Privacy Policy

This Privacy Policy explains how Nyxarionvychrel processes personal data on the website nyxarionvychrel.world in connection with the product Vitaglide. It is written for users in the Netherlands and the European Economic Area and is intended to be transparent and understandable.

Controller (Data Controller): Nyxarionvychrel

Address: De Ruijterkade 24a, 1012 AA Amsterdam, Netherlands

Email: managers@nyxarionvychrel.world

Phone: +31202357822

Effective date: 2026-03-06

1. Scope and key definitions

This policy applies to personal data processed when you visit the website, interact with cookie controls, submit the order request form, or send a message via the contact form.

  • Personal data means any information relating to an identified or identifiable natural person.
  • Processing means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
  • Controller means the party that determines the purposes and means of processing.
  • Processor means a party processing personal data on behalf of the controller.

2. What data we collect

2.1 Data you provide

  • Order request form: name, email, optional phone number, message content, and consent confirmation (GDPR checkbox).
  • Contact form: name, email, message content, and consent confirmation.
  • Communications: if you contact us by email or phone, we may process the information you provide during that communication.

2.2 Data collected automatically

  • Technical and security data: basic device and browser information, approximate timestamps, and log data that helps keep the website available and secure.
  • Cookie preference data: your cookie category choices stored locally in your browser (see Cookie Policy).

We aim to minimize data collection. The website is designed so that optional cookie categories can remain disabled by default.

3. Purposes of processing and legal bases (GDPR Article 6)

3.1 Handling order requests and inquiries

Purpose: to receive and respond to your order request or message, confirm details, and provide customer support.

Legal basis: performance of a contract or steps prior to entering into a contract (GDPR Art. 6(1)(b)) and legitimate interests (GDPR Art. 6(1)(f)) in responding to customer communications.

3.2 Consent management and cookie choices

Purpose: to store and apply your cookie choices and respect your preferences.

Legal basis: consent (GDPR Art. 6(1)(a)) for optional analytics/marketing categories; legitimate interests (GDPR Art. 6(1)(f)) and compliance obligations for strictly necessary preference storage and core functionality.

3.3 Security and abuse prevention

Purpose: to protect the website, detect suspicious activity, and maintain integrity and availability.

Legal basis: legitimate interests (GDPR Art. 6(1)(f)).

4. Cookie and similar technologies

We use strictly necessary cookies and local storage for essential functionality and consent storage. Optional analytics and marketing categories are disabled unless you enable them. You can change your choice at any time via the cookie settings button on the site or by clearing saved preferences in your browser.

For detailed information about categories, purposes, and how to manage them, read the Cookie Policy.

5. Data retention

We keep personal data only as long as necessary for the purposes described in this policy.

  • Order requests and contact messages: typically retained for up to 24 months to manage support history and handle follow-up, unless a longer period is required by law or needed to resolve a dispute.
  • Consent records (cookie preferences): stored in your browser until you delete them or update your choices.
  • Security logs: retained for a limited period appropriate to security monitoring and incident investigation, usually days to a few months depending on the nature of the logs.

If you request deletion, we will evaluate the request against any legal obligations to retain certain data (for example, records required for accounting or regulatory compliance).

6. Recipients and data sharing

We do not sell personal data. We share personal data only when necessary to operate the website and handle your request, including with service providers acting as processors under contract.

  • Hosting and infrastructure providers: to host the website and related services.
  • Email or communication providers: to send and receive messages related to your inquiry.
  • Professional advisors: such as legal or accounting professionals where necessary for compliance or dispute handling.

Where a provider acts as a processor, we use appropriate contractual safeguards, including data processing agreements where required.

7. International transfers

If any personal data is processed outside the European Economic Area, we use appropriate safeguards such as an adequacy decision, Standard Contractual Clauses, or other lawful transfer mechanisms. We aim to select providers that support GDPR-compliant processing and minimize cross-border transfers.

8. Security measures

We take reasonable technical and organizational measures to protect personal data, including:

  • Encrypted transport when served over HTTPS.
  • Access controls, least-privilege principles, and authentication for administrative systems.
  • Logging and monitoring to detect abuse or anomalous behavior.
  • Regular updates and dependency hygiene for website components where applicable.
  • Data minimization and purpose limitation in form design.

No method of transmission or storage is completely risk-free. We continuously review and improve protections consistent with the nature of the data and processing.

9. Your rights (GDPR Chapter III)

If GDPR applies to you, you may have the following rights, subject to legal limitations:

  • Right of access: obtain confirmation and a copy of personal data we process about you.
  • Right to rectification: correct inaccurate or incomplete personal data.
  • Right to erasure: request deletion where applicable.
  • Right to restriction: request limited processing in certain cases.
  • Right to data portability: receive certain data in a structured, commonly used format and transmit it to another controller.
  • Right to object: object to processing based on legitimate interests.
  • Right to withdraw consent: withdraw consent at any time for consent-based processing without affecting the lawfulness of prior processing.

To exercise your rights, contact us using the details above. Please include enough information for us to verify your identity and locate the relevant data. We may ask for additional verification to protect you from unauthorized requests.

10. Complaints

You have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We encourage you to contact us first so we can address your concern promptly.

11. Children

This website is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can address it appropriately.

12. Changes to this Privacy Policy

We may update this policy to reflect changes in practices, legal requirements, or services. The effective date at the top indicates the latest revision. Material changes will be posted on this page.

13. Contact

Questions about privacy or data protection can be sent to the controller:

  • Nyxarionvychrel
  • De Ruijterkade 24a, 1012 AA Amsterdam, Netherlands
  • Email: managers@nyxarionvychrel.world
  • Phone: +31202357822