Are we GDPR compliant?

Supertec BV, the company providing Dux-Soup and STACKED powered by Dux-Soup, is committed to complying with applicable requirements of the General Data Protection Regulation (GDPR).

We regularly review our products, policies, contracts and data-processing practices and monitor relevant guidance to support our continued compliance with applicable data protection requirements.

Your Rights Regarding Your Personal Information

We respect your privacy rights. You may contact us at info@dux-soup.com to exercise your rights regarding Personal Information that we process about you.

Depending on the circumstances and applicable law, these rights may include:

Right of access: You may request access to Personal Information we process about you and obtain a copy of that information. Where applicable, we can also provide information about the purposes of processing, categories of Personal Information processed, recipients, retention periods, your privacy rights and relevant data transfers.
Right of rectification: You may ask us to correct or complete Personal Information about you that is inaccurate or incomplete.
Right of erasure: You may ask us to delete Personal Information about you where the applicable legal requirements for erasure are met. We may need to retain certain information where required or permitted by law, including to comply with legal obligations, resolve disputes or enforce our agreements.
Right to restriction of processing: You may ask us to restrict the processing of your Personal Information in circumstances provided for under applicable data protection law.
Right to data portability: Where applicable, you may request Personal Information you have provided to us in a structured, commonly used and machine-readable format.
Right to object: Where applicable, you may object to certain processing of your Personal Information.
Rights relating to automated decision-making: Where applicable, you have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any of these rights, contact info@dux-soup.com and provide sufficient information for us to identify your account and process your request.

If you are not satisfied with our response or believe that your Personal Information is being processed in breach of applicable data protection law, you also have the right to lodge a complaint with the relevant data protection authority.

Retention

Personal Information associated with an account is generally retained for 2 years following the end of the subscription term.

Certain information may be retained for longer where necessary to comply with legal obligations, resolve disputes, enforce agreements or meet other applicable legal requirements.

Valid erasure requests submitted through info@dux-soup.com are generally processed within 30 days, unless certain information must be retained as permitted or required by applicable law.

Data Protection Officer

Supertec BV has designated the following contact for data protection matters:

Full name: WPC van der Sanden

Role: CEO

Email: will@dux-soup.com

Address: Nonnenveld 783, Breda, Netherlands

Data processors and data location

We use third-party service providers to support the operation of Dux-Soup and STACKED. We assess the data protection arrangements of providers that process Personal Information on our behalf and put appropriate contractual and organisational safeguards in place where required.

Dux-Soup and STACKED service data is hosted on servers located in the European Union.

The GDPR provides individuals with a number of rights concerning their Personal Information. Dux-Soup and STACKED support these rights as follows:

Right to be informed: We provide information about how Personal Information is collected and used through our Privacy Policy and related documentation.
Right of access: You may request access to Personal Information we process about you.
Right of rectification: You may contact us to request correction of inaccurate or incomplete Personal Information.
Right of erasure: You may request deletion of your Personal Information, subject to applicable legal requirements and permitted retention.
Right to restrict processing: You may request restriction of processing where the conditions provided by applicable data protection law are met.
Right to data portability: Where applicable, you may request an export of Personal Information you have provided to us in a structured, commonly used and machine-readable format.
Right to object: You may contact us to exercise an applicable right to object to processing.
Rights relating to automated decision-making: Where applicable, we respect the rights provided by GDPR concerning decisions based solely on automated processing that produce legal or similarly significant effects.

Children

Dux-Soup and STACKED are business-oriented services and are not intended for use by children.

Security

We maintain technical and organisational measures designed to protect Personal Information against unauthorised access, disclosure, alteration, loss or destruction.

For questions about privacy or GDPR, or to exercise your data protection rights, contact info@dux-soup.com.