GDPR Privacy Notice

This GDPR Privacy Notice applies to individuals located in the European Union (EU) or European Economic Area (EEA) who interact with Dwuh Studios through our website (https://www.dwuh.com) and its services. Dwuh Studios is a digital platform dedicated to producing and showcasing contemporary artworks, publishing creative stories, operating an online store, and potentially expanding into user-generated content, artist interviews, media publishing, and design services. This notice outlines your data protection rights and our obligations under the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Who We Are

Dwuh Studios is operated by an independent creative studio, our domain is https://www.dwuh.com, and we can be contacted at [email protected] for all privacy-related inquiries. While we do not maintain a physical establishment in the EU, we offer our services to users in the EU and EEA and are therefore subject to GDPR compliance obligations.

2. What Personal Data We Collect

We collect the following types of personal data, either directly from you or automatically through your use of our services:

• Identifiers: Full name, email address, IP address, and account login details
• Transactional Data: Order history, payment status (processed by third-party gateways), shipping preferences
• Technical Data: Browser type and version, operating system, device type, location data (IP-based), cookies, and similar technologies
• User Interaction Data: Items you save or favorite, stories you read or share, interactions with multimedia or store content
• User-Generated Content: Any content you upload or post on the platform (e.g. comments, submissions, future artist contributions)
• Communication Data: Responses to surveys, support requests, and marketing preferences

We may also receive data indirectly, such as via analytics providers or when you share our content on social media platforms.

3. Legal Bases for Processing

Under GDPR, we must rely on a lawful basis to collect and process your personal data. We use the following legal bases:

• Consent: When you opt in to receive newsletters or marketing emails
• Contractual Necessity: When processing your orders, managing your account, or providing services
• Legal Obligation: For accounting, tax, and compliance with applicable laws
• Legitimate Interests: To improve our website, prevent fraud, secure our platform, or understand user behavior. We ensure such interests do not override your rights and freedoms.

4. How We Use Your Data

We use personal data for the following purposes:

• To operate, maintain, and improve our platform and services
• To fulfill transactions and deliver purchases
• To provide customer support
• To communicate updates, offers, and news (only if you opt-in)
• To analyze site usage and optimize performance
• To prevent security threats, detect fraud, and maintain integrity

5. Data Sharing and Transfers

We do not sell your personal data. However, we may share data with:

• Third-party processors: Including payment gateways, cloud storage providers, hosting partners, and analytics services
• Business partners: Only where necessary for product delivery or marketing you have consented to
• Legal authorities: If required to comply with legal obligations or defend our rights

We may transfer your data outside the EU/EEA, including to the United States. In such cases, we rely on:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Other appropriate safeguards to ensure data protection

6. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this notice:

• Account data: as long as your account is active
• Purchase history: up to 7 years for tax/legal reasons
• Marketing data: until you unsubscribe or withdraw consent
• User-generated content: until removed by the user or moderated

We periodically review retention policies to ensure minimal data storage.

7. Your GDPR Rights

You have the following rights under GDPR:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request corrections to inaccurate or incomplete information
• Right to Erasure: Request deletion of your data, subject to exceptions
• Right to Restrict Processing: Ask us to suspend data processing under certain conditions
• Right to Data Portability: Obtain and reuse your data across services
• Right to Object: Object to data processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw previously granted consent at any time

To exercise your rights, contact us at [email protected]. We may need to verify your identity before processing requests.

8. Automated Decision-Making

We do not use personal data for automated decision-making or profiling that has legal or similarly significant effects.

9. Data Security

We implement technical and organizational safeguards such as encryption, access control, and secure hosting to protect your data. While no system is entirely secure, we take privacy and security seriously.

10. Data Protection Contact

While we do not have a formal Data Protection Officer (DPO), our privacy team is responsible for overseeing data compliance.

Contact for EU Data Subjects:
Email: [email protected]
Website: https://www.dwuh.com

11. Changes to This Notice

We may update this GDPR Privacy Notice to reflect changes in legal, operational, or regulatory obligations. Updated versions will be posted with a new effective date.