4DCCF;font-size:15px}\n.ccl-kv dt{font-weight:700;color:#080D14;background:#F5F3EF}\n.ccl-kv dt:nth-last-of-type(1),.ccl-kv dd:last-of-type{border-bottom:0}\n@media(max-width:900px){.ccl-grid{grid-template-columns:1fr;gap:24px}.ccl-toc{position:static}.ccl-toc ol{max-height:none}.ccl-hero{padding:56px 0 44px}.ccl-kv{grid-template-columns:1fr}.ccl-kv dt{border-bottom:0;padding-bottom:2px}}\n<\/style><div class='ccl'><header class='ccl-hero'><div class='ccl-wrap'><p class='ccl-kick'>Privacy Policy<\/p><h1>Privacy Policy&#32;-&#32;NYASERA<\/h1><p class='ccl-upd'>Last updated: 19 October 2026 &nbsp;|&nbsp; Version 1.1<\/p><\/div><\/header><div class='ccl-wrap ccl-grid'><aside class='ccl-toc'><p class='ccl-toc-h'>CONTENTS<\/p><ol><li><a href='#s1'>1. Introduction<\/a><\/li><li><a href='#s2'>2. Data Controller<\/a><\/li><li><a href='#s3'>3. Scope of Application<\/a><\/li><li><a href='#s4'>4. Categories of Personal Data Processed<\/a><\/li><li><a href='#s5'>5. How We Collect Data<\/a><\/li><li><a href='#s6'>6. Purposes of Processing and Legal Basis<\/a><\/li><li><a href='#s7'>7. Mandatory or Optional Nature of the Data<\/a><\/li><li><a href='#s8'>8. Recipients and Data Sharing<\/a><\/li><li><a href='#s9'>9. International Data Transfers<\/a><\/li><li><a href='#s10'>10. Payments and Fraud Prevention<\/a><\/li><li><a href='#s11'>11. Commercial Communications and Newsletter<\/a><\/li><li><a href='#s12'>12. Data Retention<\/a><\/li><li><a href='#s13'>13. Cookies and Similar Technologies<\/a><\/li><li><a href='#s14'>14. Data Security<\/a><\/li><li><a href='#s15'>15. Data Subject Rights<\/a><\/li><li><a href='#s16'>16. Exercising Your Rights<\/a><\/li><li><a href='#s17'>17. Complaints<\/a><\/li><li><a href='#s18'>18. Automated Decisions and Profiling<\/a><\/li><li><a href='#s19'>19. Children&#8217;s Data<\/a><\/li><li><a href='#s20'>20. Links to Third-Party Websites<\/a><\/li><li><a href='#s21'>21. Changes to the Privacy Policy<\/a><\/li><li><a href='#s22'>22. Contact<\/a><\/li><\/ol><\/aside><article class='ccl-body'><div class='ccl-sum'><strong>Quick summary<\/strong>&#32;-&#32;the essentials, without reading everything:<ul><li>The data controller is <strong>Contemporary Constellation, Lda.<\/strong>, owner and operator of the NYASERA brand.<\/li><li>We process contact, order, delivery and billing data, and technical data, only to respond to requests, advise on product choice, process orders and comply with legal obligations.<\/li><li>We do not sell personal data. We share it only with essential service providers (hosting, payments, transport, accounting) and with authorities where required by law.<\/li><li>We do not ask for health data. If you provide it on your own initiative for advisory purposes, we process it only with your consent and for that purpose.<\/li><li>You can exercise your rights of access, rectification, erasure, objection, restriction and portability at <a href='mailto:legal@nyasera.com'>legal@nyasera.com<\/a> and lodge a complaint with the Portuguese Data Protection Authority (CNPD).<\/li><\/ul><\/div><section id='s1'><h2>1. Introduction<\/h2><p>This Privacy Policy explains how your personal data is collected and processed when you visit the website <strong>nyasera.com<\/strong>, request advice, create an account, buy our products or communicate with us. It is drafted in compliance with Regulation (EU) 2016\/679 (GDPR), Law no. 58\/2019 and Law no. 41\/2004 (electronic communications).<\/p><p>We are guided by the principle of accountability: we process data in accordance with the following principles under Article 5 of the GDPR:<\/p><ul><li><strong>Lawfulness, fairness and transparency<\/strong>: we explain what we do and why;<\/li><li><strong>Purpose limitation<\/strong>: we only use data for the purposes described here;<\/li><li><strong>Data minimisation<\/strong>: we collect only what is necessary;<\/li><li><strong>Accuracy<\/strong>: we keep data up to date and correct errors;<\/li><li><strong>Storage limitation<\/strong>: we delete data when it is no longer needed;<\/li><li><strong>Integrity and confidentiality<\/strong>: we protect data with appropriate measures.<\/li><\/ul><\/section><section id='s2'><h2>2. Data Controller<\/h2><p>The controller of your personal data is:<\/p><dl class='ccl-kv'><dt>Company name<\/dt><dd>Contemporary Constellation&#32;-&#32;Consultoria e Gest\u00e3o Unipessoal, Lda.<\/dd><dt>NIPC (Portuguese tax ID)<\/dt><dd>516 756 583<\/dd><dt>Address<\/dt><dd>Travessa Jo\u00e3o Paulo II, 48, 4400-479 Vila Nova de Gaia, Portugal<\/dd><dt>Email<\/dt><dd><a href='mailto:legal@nyasera.com'>legal@nyasera.com<\/a><\/dd><dt>Brand and website<\/dt><dd>NYASERA&#32;-&#32;nyasera.com<\/dd><\/dl><p>We have appointed a Data Protection Officer (DPO), who can be contacted at <a href='mailto:privacidade@nyasera.com'>privacidade@nyasera.com<\/a>. You may also send privacy-related questions to the email address indicated above.<\/p><\/section><section id='s3'><h2>3. Scope of Application<\/h2><p>This policy applies to website visitors, to people who request advice or a demonstration, to customers (consumers and businesses) and to anyone who communicates with us by any means. It does not apply to third-party websites to which our site may link.<\/p><\/section><section id='s4'><h2>4. Categories of Personal Data Processed<\/h2><h3>4.1. Identification and contact data<\/h3><p>Name, email, telephone, country and city, when you provide them in forms, advisory requests or when creating an account.<\/p><h3>4.2. Order, delivery and billing data<\/h3><p>Selected products and measurements, delivery and billing address, tax identification number (NIF) (when requested for an invoice), order value and status, purchase and return history. Payment data (for example, card number) is processed directly by the payment service provider and is <strong>not stored by us<\/strong>.<\/p><h3>4.3. Customer account data<\/h3><p>Username, email, password (stored in encrypted form), saved addresses and preferences.<\/p><h3>4.4. Data contained in communications and advice<\/h3><p>Content of messages and advisory requests, comfort preferences and dimensions. <strong>We do not request health data.<\/strong> If you decide to share information about physical conditions in order to be better advised, we process it only with your explicit consent, for the advice requested, and we recommend that you share only what is strictly necessary.<\/p><h3>4.5. Technical and browsing data<\/h3><p>IP address, device and browser type, pages visited, date and time, language and identifiers collected by cookies and similar technologies, in accordance with our Cookie Policy.<\/p><\/section><section id='s5'><h2>5. How We Collect Data<\/h2><ul><li><strong>Directly from you<\/strong>, through forms, advisory requests, account creation, checkout, email or other contacts.<\/li><li><strong>Automatically<\/strong>, through the operation of the website, security tools and, with your consent, statistics or marketing cookies.<\/li><li><strong>From service providers<\/strong> involved in your order (for example, payment confirmation or delivery status).<\/li><\/ul><\/section><section id='s6'><h2>6. Purposes of Processing and Legal Basis<\/h2><p>We process your data only where there is an appropriate legal basis:<\/p><div class='ccl-tw'><table><thead><tr><th>Purpose<\/th><th>Legal basis<\/th><\/tr><\/thead><tbody><tr><td>Responding to contact and advisory requests<\/td><td>Pre-contractual steps and legitimate interest<\/td><\/tr><tr><td>Scheduling demonstrations and experiences<\/td><td>Pre-contractual steps<\/td><\/tr><tr><td>Processing, invoicing and delivering orders; managing payments<\/td><td>Performance of a contract<\/td><\/tr><tr><td>Managing the customer account<\/td><td>Performance of a contract<\/td><\/tr><tr><td>Legal guarantee, returns and after-sales support<\/td><td>Performance of a contract and compliance with a legal obligation<\/td><\/tr><tr><td>Tax, accounting and invoicing obligations<\/td><td>Compliance with a legal obligation<\/td><\/tr><tr><td>Handling complaints, the Complaints Book (Livro de Reclama\u00e7\u00f5es) and disputes; defence of rights<\/td><td>Legal obligation and legitimate interest<\/td><\/tr><tr><td>Fraud prevention, security and operation of the website<\/td><td>Legitimate interest<\/td><\/tr><tr><td>Statistical analysis and improvement of the website<\/td><td>Consent (cookies)<\/td><\/tr><tr><td>Newsletter and commercial communications<\/td><td>Consent or, for customers, legitimate interest, with the right to object in every communication<\/td><\/tr><\/tbody><\/table><\/div><\/section><section id='s7'><h2>7. Mandatory or Optional Nature of the Data<\/h2><p>Data marked as mandatory in forms and at checkout is necessary to respond to the request or complete the order; without it we cannot provide the service or deliver the product. All other data is optional. Creating an account is optional.<\/p><\/section><section id='s8'><h2>8. Recipients and Data Sharing<\/h2><p>We do not sell personal data. We may share it, to the extent necessary, with the following categories of recipients:<\/p><div class='ccl-tw'><table><thead><tr><th>Category<\/th><th>Purpose<\/th><th>Data shared<\/th><\/tr><\/thead><tbody><tr><td>Website hosting, security, maintenance and technical support<\/td><td>Operation and protection of the website and the store<\/td><td>Technical data and data submitted on the site<\/td><\/tr><tr><td>Payment service providers<\/td><td>Processing payments and preventing fraud<\/td><td>Identification data, amount and order reference<\/td><\/tr><tr><td>Carriers, logistics and assembly partners<\/td><td>Delivery, collection and installation<\/td><td>Name, address, contact and description of the shipment<\/td><\/tr><tr><td>Industrial partners<\/td><td>Fulfilling orders and the guarantee, including made-to-measure products<\/td><td>Data strictly necessary for fulfilment and the guarantee<\/td><\/tr><tr><td>Email, scheduling and communication providers (for example, Brevo, for the newsletter and forms)<\/td><td>Confirmations, advice and support<\/td><td>Name, email and content of communications<\/td><\/tr><tr><td>Accountants, consultants and lawyers<\/td><td>Tax, accounting and legal obligations<\/td><td>Billing data and data necessary for the case<\/td><\/tr><tr><td>Administrative, tax, judicial and supervisory authorities<\/td><td>Compliance with legal obligations<\/td><td>Data required by law<\/td><\/tr><\/tbody><\/table><\/div><p>Whenever a provider processes data on our behalf, it acts as a processor, under a contract pursuant to Article 28 of the GDPR.<\/p><\/section><section id='s9'><h2>9. International Data Transfers<\/h2><p>Some providers (for example, analytics and email services) may be established outside the European Economic Area. In such cases, the transfer only takes place with appropriate safeguards: an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, where applicable) or Standard Contractual Clauses, with supplementary measures whenever necessary.<\/p><\/section><section id='s10'><h2>10. Payments and Fraud Prevention<\/h2><p>Payments are processed by authorised payment service providers, which act as controllers of the payment data they collect in order to comply with their own obligations (for example, fraud and money laundering prevention). We receive only the payment confirmation, the amount and the reference. We may process order data to detect and prevent fraud, based on our legitimate interest in protecting the store and its customers.<\/p><\/section><section id='s11'><h2>11. Commercial Communications and Newsletter<\/h2><p>We only send newsletters and marketing communications with your consent or, in the case of customers and in relation to products or services similar to those already purchased, on the basis of legitimate interest and the possibility of free-of-charge objection (Article 13-A of Law no. 41\/2004). Each communication includes a link to unsubscribe. You may also withdraw your consent via <a href='mailto:legal@nyasera.com'>legal@nyasera.com<\/a>. Essential communications about your order (confirmation, shipping, guarantee) are not marketing and will continue to be sent.<\/p><\/section><section id='s12'><h2>12. Data Retention<\/h2><p>We retain data only for as long as necessary for the stated purposes or to comply with legal obligations:<\/p><div class='ccl-tw'><table><thead><tr><th>Type of data<\/th><th>Retention period<\/th><\/tr><\/thead><tbody><tr><td>Contact and advisory requests without a purchase<\/td><td>Up to 12 months after the last interaction<\/td><\/tr><tr><td>Commercial requests and pre-contractual steps<\/td><td>Up to 24 months after the last interaction<\/td><\/tr><tr><td>Order, delivery, guarantee and returns data<\/td><td>For the duration of the legal guarantee and the applicable limitation periods<\/td><\/tr><tr><td>Invoicing and accounting<\/td><td>10 years, or the period required by law<\/td><\/tr><tr><td>Customer account<\/td><td>While active and up to 24 months after inactivity, or until a deletion request<\/td><\/tr><tr><td>Newsletter and commercial communications<\/td><td>Until consent is withdrawn or 24 months of inactivity<\/td><\/tr><tr><td>Technical and security logs<\/td><td>Up to 12 months, unless an investigation is ongoing<\/td><\/tr><tr><td>Cookie consent records<\/td><td>For as long as necessary to demonstrate compliance<\/td><\/tr><\/tbody><\/table><\/div><p>Once the period has elapsed, the data is deleted or anonymised.<\/p><\/section><section id='s13'><h2>13. Cookies and Similar Technologies<\/h2><p>We use cookies strictly necessary for the operation of the store (session, cart, checkout, security and language) and, with your consent, statistics and marketing cookies. You can manage your choices at any time. See our <a href=\"https:\/\/nyasera.com\/en\/cookie-policy\/\">Cookie Policy<\/a>.<\/p><\/section><section id='s14'><h2>14. Data Security<\/h2><p>We apply technical and organisational measures appropriate to the risk, including encrypted connection (HTTPS), access control, regular updates, backups and restriction of access to those who need the data. No system is completely infallible. In the event of a data breach that poses a risk to data subjects, we will comply with the notification obligations set out in Articles 33 and 34 of the GDPR.<\/p><\/section><section id='s15'><h2>15. Data Subject Rights<\/h2><p>Under the GDPR, you have the right to:<\/p><ul><li><strong>Access<\/strong> your data and information about its processing;<\/li><li><strong>Rectification<\/strong> of inaccurate or incomplete data;<\/li><li><strong>Erasure<\/strong> of your data, where applicable;<\/li><li><strong>Restriction<\/strong> of processing, in the cases provided for by law;<\/li><li><strong>Object<\/strong> to processing based on legitimate interest and to direct marketing;<\/li><li><strong>Portability<\/strong> of data processed on the basis of consent or contract;<\/li><li><strong>Withdraw consent<\/strong> at any time, without affecting the lawfulness of prior processing.<\/li><\/ul><\/section><section id='s16'><h2>16. Exercising Your Rights<\/h2><p>To exercise your rights, write to <a href='mailto:legal@nyasera.com'>legal@nyasera.com<\/a>, identifying yourself and stating your request. We will reply within one month, extendable by a further two months in complex cases, with prior notice. For your security, we may ask for additional information to confirm your identity. The exercise of rights is free of charge, except for manifestly unfounded or excessive requests.<\/p><\/section><section id='s17'><h2>17. Complaints<\/h2><p>Without prejudice to any other means of redress, you may lodge a complaint with the supervisory authority: <strong>Portuguese Data Protection Authority (Comiss\u00e3o Nacional de Prote\u00e7\u00e3o de Dados, CNPD)<\/strong>&#32;-&#32;<a href=\"https:\/\/www.cnpd.pt\" rel=\"noopener\" target=\"_blank\">www.cnpd.pt<\/a>&#32;-&#32;or with the supervisory authority of the Member State where you live or work. We would appreciate the opportunity to resolve the matter beforehand.<\/p><\/section><section id='s18'><h2>18. Automated Decisions and Profiling<\/h2><p>We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, nor do we create profiles for that purpose.<\/p><\/section><section id='s19'><h2>19. Children&#8217;s Data<\/h2><p>The website and the store are intended for persons over 18 years of age. We do not knowingly collect data from minors. If we become aware that we have collected it, we will delete it.<\/p><\/section><section id='s20'><h2>20. Links to Third-Party Websites<\/h2><p>The website may contain links to third-party sites (for example, payments, transport or social networks). We do not control those sites or their policies, so we recommend that you read them.<\/p><\/section><section id='s21'><h2>21. Changes to the Privacy Policy<\/h2><p>We may update this policy to reflect legal, technical or operational changes. The date of the last update appears at the top of this page. In the event of substantial changes, we will inform you appropriately.<\/p><\/section><section id='s22'><h2>22. Contact<\/h2><p>For questions about privacy and data protection: <a href='mailto:legal@nyasera.com'>legal@nyasera.com<\/a>, or by post to Contemporary Constellation&#32;-&#32;Consultoria e Gest\u00e3o Unipessoal, Lda., Travessa Jo\u00e3o Paulo II, 48, 4400-479 Vila Nova de Gaia, Portugal.<\/p><\/section><\/article><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Privacy Policy&#32;-&#32;NYASERA Last updated: 19 October 2026 &nbsp;|&nbsp; Version 1.1 CONTENTS 1. Introduction 2. Data Controller 3. Scope of Application 4. Categories of Personal Data Processed 5. How We Collect Data 6. Purposes of Processing and Legal Basis 7. Mandatory or Optional Nature of the Data 8. Recipients and Data Sharing 9. International [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-562","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/pages\/562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/comments?post=562"}],"version-history":[{"count":4,"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/pages\/562\/revisions"}],"predecessor-version":[{"id":744,"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/pages\/562\/revisions\/744"}],"wp:attachment":[{"href":"https:\/\/nyasera.com\/en\/wp-json\/wp\/v2\/media?parent=562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}