Privacy Policy

Last updated: March 2026

This Privacy Policy explains how DUDES vs. GRAVITY d.o.o. (“DVG”, “we”, “us”) collects, uses, shares, and protects personal data when you visit our website, create an account, place an order, subscribe to marketing, participate in giveaways, or otherwise interact with us. It also explains your rights under the EU General Data Protection Regulation (“GDPR”).

1. Controller (Data Controller)

DUDES vs. GRAVITY d.o.o.
Trubarjeva ulica 1
8340 ÄŚrnomelj
Slovenia

VAT ID: SI63445824
Registration number: 8950547000
Email: info@dudesvsgravity.com
Phone: +386 40 727 654

2. Scope

This policy applies to personal data we process as a controller via our website and online store (WooCommerce), including customers worldwide (EU and non-EU), B2C and B2B contacts.

3. What Personal Data We Collect

3.1. Website use (technical data)

  • IP address
  • Device and browser information
  • Approximate location (derived from IP)
  • Pages visited, referring/exit pages
  • Time and interactions on the website

3.2. Orders (physical and digital products)

  • Name and surname
  • Billing address
  • Shipping address
  • Email address
  • Phone number (if provided/required for delivery)
  • Company name, VAT ID (if provided)
  • Order details and order history
  • Communication related to your order

3.3. Account data (if you create an account)

  • Account credentials (stored securely)
  • Saved addresses and preferences
  • Order history

3.4. Payments

Payments are processed by third-party payment providers. We do not store full payment card data. Depending on the payment method, the provider may process payment and fraud-prevention data (e.g., transaction identifiers).

3.5. Marketing and emails (Klaviyo)

  • Email address
  • Name (if provided)
  • Marketing preferences
  • Email engagement data (opens/clicks)
  • Purchase history and on-site activity used for personalization (where permitted)

We use these for newsletters, post-purchase marketing emails, and abandoned cart reminders (where enabled).

3.6. Contact forms, support, B2B inquiries

  • Name
  • Email
  • Phone number (if provided)
  • Company and role (if provided)
  • Message content and attachments (if any)

For B2B/distributor communication, we may store contact details in internal documents (e.g., Google Sheets) to manage communication and proposals.

3.7. Reviews

  • Username/name as displayed
  • Review content
  • Purchase/verification indicators (if applicable)

3.8. Giveaways and campaigns

  • Name
  • Email
  • Social media handle/username (if required for the giveaway)
  • Shipping details for prize delivery (if applicable)

4. Purposes and Legal Bases (GDPR Art. 6)

We process personal data for the following purposes and legal bases:

  • To fulfill orders and provide products/services (contract performance, Art. 6(1)(b))
  • To manage accounts (contract performance, Art. 6(1)(b))
  • To provide customer support and handle inquiries (legitimate interest, Art. 6(1)(f); or pre-contract steps/contract, Art. 6(1)(b))
  • To meet legal obligations (e.g., accounting/tax retention) (legal obligation, Art. 6(1)(c))
  • To prevent fraud and ensure security (legitimate interest, Art. 6(1)(f))
  • To send marketing communications (newsletter) (consent, Art. 6(1)(a); and where permitted, legitimate interest for existing customers, Art. 6(1)(f))
  • To run analytics and marketing tracking (consent via Cookiebot, Art. 6(1)(a))
  • To administer giveaways/campaigns (legitimate interest, Art. 6(1)(f) or consent, Art. 6(1)(a), depending on the campaign)

5. Cookies, Tracking and Consent (Cookiebot)

We use Cookiebot to manage cookie consent. Cookies and similar technologies help the website function and enable analytics/marketing features.

5.1. Cookie categories

  • Necessary – required for basic site functions (e.g., cart, checkout, security)
  • Preferences – remember your settings
  • Statistics/Analytics – understand website performance (e.g., GA4)
  • Marketing – advertising measurement and personalization (e.g., Meta Pixel, Google Ads)

5.2. Tools we use (when you consent)

  • Google Analytics 4 (GA4) – website analytics
  • Google Ads tracking – ad performance measurement
  • Meta Pixel – advertising measurement and retargeting
  • Hotjar – behavior analytics (e.g., interaction/usage insights)

You can change or withdraw your cookie consent at any time using the Cookiebot banner/settings on our website. If you reject analytics/marketing cookies, the website will still work, but some features and insights may be limited.

6. Sharing of Personal Data (Recipients)

We share personal data only when necessary to provide our services, comply with the law, or operate our business. Typical recipients include:

  • Payment providers: Stripe, PayPal, Klarna, Apple Pay, Google Pay (processing payments and fraud prevention)
  • Email/marketing provider: Klaviyo (newsletter, abandoned cart, post-purchase email flows)
  • Hosting/CDN: SiteGround and SiteGround CDN (website hosting and delivery)
  • Analytics/advertising providers: Google, Meta, Hotjar (only with consent where required)
  • Shipping and logistics partners: couriers and delivery services (to deliver your order)
  • Professional advisors: accountants, auditors, and legal advisors (where necessary)
  • Authorities: where required by law or to protect rights and safety

When third parties process personal data on our behalf, we use appropriate contracts (data processing agreements) where required.

7. International Transfers

Because we sell worldwide and use service providers that may process data outside the European Economic Area (EEA), personal data may be transferred internationally (e.g., to the United States).

Where required, transfers are safeguarded using recognized mechanisms such as:

  • European Commission Standard Contractual Clauses (SCCs)
  • Other lawful transfer mechanisms available under GDPR (e.g., adequacy decisions, where applicable)

8. Data Retention

We retain personal data only for as long as necessary for the purposes described above, including legal obligations.

  • Order and accounting records: up to 10 years (tax/accounting law obligations)
  • Customer account: until you delete your account or request deletion (subject to legal retention obligations for orders)
  • Contact inquiries: up to 12 months after resolution (unless a longer retention is necessary)
  • Newsletter/marketing: until you unsubscribe/withdraw consent
  • Giveaways: until the giveaway is completed and prizes delivered, then deleted unless you consent to marketing
  • Analytics/marketing cookie data: according to Cookiebot consent and provider settings

9. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure (“right to be forgotten”), where applicable
  • Restrict processing, where applicable
  • Data portability (for data processed by automated means based on consent/contract)
  • Object to processing based on legitimate interests
  • Withdraw consent at any time (withdrawal does not affect prior processing)

To exercise your rights, contact us at info@dudesvsgravity.com. We may request verification of identity before fulfilling certain requests.

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you may lodge a complaint with the competent supervisory authority. In Slovenia, this is:

Information Commissioner of the Republic of Slovenia
Zaloška 59, 1000 Ljubljana, Slovenia
Email: gp.ip@ip-rs.si

11. Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no online system can guarantee absolute security.

12. Children

Our website and products are not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us to have it removed.

13. Automated Decision-Making

We do not use fully automated decision-making (including profiling) that produces legal or similarly significant effects on you. Advertising platforms may use their own profiling tools when you consent to marketing cookies, according to their policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates take effect when published on our website. The “Last updated” date at the top indicates the latest revision.

DUDES vs. GRAVITY d.o.o.
ÄŚrnomelj, March 2026