Privacy Policy

The controller of the personal data of the online shop is Bugi Development OÜ (registry code 14966717), located at Akadeemia tee 4-80, Tallinn, Harjumaa, Estonia, 12612, phone +372 51985504 and e-mail info@productsfrom.eu.

Which personal data are processed?
– Name, phone number, and e-mail address;
– Delivery address (if provided);
– Bank account number;
– Cost of goods and services and data related to payments (purchase history);
– Customer support data;
– IP address.

For which purposes are personal data processed?
Personal data is used to manage the customer’s orders and to deliver goods (in this case, the digital product).
Purchase history data (date of purchase, goods, quantity, customer data) is used to compile an overview of the goods and services purchased, to analyse customer preferences, and, among other things, for the purposes of resolving consumer disputes.
The bank account number is used to reimburse payments to the customer.
Personal data such as the e-mail address, telephone number, and name of the customer is processed to handle any issues relating to the provision of goods and services (customer support).
E-mail is also used to forward invoices, and the telephone number is used to notify the customer about updates related to their orders.
The IP address or other online identifiers of users of the online shop are processed for the provision of the online shop as an information society service and for web use statistics.

Legal basis
The purpose of processing personal data is to fulfil the agreement entered into with the customer (managing the customer’s orders, delivering the digital product, handling returns and reimbursements).
Personal data is processed in order to fulfil legal obligations (e.g. for accounting).
The processing of personal data – such as the collection of purchase history data for the purposes of resolving potential consumer disputes – is necessary due to the controller’s legitimate interest. An analysis of legitimate interest has been carried out. If you wish to access the legitimate interest analysis, please send an e-mail to info@productsfrom.eu. (See clause 13 (1) d) of the GDPR.)
The data is processed with the consent of the customer for the following purposes: direct marketing, where applicable. Direct marketing will only occur after you have provided explicit consent at checkout, and you may withdraw that consent at any time via your My Account page.

Recipients of personal data
Personal data is forwarded to the customer support team of the online shop in order to manage purchase history and resolve customer issues.
Name, telephone number, and e-mail address may be forwarded to the transport service provider selected by the customer if applicable.
If an outside service provider handles the accounting for the online shop, personal data is forwarded to that service provider to perform the accounting operations.
Personal data may be forwarded to IT service providers if needed to ensure the functionality of the online shop or to host data.

Security and access to data
Personal data is stored on servers of Zone Media OÜ located in a member state of the European Union or the European Economic Area. Data may be forwarded to states whose level of data protection is sufficient according to the European Commission or to a company of a third state to which a safeguard specified in articles 46 or 47 or in subsection 49 (1) of the GDPR has been applied (e.g. the European Commission’s standard data protection clauses).
Personal data can be accessed by the staff of the online shop to resolve technical issues related to the use of the online shop and to provide customer support.
The online shop applies relevant physical, organisational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, or unauthorised access and disclosure. These measures include encrypted data exchange via TLS, encrypted storage of sensitive data (e.g. password hashes), the use of firewalls and virus protection on our servers, and regular backups stored separately from the online shop’s servers.
Personal data is forwarded to processors (e.g. the transport service provider and data hosts) based on contracts between the online shop and the processors. Upon processing data, the processors are obliged to ensure the relevant safeguards in accordance with article 28 of the GDPR.

Access to and rectification of personal data
Personal data can be accessed and rectified via the online shop’s user profile or by contacting customer support. If a purchase is made without a user account, personal data can be accessed via customer support. If the request to access personal data has been submitted electronically, the information will also be provided via commonly used electronic means.

Withdrawal of consent
If personal data is processed with the customer’s consent (e.g. for direct marketing), the customer has the right to withdraw their consent by making relevant changes in the user account’s settings or by notifying customer support via e-mail.

Storage
Personal data is erased upon deletion of the online shop’s customer account, except for personal data (purchase history) necessary for accounting or to resolve consumer disputes. In the event of disputes regarding payments or consumer disputes, personal data is stored until the claim is settled or the limitation period expires. The personal data in original accounting documents is stored for seven years.

Restriction
If the data is incorrect, incomplete, or processed unlawfully, the customer has the right to request the restriction of the processing of their personal data.

Objections
The customer has the right to submit objections regarding the processing of their personal data if they believe there is no legal basis to process their personal data.

Erasure
For the erasure of personal data, please contact customer support by e-mail. Requests for erasure are responded to within one month, and the period of erasure will be specified. The response will also indicate which personal data will not be erased, on which legal basis, and why.

Transfer
Requests to transfer personal data submitted via e-mail are responded to within one month. Customer support will identify the person and indicate which personal data is to be transferred.

Direct marketing messages
The e-mail address and telephone number are used to send direct marketing messages only if you have consented to receiving such messages at checkout. If you do not wish to receive direct marketing messages, please select the relevant link at the footer of the e-mail or contact customer support.
Where personal data is processed for direct marketing purposes (including profiling), you have the right to object at any time both to the initial and further processing of your personal data by notifying customer support via e-mail. In the event of profiling, information about the logic involved, as well as the significance and estimated consequences of such processing for you will be provided.

Resolution of disputes
Disputes concerning the processing of personal data are settled through customer support at info@productsfrom.eu. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).