Privacy policy

Last updated: 29.04.2026

This Privacy Policy explains how DE-Peptide, operated by Rojhat Tunc, Seitenstettengasse 5/37, 1010 Vienna, Austria (“DE-Peptide”, “we”, “us” or “our”), collects, uses, stores and shares personal data when you visit our website depeptide.eu, place an order, contact us or otherwise use our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and other applicable data protection laws.

1. Controller

The controller responsible for the processing of personal data is:

DE-Peptide
Rojhat Tunc
Seitenstettengasse 5/37
1010 Vienna
Austria

Email: support@depeptide.eu
Website: depeptide.eu

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Data you provide to us directly

This includes information you provide when placing an order, creating a customer account, contacting us or using forms on our website, such as:

- Full name
- Billing address
- Shipping address
- Email address
- Phone number, if provided
- Order details
- Payment-related information
- Company details, if provided
- VAT number, if provided
- Any information you send to us by email, contact form or customer support request

Please do not send us sensitive personal data, such as health information, medical information or information about intended personal use of research materials. Our products are offered strictly for research use only and are not intended for human or animal consumption, medical use, diagnostic use or therapeutic use.

b) Data collected automatically

When you visit our website, certain technical data may be collected automatically, including:

- IP address
- Browser type and version
- Device type
- Operating system
- Referring website
- Pages visited
- Date and time of access
- Approximate location based on IP address
- Website usage and interaction data
- Cookie and tracking data, depending on your consent settings

c) Payment data

Payments are processed by third-party payment providers. We do not store full credit card numbers or complete payment credentials on our own systems.

Depending on the payment methods available at checkout, your payment data may be processed by providers such as:

- Shopify Payments
- PayPal
- Stripe
- Klarna
- Apple Pay
- Google Pay
- Credit card providers
- Other payment providers shown at checkout

The exact provider depends on the payment method selected by you during checkout.

3. Purposes of Processing

We process personal data for the following purposes:

- To provide and operate our website
- To process, confirm and fulfill orders
- To process payments
- To arrange shipping and delivery
- To provide customer support
- To respond to inquiries and emails
- To manage returns, withdrawals, refunds and complaints
- To send order confirmations, shipping updates and service-related emails
- To prevent fraud, misuse and security incidents
- To maintain website security and technical functionality
- To analyze and improve our website and services
- To comply with tax, accounting, commercial and legal obligations
- To enforce our terms, policies and legal rights
- To send marketing communications, only where legally permitted or where you have given consent

4. Legal Bases for Processing

We process personal data only where we have a valid legal basis under the GDPR.

Depending on the situation, the legal basis may be:

a) Performance of a contract – Art. 6(1)(b) GDPR

We process your data when it is necessary to process your order, provide our services, arrange delivery, handle payments or respond to pre-contractual inquiries.

b) Legal obligation – Art. 6(1)(c) GDPR

We process certain data to comply with legal obligations, including tax, accounting, commercial, consumer protection and regulatory obligations.

c) Legitimate interests – Art. 6(1)(f) GDPR

We may process data where necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include fraud prevention, website security, customer support, legal defense, service improvement and basic business administration.

d) Consent – Art. 6(1)(a) GDPR

Where required, we process data based on your consent, for example for certain cookies, analytics tools, marketing emails or similar technologies. You may withdraw your consent at any time with effect for the future.

5. Shopify

Our online store is hosted and operated using Shopify. Shopify provides the e-commerce platform that allows us to sell products and services to you.

When you use our website, personal data may be processed by Shopify and its affiliates in order to provide hosting, checkout, payment, security, analytics and other shop-related services.

If you are located in the European Economic Area, the United Kingdom or Switzerland, Shopify states that personal data is received by Shopify International Ltd. in Ireland and may be transferred to other Shopify locations and service providers, including outside the EEA, in accordance with applicable law.

6. Sharing of Personal Data

We may share personal data with trusted service providers where necessary for the operation of our business. These may include:

- Shopify and related e-commerce service providers
- Payment processors
- Shipping and logistics providers
- Email and customer support providers
- IT, hosting and security providers
- Analytics providers, where used
- Marketing providers, where used and where legally permitted
- Tax advisors, accountants and legal advisors
- Public authorities, courts or regulators where legally required

We only share personal data to the extent necessary for the relevant purpose.

7. Shipping and Logistics Providers

To deliver your order, we may share necessary shipping information with delivery and logistics providers, such as:

- Name
- Shipping address
- Email address
- Phone number, if required for delivery
- Order reference
- Delivery-related information

Depending on the available shipping method and destination country, providers may include [DHL], [UPS], [DPD], [Austrian Post] or other logistics partners.

Please adjust this section according to the shipping providers actually used by DE-Peptide.

8. Marketing Communications

We may send you marketing emails only where legally permitted, for example if you have subscribed to our newsletter or where applicable law allows communication to existing customers.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us at support@depeptide.eu.

Service-related emails, such as order confirmations, payment confirmations, shipping notifications or legal notices, are not marketing emails and may still be sent where necessary.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files stored on your device. They may be necessary for the website to function, for example to operate the shopping cart, checkout, security features or customer account login.

We may use the following categories of cookies:

a) Strictly necessary cookies

These cookies are required for the website to function and cannot usually be disabled through our systems.

b) Functional cookies

These cookies allow the website to remember choices you make, such as language, region or preferences.

c) Analytics cookies

These cookies help us understand how visitors use our website so that we can improve performance and usability.

d) Marketing cookies

These cookies may be used to measure advertising performance or show relevant advertisements, where such tools are enabled and where consent is required.

Where required by law, non-essential cookies are only used with your consent. You can manage or withdraw your cookie consent through the cookie preferences tool on our website, where available, or through your browser settings.

10. Analytics and Advertising Tools

We may use analytics or advertising tools to understand website usage, improve our services and measure marketing performance.

Depending on the tools actually enabled, this may include:

Shopify analytics

Please note: Only tools actually used by DE-Peptide should remain listed in this Privacy Policy. If a listed tool is not used, it should be removed.

Where legally required, these tools are only activated after your consent.

11. Customer Accounts

If customer accounts are available on our website, we process the personal data necessary to create and manage your account, including login details, order history and account preferences.

You are responsible for keeping your login details confidential. If you believe your account has been accessed without authorization, please contact us immediately.

12. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

In particular:

- Order and invoice data may be retained for the legally required tax and accounting retention periods.
- Customer support communications may be retained as long as necessary to handle the inquiry and protect legal interests.
- Technical logs may be retained for security, fraud prevention and troubleshooting purposes.
- Marketing consent records may be retained as long as necessary to prove consent or until consent is withdrawn.
- Data related to legal claims may be retained for the duration of applicable limitation periods.

When data is no longer required, it will be deleted or anonymized, unless further retention is legally required.

13. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred to countries outside the EEA, we rely on appropriate safeguards where required, such as:

- Adequacy decisions of the European Commission
- Standard Contractual Clauses approved by the European Commission
- Other legally recognized transfer mechanisms under the GDPR

14. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include encrypted transmission, access restrictions, secure hosting, administrative safeguards and regular security-related review of our systems and providers.

However, no method of transmission over the internet or electronic storage is completely secure. We therefore cannot guarantee absolute security.

15. Your Rights Under the GDPR

If you are located in the European Economic Area or if GDPR applies to the processing of your personal data, you may have the following rights:

- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:

support@depeptide.eu

We may need to verify your identity before responding to your request.

16. Right to Object

Where we process your personal data based on legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object at any time without giving reasons.

17. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

18. Complaint to the Austrian Data Protection Authority

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

In Austria, the competent authority is:

Austrian Data Protection Authority
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Email: dsb@dsb.gv.at
Phone: +43 1 52 152-0

19. Minors

Our website and products are not intended for minors. We do not knowingly collect personal data from persons under the age of 18.

If you believe that a minor has provided us with personal data, please contact us so that we can take appropriate steps.

20. Research Use Only Notice

Our products are offered strictly for research use only. They are not intended for human consumption, animal use, medical use, diagnostic use, therapeutic use, food use, cosmetic use or household use.

Any information provided on our website is for product identification, laboratory handling and general informational purposes only. It is not medical advice, dosage guidance or usage instruction for humans or animals.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, technologies or service providers.

The updated version will be posted on this page with a new “Last updated” date.

22. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us at:

DE-Peptide
Rojhat Tunc
Seitenstettengasse 5/37
1010 Vienna
Austria

Email: support@depeptide.eu
Website: depeptide.eu