Privacy policy


Privacy Policy and Data Processing

This privacy policy governs the principles regarding the collection, processing, and storage of personal data.

Personal data is collected, processed, and stored (hereafter the data processor) by:
Backdek Trade OÜ
backdek.com
info@backdek.com

The data subject, as defined in this privacy policy, refers to a customer or any other natural person whose personal data is processed by the data processor. A customer, as defined in this privacy policy, refers to anyone who purchases goods or services from the data processor's website.

The data processor follows the data processing principles set by laws, processing personal data legally, fairly, and securely. The data processor can confirm that personal data is processed in accordance with the applicable laws.

Collection of Personal Data

Personal data refers to data collected for providing services, identifying individuals, contacting them for service purposes, or addressing inquiries.

Personal data collected, processed, and stored by the data processor is gathered electronically, mainly through the website and email. By sharing personal data, the data subject gives the data processor the right to collect, organize, use, and manage personal data for the purposes defined in this privacy policy, which the data subject shares directly or indirectly by purchasing goods or services on the website.

The data subject is responsible for ensuring that the data provided is accurate, correct, and complete. Deliberately providing false information is considered a breach of the privacy policy. The data subject must promptly inform the data processor of any changes to the submitted data.

The data processor is not liable for damages caused by incorrect data submitted by the data subject to the data subject or third parties.

Processing of Personal Data

The data processor may process the following personal data of the data subject:

  • First and last name
  • Date of birth
  • Email address
  • Phone number
  • Delivery address
  • Bank account number
  • Payment card details


In addition to the above, the data processor has the right to collect customer data available from public registers.

The legal basis for processing personal data is defined in the General Data Protection Regulation (GDPR) Article 6(1), points a), b), c), and f): a) The data subject has consented to the processing of their personal data for one or more specific purposes; b) The processing of personal data is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract; c) The processing of personal data is necessary for compliance with a legal obligation to which the data processor is subject; f) The processing of personal data is necessary for the purposes of the legitimate interests pursued by the data processor or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, particularly when the data subject is a child.

Storage and Security of Personal Data

Personal data related to inquiries and/or transactions will be stored for up to 7 years from the last interaction with the service provider, in accordance with the accounting laws regarding the obligation to document transactions.

The collected and processed personal data may be transferred without the data subject's consent only to an authority or individual with the legal right to receive it (e.g., court or pre-trial investigator) and a justified need.

For payments via credit card or bank link services, only Maksekeskus AS has access to the payment card information and bank details, and they only provide information regarding the success of the payment.

The data processor applies organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, or any other illegal processing.

Privacy Policy Terms and Changes

These data protection terms are formulated in accordance with the European Parliament and Council Regulation (EU) 2016/679 on the protection of individuals regarding the processing of personal data and the free movement of such data (General Data Protection Regulation), the Personal Data Protection Act of the Republic of Estonia, and the laws of the Republic of Estonia and the European Union.

By using the website and/or services, you acknowledge that you have read and agreed to these terms and conditions. We reserve the right to change the general terms of the privacy policy if necessary, notifying all relevant parties through the backdek.com website.