Legal

Privacy Policy

How NDY Imaging collects, uses, and protects your personal data in line with EU GDPR and Austrian law.

Effective: 22 November 2025

1. Data controller

NDY Imaging Studio GmbH (placeholder legal entity), Neubaugasse 12/4, 1070 Vienna, Austria is the data controller responsible for NDY Imaging – Visual Asset Lab. Contact privacy@ndy-imaging.com for privacy questions or complaints.

2. Data we collect

  • Account & contact data: name, email, password hash, billing address, social handles.
  • Creative assets: logos, fonts, images, product stills, and references you upload for us to edit.
  • Payment identifiers: Stripe customer IDs, transaction IDs, and tax details. NDY Imaging never sees full card numbers.
  • Usage data: site analytics, device/browser metadata, IP addresses, support chat history, and access logs to secure the studio.
  • Cookies: small files that keep you signed in and remember preferences. See our Cookie Policy.

3. Why we process data (legal bases)

  • Contract performance – to deliver creative services, share files, invoice retainers, and support you.
  • Legitimate interests – to secure systems, prevent abuse, and improve the studio.
  • Consent – for optional newsletters or testimonials.
  • Legal obligations – to comply with Austrian tax, accounting, and Know Your Customer requirements.

4. Processors & sharing

We share personal data only with vetted processors acting on our instructions: Stripe (payments), European cloud hosting, email service providers, analytics, and collaboration tools. We may disclose information to authorities or professional advisors when legally required. We never sell personal data.

5. International transfers

Some processors are located outside the European Economic Area. When we transfer data, we rely on EU Standard Contractual Clauses or equivalent safeguards and regularly review vendor security.

6. Retention

Account data is stored while you are a client and for up to six years afterwards to meet legal obligations. Uploaded design assets are deleted upon request or after your retainer ends unless you ask us to archive templates for future work.

7. Your rights

Under GDPR you may access, correct, delete, restrict, or port your personal data, object to certain processing, and withdraw consent at any time. Email privacy@ndy-imaging.com and we will respond within 30 days. You can lodge a complaint with the Austrian Data Protection Authority.

8. Cookies

We use essential cookies to keep sessions secure and optional analytics cookies to understand the product. You can block cookies in your browser, though some features may stop functioning. Details live in our Cookie Policy.

9. Security

We use TLS encryption, least-privilege access controls, and regular audits. No system is perfectly secure; please alert us if you suspect unauthorized access.

10. Updates

We may update this Privacy Policy to reflect changes in the studio or law. Material changes are emailed to active clients and the “effective” date will update at the top of this page.

11. Contact

NDY Imaging Studio GmbH, Neubaugasse 12/4, 1070 Vienna, Austria · privacy@ndy-imaging.com