Privacy policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide your data. Failure to provide it has no consequences. This only applies insofar as no other information is given in the subsequent processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our website without providing any personal information.
Each time you access our website, usage data is transmitted to us or to our web hosting provider / IT service provider by your internet browser and stored in log files (so-called server log files). The stored data include, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing takes place pursuant to Art. 6 (1)(f) GDPR on the basis of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the United States, and processed there. For Canada, an adequacy decision of the European Commission exists. For the USA, an adequacy decision of the European Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the Standard Contractual Clauses adopted by the European Commission.
Contact
Controller
You may contact us if you wish. The controller responsible for data processing is:
David Ressler
Dorf 230a
6521 Fließ
Austria
Phone: +43 650 3253963
Email: shop@duqit.at
Customer-initiated contact by email
If you contact us on your own initiative by email, we collect your personal data (name, email address, message text) only to the extent that you provide it. The processing of this data serves the purpose of handling and responding to your inquiry.
If your contact request serves the performance of pre-contractual measures (e.g. consultation regarding purchase interest, preparation of an offer) or relates to an existing contract between you and us, processing is carried out pursuant to Art. 6 (1)(b) GDPR.
If the contact takes place for other reasons, processing is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data that is based on Art. 6 (1)(f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention obligations, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The processing of this data serves the purpose of contacting you.
If the contact serves the performance of pre-contractual measures (e.g. consultation regarding purchase interest, preparation of an offer) or concerns an existing contract between you and us, this processing takes place pursuant to Art. 6 (1)(b) GDPR.
If the contact takes place for other reasons, this processing takes place pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 (1)(f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in accordance with statutory retention obligations, unless you have consented to further processing and use.
Customer Account / Orders
Customer Account
When you open a customer account, we collect your personal data to the extent indicated in the registration process. The processing of this data serves the purpose of improving your shopping experience and simplifying order processing.
Processing is carried out pursuant to Art. 6 (1)(a) GDPR, based on your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out based on the consent before its withdrawal. Your customer account will then be deleted.
Collection, processing and transfer of personal data in orders
When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and to handle your inquiries. Providing the data is required for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.
Processing is carried out pursuant to Art. 6 (1)(b) GDPR and is necessary for the performance of a contract with you.
Your data are transferred, for example, to shipping companies, dropshipping / fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases we strictly comply with legal requirements. The scope of data transfer is limited to the minimum necessary.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the United States, and processed there. For Canada, an adequacy decision of the European Commission exists. For the USA, an adequacy decision under the Trans-Atlantic Data Privacy Framework (TADPF) exists. Shopify is not certified under the TADPF. This transfer takes place on the basis of contractual obligations comparable to the Standard Contractual Clauses of the European Commission.
Shipping / Inventory Management
Transfer of your email address to shipping companies for shipment status information
If you have expressly consented to this during the ordering process, we will forward your email address to the shipping company as part of contract fulfilment. The purpose of this is to allow the shipping company to inform you by email about the shipping status.
Processing is carried out based on your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of the processing carried out prior to withdrawal.
Use of an external merchandise management / inventory system
We use an external merchandise management / inventory system as part of order processing. For this purpose, the personal data collected in the course of your order are transmitted to:
Shopify Inc., 150 Elgin Street, Ottawa, ON K2P 1L4, Canada
and
sevDesk GmbH, Zettachring 6, 89081 Ulm, Germany.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out pursuant to Art. 6 (1)(b) GDPR.
Payment Service Providers
Use of PayPal Express
We use on our website the payment service PayPal Express provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The processing of data serves the purpose of enabling you to pay via the PayPal Express payment service.
To integrate this payment service, it is necessary for PayPal to collect, store, and analyse data (e.g. IP address, device type, operating system, browser type, and the location of your device) when you access our website. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.
The processing of your personal data is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in offering customer-oriented payment options. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data.
When you select and use PayPal Express, the data required for payment processing are transmitted to PayPal in order to fulfil the contract with you using the chosen payment method. This processing takes place pursuant to Art. 6 (1)(b) GDPR.
Further information on data processing when using PayPal Express can be found in PayPal’s Privacy Policy: https://www.paypal.com/privacy
Use of PayPal Check-Out
We use on our website the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). The data processing serves the purpose of enabling you to make payments via this payment service.
When you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing are transmitted to PayPal so that the contract with you can be fulfilled using your chosen payment method. This processing is carried out pursuant to Art. 6 (1)(b) GDPR.
Cookies may be stored that enable your browser to be recognised. This processing is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report where necessary, based on mathematical-statistical procedures and using credit reference agencies.
For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of non-payment to make a balanced decision about the establishment, performance, or termination of the contractual relationship. The credit report may include probability values (“score values”), which are calculated based on scientifically recognised mathematical-statistical procedures and which include, among other things, address data. Your legitimate interests are taken into account in accordance with legal requirements.
The processing of the data serves the purpose of credit assessment for contract initiation. Processing is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in protection against payment default when PayPal provides services in advance.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Art. 6 (1)(f) GDPR by notifying PayPal.
Providing the data is required for the conclusion of the contract with your chosen payment method. Failure to provide the data means that the contract cannot be concluded using this payment method.
Third-party providers
When paying via a third-party provider payment method, the data required for payment processing are transmitted to PayPal. This processing takes place pursuant to Art. 6 (1)(b) GDPR. For the execution of this payment method, the data may then be transferred by PayPal to the respective provider. This processing likewise takes place pursuant to Art. 6 (1)(b) GDPR.
Local third-party providers can include, for example:
– Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
– Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
– giropay (Paydirekt GmbH, Stephanstr. 14–16, 60313 Frankfurt am Main, Germany)
Purchase on account via PayPal
If you choose the “purchase on account” payment method, the data required for payment processing are first transmitted to PayPal. For the execution of this payment method, the data are then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28–29, 10587 Berlin; “Ratepay”) in order to fulfil the contract with you using the selected payment option. This processing is carried out pursuant to Art. 6 (1)(b) GDPR.
Ratepay may carry out a credit check using credit reference agencies, following the procedure described above. The data processing serves the purpose of credit assessment for contract initiation. Processing is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in protecting against payment default when Ratepay provides services in advance.
Further information on data protection and which credit reference agencies Ratepay uses can be found here:
https://www.ratepay.com/legal-payment-dataprivacy/
and
https://www.ratepay.com/legal-payment-creditagencies/
Further information about PayPal’s data processing can be found in PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Klarna payment options
We use on our website the payment service provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”). When you select and use a Klarna payment method, the personal data required for payment processing are transmitted to Klarna so that the contract with you can be fulfilled using the chosen payment method. This processing is carried out pursuant to Art. 6 (1)(b) GDPR.
Cookies may be stored that enable your browser to be recognised. This processing takes place pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.
“Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant transfer), “Financing” (instalment purchase)
For certain payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant transfer), or “Financing” (instalment purchase), Klarna reserves the right to obtain a credit report where necessary.
For this purpose, Klarna transmits the personal data required for a credit assessment — such as first and last name, address, gender, email address, IP address, and data relating to the order — to a credit reference agency, in order to verify identity and creditworthiness. Klarna then uses the received information on the statistical probability of non-payment to make a balanced decision about the establishment, performance, or termination of the contractual relationship.
The credit report may include probability values (“score values”), which are calculated based on scientifically recognised mathematical-statistical procedures and which include, among other things, address data. Your legitimate interests are protected in accordance with statutory requirements.
The processing serves the purpose of credit assessment for contract initiation. Processing is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in protecting against payment default when Klarna provides services in advance.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Art. 6 (1)(f) GDPR by notifying Klarna.
Providing the data is required for the conclusion of the contract with the payment method you have chosen. Failure to provide the data means that the contract cannot be concluded using that payment method.
Further information, in particular which credit reference agencies Klarna shares your personal data with, can be found at:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
General information about Klarna can be found at: https://www.klarna.com/de/
Your personal data will be processed by Klarna in accordance with the applicable data protection regulations and as described in Klarna’s privacy policy:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
Cookies
Our website uses cookies. Cookies are small text files that are stored on the user’s device by the internet browser. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string that enables the browser to be recognised when the website is accessed again.
Cookies are stored on your device. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note that if you do so, you may not be able to use all functions of this website in full.
You can find out how to manage (including disable) cookies in the most common browsers via the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in this Privacy Policy, we use only technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. Cookies also enable our systems to recognise your browser even after you change pages and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary that the browser can be recognised again even after a page change.
The use of cookies or comparable technologies is carried out pursuant to § 25 (2) TDDDG. The processing of your personal data is carried out pursuant to Art. 6 (1)(f) GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and efficient design of our services. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data.
Use of the Shopify Consent Tool (“Shopify Privacy & Compliance”)
We use on our website the consent tool “Shopify Privacy & Compliance” provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”). Shopify is affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
This tool enables you to give consent to data processing operations on the website — in particular the setting of cookies — and to exercise your right to withdraw consent already given.
The data processing serves the purpose of obtaining and documenting the consents required by law and thereby complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the United States, and processed there. For Canada, an adequacy decision of the European Commission exists. For the USA, an adequacy decision exists under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the Standard Contractual Clauses of the European Commission.
The processing is carried out for the fulfilment of a legal obligation pursuant to Art. 6 (1)(c) GDPR.
Further information on Shopify’s data protection can be found at:
https://www.shopify.com/de/legal/datenschutz
Information on the cookies used can be found at:
https://www.shopify.com/de/legal/cookies
Analytics
Use of Shopify Analytics / Statistics
We use on our website the analytics and statistics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) within the framework of a data processing agreement. Shopify is affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The processing of data serves the purpose of analysing this website and its visitors. For this purpose, data are stored for marketing and optimisation purposes and provided in reports, analyses, and statistics. The following device information, among other things, is collected and processed: information about the web browser, the IP address, the time zone, and some of the cookies installed on your device. When you navigate the website, information about the pages or products you view, the referring website (referrer URL), and information about how you interact with the website is also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to record information about how you browse the website) are used for this.
Your data may be transferred to third countries outside the EU, in particular to Canada and the United States, and processed there. For Canada, an adequacy decision of the European Commission exists. For the USA, an adequacy decision exists under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the Standard Contractual Clauses of the European Commission.
The use of cookies or comparable technologies takes place with your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data takes place with your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You can find further information on data protection at Shopify at:
https://www.shopify.com/de/legal/datenschutz
Information on the data processing agreement:
https://www.shopify.com/de/legal/dpa
Information on cookies used:
https://www.shopify.com/de/legal/cookies
Plugins and Other Services
Use of Google reCAPTCHA
We use on our website the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). The purpose of this service is to distinguish whether input is made by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA.
For the USA, an adequacy decision of the European Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data is carried out with your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before withdrawal.
Further information on Google reCAPTCHA and the related privacy policy can be found at:
https://www.google.com/recaptcha/intro/android.html
and
https://www.google.com/privacy
Use of Google Invisible reCAPTCHA
We use on our website the Invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). This service serves the purpose of distinguishing between human input and automated, machine processing. In the background, Google collects and analyses usage data, which are used by Invisible reCAPTCHA to distinguish regular users from bots. For this purpose, your input is transmitted to Google and further used there. In addition, the IP address and, where applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision of the European Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data is carried out with your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before withdrawal.
Further information on Google reCAPTCHA and the related privacy policy can be found at:
https://www.google.com/recaptcha/intro/android.html
and
https://www.google.com/privacy
Use of Google Maps
We use on our website the function for embedding Google Maps maps provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
This function enables the visual display of geographical information and interactive maps. When you access pages in which Google Maps maps are embedded, Google also collects, processes, and uses data about visitors to those pages.
Your data may also be transmitted to the USA. For the USA, an adequacy decision of the European Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data is carried out with your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before withdrawal.
Further information on the collection and use of data by Google can be found in Google’s privacy notices at:
https://www.google.com/privacypolicy.html
There you can also change your settings in the privacy center so that you can manage and protect the data processed by Google.
Use of Google Fonts
We use Google Fonts on our website, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The processing of data serves the purpose of providing a uniform presentation of fonts on our website. In order to load the fonts, a connection to Google’s servers is established when the page is accessed. Cookies may be used in this process. In doing so, your IP address and information about the browser you are using are processed and transmitted to Google. These data are not linked to your Google account.
Your data may be transmitted to the USA. For the USA, an adequacy decision of the European Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data is carried out with your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out before withdrawal.
Further information on data processing and data protection can be found at:
https://www.google.de/intl/de/policies/
and
https://developers.google.com/fonts/faq
Rights of Data Subjects / Storage Period
Duration of storage
After the contract has been fully performed, the data will first be stored for the duration of the statutory warranty period and then retained in accordance with statutory retention periods, in particular those under tax and commercial law. After expiry of these periods, the data will be deleted unless you have consented to further processing and use.
Rights of the data subject
Where the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR:
– Right of access (Art. 15 GDPR)
– Right to rectification (Art. 16 GDPR)
– Right to erasure (Art. 17 GDPR)
– Right to restriction of processing (Art. 18 GDPR)
– Right to data portability (Art. 20 GDPR)
You also have the right to object pursuant to Art. 21 (1) GDPR to processing operations that are based on Art. 6 (1)(f) GDPR, as well as to processing for direct marketing purposes.
Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.
Right to object
Where the processing of personal data described in this Privacy Policy is based on our legitimate interests pursuant to Art. 6 (1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data with effect for the future.
After an objection has been made, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defence of legal claims.
Last updated: 22 October 2024