**PROCESSING OF PERSONAL DATA**
The controller of personal data for the TCG Trade OÜ online store is TCG Trade OÜ (registration code 16844831), located at Räime 10-2, Tallinn, phone +372 5625 1570, email info@tcgtrade.eu.
**Personal Data Processed**
- Personal and contact details (e.g., name, personal identification number, phone number, address, email address, etc.);
- Delivery address for goods;
- Bank account number;
- Information on the cost of goods and services and related payment details (purchase history and instalment application details);
- Customer support information.
**Purpose of Processing Personal Data**
Personal data is used to fulfil customer agreements, manage orders, deliver goods, and meet legal obligations.
Purchase history data (date of purchase, goods, quantity, customer details) is used to compile an overview of purchased goods and services and to analyse customer preferences. The bank account number is used for processing refunds to the customer.
Personal data such as email, phone number, and customer name is processed to resolve issues related to the provision of goods and services (customer support).
The IP address or other network identifiers of the online store user are processed to provide the online store as an information society service and to generate web usage statistics.
**Legal Basis**
The processing of personal data is carried out for the purpose of fulfilling the contract with the customer.
The processing of personal data is carried out to comply with legal obligations (e.g., accounting and resolution of consumer disputes).
With the customer’s consent, we may collect data on the customer’s activities in our online store. Based on this data, the customer can receive personalized and optimal offers for products and services if desired.
**Use of Personal Data**
Personal data is used for managing purchases and purchase history, and for fulfilling the commitments made to the customer.
For the best service, TCG Trade OÜ may disclose information about individuals to third parties who provide services to TCG Trade OÜ. The transfer of personal data to authorized processors of TCG Trade OÜ (e.g., transport service providers, instalment service providers, product maintenance service providers, data hosting) is carried out based on contracts concluded between TCG Trade OÜ and the authorized processors. Authorized processors are required to ensure appropriate safeguards in the processing of personal data.
Personal data may be transferred to IT service providers if necessary to ensure the functionality of the online store or data hosting.
**Security and Access to Data**
Personal data is stored on servers located within the territory of a Member State of the European Union or a country that is part of the European Economic Area. Data may be transferred to countries where the level of data protection has been assessed as adequate by the European Commission, and to companies in the United States that are part of the Privacy Shield framework.
Access to personal data is granted to TCG Trade OÜ employees who need to access the data to resolve customer issues or technical issues related to the use of the online store.
TCG Trade OÜ applies appropriate physical, organizational, and IT security measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized access, and disclosure.
**Amendment of Personal Data**
Personal data can be amended in the TCG Trade online store under the user profile, or by sending a signed application to info@tcgtrade.eu.
**Withdrawal of Consent**
If personal data processing is based on the customer’s consent, the customer has the right to withdraw consent by sending a request to the postal address TCG Trade OÜ, Räime 10-2, Tallinn, or via email at info@tcgtrade.eu. The request will be responded to within 30 days.
**Retention**
Upon closure of the TCG Trade OÜ account, personal data will be deleted, except in cases where such data needs to be retained for accounting purposes or to resolve consumer disputes.
If a purchase was made in the online store without a customer account, the purchase history is retained for three years.
In the event of disputes regarding payments and consumer claims, personal data is retained until the claim is fulfilled or until the expiration of the limitation period (three years).
Personal data necessary for accounting purposes is retained for seven years.
**Deletion**
To delete personal data, a signed request must be sent to the postal address TCG Trade OÜ, Räime 10-2, Tallinn, or via email at info@tcgtrade.eu. The request will be responded to within 30 days.
**Data Transfer**
To transfer personal data, a request must be sent to the postal address TCG Trade OÜ, Räime 10-2, Tallinn, or via email at info@tcgtrade.eu. The request will be responded to within 30 days.
**Direct Marketing Communications**
The email address and phone number are used for sending direct marketing communications if the customer has given their consent. If the customer does not wish to receive direct marketing communications, they can unsubscribe by clicking the relevant link in the email footer.
If personal data is processed for direct marketing purposes (profiling), the customer has the right to object to the initial and further processing of their personal data, including profiling related to direct marketing, at any time. To do so, a signed request must be sent to the postal address TCG Trade OÜ, Räime 10-2, Tallinn, or via email at info@tcgtrade.eu. The request will be responded to within 30 days.
**Dispute Resolution**
The controller of personal data is TCG Trade OÜ. For any questions, please contact us at info@tcgtrade.eu. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).