Privacy Policy

The controller responsible for data processing on this website is:

duveka GmbH
Möllner Str. 78
23909 Ratzeburg
Germany

Phone: +49 4541 88596-0
Email: info@duveka.de

Each time the website is accessed, your browser automatically transmits information that is temporarily stored in so-called server log files. In particular, the following is recorded:

• IP address of the requesting device
• date and time of access
• name and URL of the page accessed
• the browser used and, where applicable, the operating system
• the previously visited page (referrer)

This data is processed to ensure a smooth connection, a convenient use of the website, and the security and stability of our systems. The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

This website is operated on the infrastructure of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). On our behalf, Cloudflare processes technical data (e.g. the access data mentioned above) in order to deliver the website and ensure its security. This is based on a data processing agreement.

This website uses cookies where technically necessary for its operation. Cookies are small text files stored on your device. You can configure your browser to inform you about the setting of cookies, to allow them only in individual cases, or to refuse them generally. Disabling cookies may limit the functionality of this website.

This website uses Leadinfo, a service provided by Leadinfo B.V., Rondweg 11, 2922 EN Krimpen aan den IJssel, Netherlands. Leadinfo evaluates the IP address of your device in order to identify which companies visit our website and enriches this information – where publicly available – with company-related data (e.g. company name, industry, company size and publicly accessible contact details). The aim is to identify companies, not to identify individual visitors as natural persons.

In connection with the use of Leadinfo, the following data in particular is processed:

• IP address of the requesting device
• date and time of access
• pages accessed and time spent on them
• the previously visited page (referrer)
• company information derived from the IP address

The legal basis for this processing is your consent pursuant to Art. 6 (1) (a) GDPR. Leadinfo is loaded only after you have given your consent via our cookie notice. You can withdraw your consent at any time with effect for the future by changing your selection via “Cookie settings” in the footer.

The IP address is used solely to determine the company and is not stored permanently. We have concluded a data processing agreement with Leadinfo in accordance with Art. 28 GDPR.

Independently of this, you can also object to data collection by Leadinfo directly at any time: Leadinfo opt-out. Further information can be found in Leadinfo's privacy policy: leadinfo.com/en/privacy-policy.

This website uses Google Ads with conversion tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use Google Ads to promote our offerings and, through conversion tracking, measure whether an interaction with one of our ads (e.g. a click) leads to an action that is relevant to us – specifically, the submission of our contact form.

For this purpose the Google tag (gtag.js) is loaded on our pages. If a user clicks on one of our ads, Google may set a cookie. If our contact form is subsequently submitted successfully, Google can attribute this conversion to the ad. We only receive statistical evaluations (e.g. the total number of conversions), but no information that could be used to personally identify users.

In the context of conversion tracking, the following data in particular is processed:

• IP address (generally truncated by Google)
• cookie identifier as well as the date and time of the ad interaction and the conversion
• information about the device and browser used (e.g. operating system, browser type)
• the page (URL) accessed at the time of the conversion

The legal basis – subject to any required consent – is our legitimate interest in the needs-based, economical design and performance measurement of our online advertising (Art. 6(1)(f) GDPR). Where consent is obtained (e.g. via a cookie notice), processing is based on Art. 6(1)(a) GDPR; consent given can be withdrawn at any time with effect for the future.

A transfer of personal data to Google in the USA cannot be ruled out. For the USA there is an adequacy decision of the EU Commission (EU-US Data Privacy Framework), under which Google LLC is certified.

You can prevent cookies from being set through the relevant browser settings or delete cookies already set, and you can disable personalised advertising in the Google ad settings at https://adssettings.google.com. Further information can be found in Google’s privacy policy at https://policies.google.com/privacy.

ChatGPT Ads (OpenAI)

We also place ads in ChatGPT (“ChatGPT Ads”), a service provided by OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). Using the OpenAI Measurement Pixel, we measure whether a click on one of our ads in ChatGPT leads to a webinar registration or to the submission of our contact form.

For this purpose – only with your consent – the OpenAI Measurement Pixel script is loaded from bzrcdn.openai.com. It sets two first-party cookies: “__oppref” stores the identifier passed with an ad click (lifetime 30 days), “__obref” a randomly generated browser identifier (lifetime 365 days). When you register for a webinar or submit a contact request, a corresponding event is sent to OpenAI. To attribute events to ad clicks, the pixel may hash contact details entered on the page (e.g. your email address) with SHA-256 in the browser and transmit only this hash. We only receive aggregated statistical reports from OpenAI and no information that could be used to personally identify users.

The following data in particular is processed:

• IP address and information about the device and browser used
• ad click identifier and browser identifier (cookies “__oppref”, “__obref”)
• type, date and time of the event (webinar registration, contact request) and the page (URL) accessed
• where applicable, hashed (SHA-256) contact details such as your email address

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future via “Cookie settings” in the footer; on withdrawal the cookies mentioned are deleted. A transfer of data to OpenAI OpCo, LLC in the USA cannot be ruled out; it takes place on the basis of the EU Standard Contractual Clauses or – where certified – the EU-US Data Privacy Framework. Further information: openai.com/policies/privacy-policy and openai.com/policies/ad-policies.

If you contact us by email, phone or via a form (e.g. registering for an event), we process the information you provide in order to handle your request and answer any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual or contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding). The data is deleted as soon as it is no longer required to achieve the purpose, unless statutory retention obligations apply.

Webinar registrations and customer management (CRM)

If you register for one of our webinars, we transfer your name, email address and the name of your company as a contact to our CRM and ERP system Microsoft Dynamics 365 Business Central (Microsoft Ireland Operations Ltd., data centres in the EU, data processing agreement). There we assign you to your company and note the topic of the webinar (e.g. PPWR or EUDR). If you are already stored as a contact (matched by email address), we only add the topic.

If your company is not yet known to us, we automatically add publicly available company data such as address, phone number, website and VAT ID (e.g. from the company imprint). For this purpose we only transmit the company name and the domain of your email address – not your name or email address – via our AI service (Microsoft Azure, EU) to an AI provider with web search (OpenRouter, Inc., USA). Any transfer to the USA is based on the EU Standard Contractual Clauses.

The purpose is to look after prospects and customers and to inform them about further events and offers on the respective topic; we only contact you by email for this where you have consented or where this is permitted by law. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in orderly customer management). You can object to the storage at any time, e.g. by email to info@duveka.de; we will then block or delete your contact unless statutory retention obligations apply.

If you sign up for our newsletter, we use the email address you provide to send you information. The subscription is based on your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw this consent at any time with effect for the future, for example via the unsubscribe link in every email or by sending a message to info@duveka.de.

Your personal data is only transferred to third parties where this is necessary to fulfil the respective purpose, where there is a legal obligation, or where you have consented. Your data is not passed on for advertising purposes.

With regard to your personal data, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw a given consent (Art. 7 (3) GDPR)

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The competent authority is, in particular, the supervisory authority of the federal state in which our company is based.

This website uses SSL/TLS encryption to protect the transmission of your data. You can recognise an encrypted connection by the address bar of your browser (https://) and the padlock symbol.

This privacy policy is currently valid (as of June 2026). As our website develops or due to changes in legal requirements, it may become necessary to amend this privacy policy. The current version can be accessed on this page at any time.

The app “duveka Aufmaß” (provider: duveka GmbH, see section 1 for contact details) helps industrial packers measure goods with an iPhone and transfer the results to their company’s Microsoft Dynamics 365 Business Central ERP system.

• Camera and LiDAR: required to frame and measure goods in augmented reality. Camera frames, depth data and generated 3D models are processed and stored locally on the device only. Data leaves the device solely when you explicitly send a measurement to Business Central.
• Location: when saving a measurement, the current location (GPS and resolved address) can be stored to associate measurements with the job site. It is transferred together with the measurement. The permission can be revoked in iOS Settings at any time; the app remains usable without it.
• Sign-in (Microsoft Entra ID): to transfer data you sign in with your company’s Microsoft account. Name, email (UPN) and a user identifier from the token are processed to authorise access to the ERP system. Credentials are stored in the device keychain; sign-in uses the Microsoft Authentication Library directly with Microsoft – duveka GmbH never receives your password.
• Transferred content: dimensions, description, photos, 3D model and location are sent to your company’s Business Central system, which is the controller for that processing.
• No analytics or advertising: the app contains no tracking, analytics or advertising SDKs and sends no usage or diagnostic data to duveka GmbH or third parties.
• Legal basis: Art. 6(1)(b) and (f) GDPR; location on the basis of your consent via the iOS permission (Art. 6(1)(a) GDPR), revocable at any time.
• Retention: measurements stay on the device until you delete them in the app or uninstall it. Transferred data is subject to your company’s retention rules.
• Transfers: sign-in via Microsoft Entra ID (Microsoft Ireland Operations Ltd.); transmission to Business Central is TLS-encrypted to the system operated by your company.

Your rights are described in section 11 of this privacy policy.