Privacy Policy

Last Updated: February 2025

We consider ensuring the right to the protection of personal data as a fundamental Duckseal commitment, we will therefore devote all the resources and efforts necessary to process your data in full compliance with Regulation (EU) 2016/679 (“General data protection regulation” or “GDPR”), the, as well as any other applicable legislation on the territory of Romania. As one of the essential principles of this legal framework is transparency, we have prepared this document containing the conditions under which DUCKSEAL S.R.L. uses your personal data.

The data we ask for are those data that help us to identify you when using the website hosted at www.duckseal.info (hereinafter “Site”). We assure you that this data will only be used in accordance with this privacy statement and for the exclusive purpose for which it was collected.

DUCKSEAL S.R.L., as the owner of the Site, respects the privacy and security of the processing of personal data of each person who visits this site for the purpose of making online orders.

According to the legal provisions, DUCKSEAL S.R.L. has the obligation to manage, safely and only for the specified purposes, the personal data you provide to us.

We reserve the right to periodically update and modify this Privacy Policy to reflect any changes in the way we process your personal data or any changes to legal requirements. If we do, we will mention the date from which it applies at the top of the Privacy Policy.

Before making any updates and/or changes that would make this Privacy Policy less restrictive in respect of the use or disclosure of personal data collected prior to the update, update, and/or change, we will notify you in advance of the update and/or modification through a pop-up window on the Site. We encourage you to periodically review this privacy policy to inform you about the collection, use and disclosure of your personal information. Your continued use of the

Site is your agreement to the current privacy policy.

CONTACT DETAILS

Duckseal is the trade name of DUCKSEAL S.R.L., a Romanian legal entity, having its registered office in Bucharest, Sector 1, Chitila Road 242D, building 1, 3rd floor, building, apartment 27 registered at the Trade Register of the Bucharest Tribunal under no. J40/10969/2023, unique tax registration code 48325902 (hereinafter “Duckseal” or “us“). For the purposes of data protection legislation, we are an operator when processing your personal data.

You can contact us, including to provide you with any additional information you may need regarding the processing of your data, using the following email address: info@duckseal.online or the following postal address: Bucharest, Sector 1, Chitila Road 242D, building 1, floor 3, apartment 27, 012407 .

CATEGORIES OF PERSONAL DATA WE PROCESS

We generally collect your personal data directly from you so that you have control over the type of information you provide to us. For example, we receive information from you as follows:

When you create an account on the Site, you send us: your email address, gender, name and surname;
Within your personal page (My Account) on the Site you can add additional information such as: alias, mobile number /fixed, delivery addresses, etc.;
When placing an order, you provide us with information such as: the desired product, name and surname, delivery address, billing details, payment method, mobile phone number /fixed, etc, bank card details etc.;
When you send us a request by e-mail, you can provide us with information such as: name and surname, billing details, mobile number /fixed, delivery address, etc.

We may also collect and process certain information about your behavior later on during your visit to the Site, to personalize your online experience and provide you with offers tailored to your profile. We invite you to learn more about this by consulting the section on the purposes of the processing below.

We do not collect or otherwise process sensitive data included in the General Data Protection Regulation in special categories of personal data. We also do not want to collect or process data of minors or persons under the age of 18.

Passive data processing

Like most web-based services, we automatically receive and record information from server logs in your browser when you use the Site (www.duckseal.online). We may use a variety of methods, including “cookies” or “beacons” web, to collect this information. We use both existing and persistent cookies from this session. The information we may collect through these automated methods may include, for example, your IP address, user code, the type of browser used, the type of system used, and, the content and pages you access on our website, the duration and frequency of your visits, the time of your visit, the place from which access is made, the name and version of the internet browser, operating system, and, including other parameters. We may also use cookies on the Site (www.pitstopprints.shop) to store session validators on your hard drive. If any information collected by passive means is directly combined with personal information, we treat the combined information in accordance with this Privacy Policy. Otherwise, we use the information collected by passive means in aggregated forms.

For more information about the technologies we use and how they work, see our Cookie Policy.

PURPOSES AND GROUNDS OF PROCESSING

We will use your personal data for the following purposes:

FOR THE PROVISION OF PITSTOP PRINTS SERVICES FOR YOUR BENEFIT

This general purpose may include, where appropriate, the following:

Creation and administration of the account within the Site www.pitstopprints.shop
Processing of orders, including taking, validating, shipping and invoicing;
Resolving cancellations or problems of any kind related to an order, to the purchased goods;
Return of products according to the legal provisions;
Reimbursement of the product value according to the legal provisions;
Providing support services, including providing answers to your questions regarding your orders or goods marketed by Duckseal through the Site.
The processing of your data for these purposes is in most cases necessary for the conclusion and performance of a contract between Duckseal and you. Also, certain processing subsumed to these purposes is required by applicable law, including tax and accounting legislation.

TO IMPROVE OUR SERVICES

We always want to give you the best online shopping experience. For this, we may collect and use certain information in connection with your buyer behavior.

We base these activities on our legitimate interest in conducting business, always taking care that your fundamental rights and freedoms are not affected.

III. FOR MARKETING

We want to keep you informed about the best offers for our products.

In this regard, we will use the personal data requested in the form for the registration to Promotional Messages /Newsletter (email address), in order to be able to send you, periodically, electronically, to, messages containing general and thematic information, information on offers, promotions, campaigns or contests practiced /run / organized by Duckseal in a certain period, without any commitment from Duckseal with respect to the information contained therein.

These personal data are used in good faith, only for the purpose mentioned above.

We always ensure that these processing is carried out in compliance with your rights and freedoms and that the decisions made on their basis do not have legal effects on you. and it does not affect you similarly to a significant extent.

These personal data will be stored until you express your desire to unsubscribe, after which they will be destroyed. They can be transmitted to our partners (MailChimp, Sendinblue, as well as other potential service providers that are in compliance with the GDPR rules) only in order to achieve the above mentioned purpose.

Duckseal undertakes to maintain the confidentiality of the data entered in this form and not to transfer them for other purposes.

Since we base our marketing communications on your consent in advance, you can change your mind and withdraw your consent, and you can unsubscribe at any time by:

accessing the unsubscribe link displayed in the Newsletters received from Pitstop Prints by email (at the bottom of the email in the section “click here to unsubscribe”); or
contacting Duckseal using the contact details described above.

In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. In any situation where we use information about you for a legitimate interest of ours, we take care and take all necessary measures to ensure that your rights and freedoms. fundamentally not to be affected. However, you can ask us at any time, by the means described above, to stop processing your personal data for marketing purposes, following which we will comply with your request.

The personal data requested at the time you create an account on the Site and the data entered by you into the account on the Site are not used for marketing and/or statistical purposes.

TO DEFEND OUR LEGITIMATE INTERESTS

There may be instances where we will use or transmit information to protect our rights and business. These may include:

measures to protect the Site and the users of the Site from cyber attacks;
measures to prevent and detect fraud attempts, including the transmission of information to competent public authorities;
measures to manage various other risks.

The general basis of these types of processing is our legitimate interest to defend our business, and, being understood that we ensure that all measures we take guarantee a balance between our interests and your fundamental rights and freedoms.

In certain cases, we also base our processing on legal provisions such as the obligation to ensure the security of goods and values provided for by the applicable legislation on this matter.

HOW LONG WE KEEP YOUR PERSONAL DATA

As a general rule, if you have an account on the Site, we will store your personal data for as long as you have that account. You can ask us at any time to delete certain information or close your account and we will respond to these requests, subject to the retention of certain information, including after account closure, where applicable law or our legitimate interests so require, for example, in cases where the data entered are the basis of confirmed orders for which invoices were issued (in this case, the data, namely the name, surname, telephone number and address, and, must be kept, according to the Romanian legislation in force, for a period of 10 years).

If you do not have an account on the Site, but place an order, your name, surname, telephone number and address will be used for the purpose of creating transport documents and will be used by the courier company on behalf of Duckseal exclusively for the purpose of fulfilling the contact: SMS notification of the time of delivery and actual delivery of the parcel.

This information is stored for a period of 10 years, after which it will be destroyed. They can only be passed on to our partners in order to achieve the purpose mentioned above.

TO WHOM WE SEND YOUR DATA. PERSONAL

The recorded information is intended for use by the operator DUCKSEAL S.R.L. and is communicated only to the following recipients:

contractual partners of the operator and other companies of the same group with the operator;
courier service providers, where an order of products has been made;
payment service providers, payment management and fraud protection (Stripe) for the processing of card payments for online orders placed on the Site;
G-SUITE for sending transactional emails (transactional emails are generally the path that is sent when requesting confirmation of an account, a password changes, and, an order, payment, reservation or when financial documents are involved are confirmed);
providers of technical support and maintenance services of the Site;
providers of data anonymisation services and log registration;
hosting and backup service providers for hosting the Site (Cargo Site LLC.);
billing and management service providers (Oblio S.R.L.);
data center providers (data storage) – cloud (Microsoft Ireland Operations Ltd);
product providers for software development, project management and content management (Atlassian Corporation Plc);
provider of its own business communication platform that offers many IRC-style functions - Internet Relay Chat - instant communication over the Internet (Slack - Slack Technologies, Inc.);
other companies with which we can develop joint programmes to offer our goods on the market.

If we have a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third parties legal entities under private law is carried out in accordance with the legal provisions on data protection and confidentiality of information, and, on the basis of contracts concluded with them.

IN WHICH COUNTRIES WE TRANSFER YOUR DATA. PERSONAL

We currently store and process your personal data in the following countries: United States of America, Los Angeles (Cargo Site)

However, in addition, we may transfer certain of your personal data to other entities located in the European Union or outside the Union, including in countries where the European Commission has not recognised an adequate level of protection of personal data.

We take and will always take steps to ensure that any international transfer of personal data is handled carefully in order to protect your rights and interests. Transfers to service providers and other third parties are and will always be protected by contractual commitments and, where appropriate, by other guarantees, including, such as standard contractual clauses issued by the European Commission or certification schemes, such as the Privacy Shield for the protection of personal data transferred from within the EU to the United States of America.

You can contact us at any time using the contact details set out above to find out more about the countries where we transfer your data., perecum and the guarantees that we have put in place with regard to these transfers.

HOW WE PROTECT THE SECURITY OF YOUR DATA. PERSONAL

The security of your information is important to us, including, but not limited to, personal information collected through the Site and our services. We use reasonable security measures to protect against loss, misuse and alteration of personal information under our control, both during transmission and after we receive it. These include, but are not limited to, the use of firewalls and data encryption.

For data privacy and security, the Duckseal account is password protected and username protected. Not all employees of the company have access to databases, and those who have access have previously signed an agreement to comply with the legal provisions in the field.

Pitstop Prints is not liable for defects that may jeopardize the security of the server on which the database containing personal data is hosted.

For payments we use Stripe Payments.

3D Secure Text

3D Secure means a new global approach to authenticating buyers and sellers in secure transactions over the Internet. This security measure involves redirecting the user when making the payment on a secure page where the registration of each cardholder is done by assigning an authorization code for each online transaction. Cards accepted for payment are those issued under the VISA (Classic and Electron) and MASTERCARD (including Maestro, if they have CVV/CV2 code).

Duckseal does not request or store any information relating to the card or bank cards of the Users, which are processed directly on the servers of the online payment service provider.

Despite the measures taken to protect your personal data, we would like to point out that the transmission of information over the Internet in general, or through other public networks, is not completely secure, there is a risk that the data will be seen and used by unauthorized third parties. We cannot be responsible for such vulnerabilities of systems that are not under our control.

While we strive to ensure the integrity and security of our networks and systems, we cannot guarantee that our security measures will prevent "hackers" or other unauthorized persons to illegally access or obtain such information.

If we learn about a security breach involving your personal information, we may try to inform you electronically so that you can follow appropriate protective steps. By using the Site or providing personal information to us, you agree that we may communicate with you electronically about security issues, including, privacy and administration related to your use of the Site. If a security breach occurs, we may display a notice on our home page or elsewhere on the site and we may send you an email to the address you provided us.

THIRD PARTY ADVERTISING NETWORKS

We use third parties, such as network advertisers, to help us display advertisements on third-party websites and evaluate the success of our advertising campaigns. Network advertisers are third parties that display ads based on your visits to our website as well as other websites. This practice allows us and these third parties to target ads by showing ads for products and services that you may be interested in. Providers of ad networks, advertisers, sponsors and /or traffic measurement services may use cookies, JavaScript, web logos (including clear GIFs), Flash LSOs and other technologies to measure the effectiveness of ads and to personalize advertising content. These cookies and other technologies are governed by the privacy policy of each third party. We may provide these advertisers with information about your use of our website as well as aggregated information about visitors to our website.

You can opt out of third party advertising networks. For more information on this practice and on the choice of the use of this information by the companies concerned, including the operation to exclude third party advertising networks, visit those websites.

If you log out of one or more third-party networks, it means that these operators will no longer offer content or ads directed to you. This does not mean that you will no longer receive any content or targeted ads on our site. You can continue to receive advertisements, for example, based on the website you are viewing. Also, if your browsers are configured to reject cookies when you visit this deactivation page or subsequently delete cookies, use a different computer or change web browsers, or, the opt-out option for these operators may no longer be effective.

WHAT RIGHTS YOU HAVE

The general data protection regulation recognises a number of your rights in relation to your personal data. You can request access to your data, correct any mistakes in our files and/or object to the processing of your personal data. You can also exercise your right to complain to the competent supervisory authority or to address justice. Where applicable, you may also have the right to request the deletion of your personal data, the right to restrict the processing of your data and the right to data portability.

More information about each of these rights can be obtained by consulting the table below.

In order to exercise your rights, you can contact us using the contact details set out above.

Please note the following if you wish to exercise these rights:

Identity. We take the confidentiality of all records containing personal data seriously. For this reason, please send us your requests regarding such registrations using the e-mail address related to the account on the Site, if any, or e-mail address provided on the last order placed on the Site, if you do not have an account on the Site. Otherwise, we reserve the right to verify your identity by requesting additional information that is intended to confirm your identity.

The honors. We will not charge a fee to exercise any right in respect of your personal data, unless your request for access to the information is unfounded, repetitive or excessive, in which case we will charge a reasonable amount in such circumstances. We will inform you of any fees applied before we resolve your request.

Duration of response. We aim to respond to any valid requests within a maximum of 30 working days, unless this is particularly complicated or if you have made multiple requests, in which case we will respond within a maximum of two months. We will notify you if we need more than 30 working days. We may ask if you can tell us exactly what you want to receive or what you are worried about. This will help us to act faster and shorten the response time to your request.

Rights of third parties. We must not comply with a request if it would adversely affect the rights and freedoms of other data subjects.

Targeted rights	Description
Access	You can ask us: • we confirm whether we process your personal data; • We provide you with a copy of this data; • ll provide you with other information about your personal data, such as the data we have, what we use it for, who we disclose it to, who we disclose it to, if we transfer them abroad and how we protect them, how long we keep them, what rights you have, how you can make a complaint, where we obtained your data., to the extent that the information has not already been provided to you by this information.
Rectification	You may ask us to rectify or supplement your inaccurate or incomplete personal data. We may try to verify the accuracy of the data before correcting it.
Data deletion	You can ask us to delete your personal data, but only if: • these are no longer necessary for the purposes for which they were collected; or • you have withdrawn your consent (where data processing is based on consent); or • in the course of a legal right to oppose you; or • have been unlawfully processed; or • there is a legal obligation in this regard. We are not obliged to comply with your request to delete your personal data if the processing of your personal data is necessary: • to comply with a legal obligation; or • to establish, exercise or defend a right in court. There are certain other circumstances in which we are not obliged to comply with your request for deletion of data, although these two are the most likely circumstances in which we may refuse this request
Restriction of data processing	You can ask us to restrict the processing of personal data, but only if: • their accuracy is being challenged (see the rectification section) to allow us to verify their accuracy; or • processing is illegal, but you do not want the data to be deleted; or • these are no longer necessary for the purposes for which they were collected, but you need them to ascertain, exercise or defend a right in court; or • you have exercised the right to object, and verification of whether our rights prevail is ongoing. We may continue to use your personal data following a request for restriction if: • we have your consent; or • to establish, exercise or enforce the defence of a right in court; or • to protect the rights of Duckseal or another natural or legal person.
Data portability	You can ask us to provide your personal data in a structured, commonly used and machine-readable format, or you can request that it be ported directly to another data operator, but in each case only if: • the processing is based on your consent or the conclusion or performance of a contract with you; and • the processing is done by automatic means.
Oppose	You can object at any time, for reasons related to your particular situation, to the processing of your personal data on the basis of our legitimate interest, if you believe that your fundamental rights and freedoms prevail over this interest. You may also object to the processing of your data for direct marketing purposes (including profiling) at any time without giving any reason, in which case we will cease processing as soon as possible.
Automated decision making	You can ask not to be subject to a decision based solely on automated processing, but only when that decision: • produce legal effects with respect to you; or • it affects you in another similar way and to a significant extent. This right does not apply if the decision that was reached after the automated decision making: • it is necessary to conclude or perform a contract with you.; • is authorized by law and there are adequate safeguards for your rights and freedoms; or • ll is based on your explicit consent.
Complaints	You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the data protection supervisory authority are as follows: The National Supervisory Authority for Personal Data Processing G-ral B-Dul. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania Phone: +40.318.059.211 or +40.318.059.212; Email: anspdcp@dataprotection.ro Without prejudice to your right to contact the supervisory authority at any time, please contact us in advance, and we promise you that we will make every effort to solve any problem amicably.