Processing and Protection of Personal Data. Privacy Policy

We place great importance on the protection of your personal data and strictly comply with all legal requirements regarding their processing. Below is a detailed explanation of how we process your data:

Purpose of Personal Data Processing:

• Processing and fulfilling orders (payment, delivery, etc.)
• Establishing and maintaining communication with you
• Improving the quality of our services
• Fulfilling obligations to you as a customer under the terms of sale

The controller of personal data on the b2birondust.eu website is IRONDUST OÜ, registration code 17177576, phone +372 5880 6001, and email address info@irondust.eu (hereinafter referred to as “the Seller”).

WHAT PERSONAL DATA WILL BE PROCESSED?

• Name
• Contact information such as phone number and email address
• Billing and shipping address
• Bank account number
• Price of goods and services and related payment data (purchase history)
• Customer support data
• Other information related to customer surveys and/or offers

FOR WHAT PURPOSES WILL PERSONAL DATA BE PROCESSED?

Personal data is processed to fulfill the contract concluded with the customer. It is also processed to fulfill legal obligations (e.g., accounting and resolving consumer disputes).
Personal data is used to manage customer orders and deliver goods.
Purchase history data (purchase date, product, quantity, customer information) is used for review and analysis of customer preferences.
The bank account number is used to refund payments to the customer.
Personal data such as email address, phone number, and name are processed to address issues related to the provision of goods and services (customer support).
IP addresses or other network identifiers of the online store user are processed to provide e-commerce services and compile website usage statistics.

TRANSFER OF PERSONAL DATA TO AUTHORIZED PROCESSORS

The Seller keeps the Client’s personal data confidential and discloses it to third parties only with the Client’s consent, unless disclosure is required or permitted by law.
The user of the online store agrees that the Seller has the right to process customer data in order to provide services, including sharing data with parties involved in delivering the service.
List of authorized processors:
Delivery partners:

• DPD
• Itella
• Omniva
• Venipak

Payment intermediaries:

• Paysera
• Swedbank
• SEB
• Luminor
• LHV
• Coop Bank
• Payment Center
• PayPal
• Pocopay

Analytics and improvement:

• Google Analytics
• Facebook

DATA SECURITY AND ACCESS

Personal data is stored on servers located in EU or EEA member countries. Data may also be transferred to countries deemed by the European Commission to have adequate data protection levels, including US companies under the Privacy Shield framework.
The online store implements physical, organizational, and IT security measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data.
Data processing by authorized processors is conducted under data processing agreements that require appropriate security measures.

ACCESS TO AND CORRECTION OF PERSONAL DATA

You can access and update your personal data in your account management section on the website.
If you made a purchase as a guest (without creating an account), you can request your personal data via email at info@irondust.eu.

DATA RETENTION

When a customer account is deleted, personal data is also deleted, unless retention is necessary for accounting or legal disputes.
Purchase history for guest users is retained for 1 year.
Data related to disputes is retained until resolution or the end of the statute of limitations (3 years).
Data required for accounting purposes is stored for 7 years.

DATA DELETION

You can request deletion of your personal data or account by emailing info@irondust.eu. Other personal data can be deleted upon request via email.

DIRECT MARKETING COMMUNICATIONS

Email addresses and phone numbers are used for direct marketing only with your consent.
You can opt out anytime by clicking the unsubscribe link in marketing emails or contacting customer support.
If personal data is used for direct marketing or profiling, you may object at any time by emailing customer support.

YOUR RIGHTS

You have the right to access, correct, delete, or restrict the processing of your personal data.
If you have any questions or wish to exercise your rights, please contact us at info@irondust.eu.
We guarantee that your personal data is processed in accordance with applicable laws and to ensure high-quality service.
The website https://b2birondust.eu also provides information about the option to contact an out-of-court dispute resolution body. In Estonia, this is the Consumer Disputes Committee under the Consumer Protection and Technical Regulatory Authority. It resolves disputes arising from contracts between consumers and businesses when the value of the disputed goods or services is €30 or more. Complaint handling is free of charge.

DISPUTE RESOLUTION

Disputes related to personal data processing should be resolved through customer support.
The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).
Consumers may also refer to the Consumer Disputes Committee or the ODR platform.
4o