Data Protection Declaration
1) Information on the collection of personal data and contact details of the controller
We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified. The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Kumar Chugh, Benzstraße 21, 51381 Leverkusen, Phone: +49 155 10386300, e-mail: sale@duo-cone.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when you visit our website
When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you: the visited page, date and time of access, amount of data sent in bytes, source/reference from which you came to the page, browser used, operating system used, and IP address used (if applicable, in anonymized form). Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use. This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
3) Hosting & content delivery network
For the hosting of our website and the presentation of the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union. All data collected on our website is processed on these servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
4) Cookies
In order to make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after the browser is closed ("session cookies"), in other cases these cookies remain on your end device for longer and allow page settings to be saved ("persistent cookies"). If personal data is also processed by individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given, or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website. You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or in general. Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting us
WhatsApp Business: we offer visitors the opportunity to contact us via the WhatsApp news service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, using the "Business Version" of WhatsApp. If you contact us via WhatsApp in connection with a specific business transaction, we store and use the mobile number and — if provided — your name in accordance with Art. 6 (1) lit. b GDPR to process your request. For general enquiries via WhatsApp, we rely on Art. 6 (1) lit. f GDPR based on our legitimate interest in responding efficiently. Your data is used only to answer your request and is not passed on to third parties, though data may be transferred to Meta Platforms Inc. in the USA, which participates in the EU-US Data Privacy Framework. See WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy. When you contact us by other means (e.g. contact form or e-mail), the data submitted is stored and used exclusively to respond to your request, on the basis of Art. 6 (1) point f GDPR (and Art. 6 (1) point b GDPR where your contact aims at concluding a contract). Your data is deleted once your enquiry has been finally processed, unless legal retention obligations apply.
6) Data processing when opening a customer account and for contract processing
Pursuant to Art. 6 (1) point b GDPR, personal data is collected and processed to the extent required when you open a customer account. Deletion of your account is possible at any time by contacting the address above; your data is then deleted once all related contracts have been fully processed, provided no legal retention periods or legitimate interest in continued storage stand in the way.
7) Processing of data for the purpose of order handling
Insofar as necessary for delivery and payment, the personal data we collect is passed on to the commissioned transport company and credit institution in accordance with Art. 6 (1) lit. b GDPR. Where we owe you updates for goods with digital elements, we process your contact data to inform you as required under Art. 6 (1) lit. c GDPR. We also work with service providers who support us in executing concluded contracts; certain personal data is transferred to them only to the extent necessary.
8) Web analysis services
Google Analytics 4: this website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to analyze website usage via cookies. Collected data, including an IP address shortened/anonymized within the EU/EEA, may be transmitted to Google LLC servers in the USA for further processing, under the EU-US Data Privacy Framework. Google Analytics 4 (including "Google Signals" cross-device tracking and "User IDs") is only used with your express consent under Art. 6 (1) lit. a GDPR, which you can revoke at any time via the cookie consent tool on this website. Further information: https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.
9) Rights of the data subject
Applicable data protection law grants you the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure / "right to be forgotten" (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), to be informed (Art. 19 GDPR), data portability (Art. 20 GDPR), to withdraw consent (Art. 7 (3) GDPR), and to lodge a complaint (Art. 77 GDPR). Where we process your data on the basis of a legitimate interest, you have the right to object at any time on grounds relating to your particular situation; we will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds, or the processing serves to assert, exercise, or defend legal claims. You may object at any time to processing for direct-marketing purposes.
10) Duration of storage of personal data
The duration of storage is based on the applicable legal basis, the purpose of processing, and any statutory retention period (e.g. commercial and tax retention periods). Data processed on the basis of consent is stored until you revoke it. Data subject to legal retention periods is deleted once those periods expire and the data is no longer necessary for the contract. Data processed on the basis of legitimate interest is stored until you exercise your right to object, unless we have compelling grounds for continued processing.