nyra Logo
HomeMarketplace
EN
  1. Home
  2. /
  3. Privacy Policy
nyra Logo

Your marketplace for rare
finds and new treasures

Categories

  • Pokémon
  • One Piece
  • Magic: The Gathering
  • Riftbound

Service

  • Help & FAQ
  • Contact
  • Shipping
  • Card Conditions
  • Community

Join us

© 2025 nyra. All rights reserved

TermsPrivacy policy

Privacy Policy (Datenschutzerklärung) for nyra.gg

Effective Date: October 15, 2025

1. Introduction

This Privacy Policy describes how nyra GmbH (referred to as "we," "us," or "our") processes the personal data of users who interact with our website, nyra.gg (the "Website"). We respect your privacy and are committed to protecting your personal data in compliance with the Swiss Federal Act on Data Protection (FADP) and the European Union's General Data Protection Regulation (GDPR), where applicable.

2. The Data Controller

The party responsible for the processing of your personal data is:
nyra GmbH
c/o Benjamin Fischinger, Limmattalstrasse 327, 8049 Zürich
Email for Privacy Inquiries: info@nyra.gg

3. Personal Data We Collect

We only process data necessary for the operation of our TCG card trading platform, primarily for delivery and user verification. The data we collect includes:

Data CategoryPurpose of Collection
Identity DataName, username.
Contact DataEmail address, billing address, shipping address, telephone number.
Financial DataTransaction and purchase history.
(Payment details are processed by Stripe, not stored by us.)
Transaction DataDetails about products/services you have purchased
(buying/selling card listings, prices).
Technical DataIP address, browser type, operating system
(for website function and security).

4. How We Use Your Personal Data (Purpose and Legal Basis)

We use your data for the following essential purposes:

Purpose of ProcessingGDPR Legal BasisFADP Basis
To facilitate trades and deliveryPerformance of a contract with you.Lawfulness (Art. 6, Para. 1, FADP)
To manage your user account and verify identityPerformance of a contract with you.Lawfulness (Art. 6, Para. 1, FADP)
To process payments and refundsPerformance of a contract with you.Lawfulness (Art. 6, Para. 1, FADP)
To improve our Website (e.g., basic analytics)Our legitimate interests (improving services).Lawfulness (Art. 6, Para. 1, FADP)
To send marketing emails (if explicitly opted-in)Your specific consent (opt-in).Lawfulness (Art. 6, Para. 1, FADP) & Consent

5. Sharing Your Personal Data (Recipients)

We share your personal data only as necessary for the platform's function:

  • Other nyra.gg users: Your shipping address and name are shared with the seller/buyer to complete the transaction.

  • Payment Processor: Stripe processes all payment information. We do not store full credit card details.

  • Logistics Companies: Swiss Post and other shipping partners handle delivery. They receive necessary shipping data (name, address, tracking data).

  • Service Providers: Including website hosting and customer support platforms.

  • Legal Authorities: When legally required (e.g., tax authorities).

6. International Data Transfers

If your personal data is transferred outside of Switzerland or the European Economic Area (EEA), we ensure a legally appropriate level of protection is in place by relying on standard legal safeguards like Standard Contractual Clauses (SCCs) or the adequacy decisions of the respective Swiss and EU authorities.

7. Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. Contract and transaction data are generally retained for 10 years to comply with Swiss commercial and tax law.

8. Your Data Protection Rights

Under GDPR and FADP, you have rights regarding your personal data, including the right of Access, Rectification, Erasure ("Right to be Forgotten"), Restriction of Processing, Data Portability, and the right toObject. You can exercise these rights by contacting us at info@nyra.gg. You also have the right to lodge a complaint with the relevant data protection supervisory authority (e.g., the Swiss FDPIC