This privacy policy explains how Diamodo OÜ ("the Shop") collects, uses, and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Estonian Personal Data Protection Act.
Data controller
Diamodo OÜ
Kaupmehe 7-117, Tallinn, Estonia
Contacts
What data we collect
We collect only the personal data necessary to process your order and communicate with you:
- Full name
- Email address
- Phone number
- Delivery address
- Order and payment details
We do not collect sensitive personal data (such as health data, racial or ethnic origin, or political opinions).
Our website uses cookies and similar technologies for website functionality, analytics, and advertising — including through Google Tag Manager, Google Ads, and Meta (Facebook) advertising. These tools may collect information about your visit, device, and browsing behaviour, such as pages viewed, IP address, and interactions with our ads. Where required by law, non-essential cookies and advertising technologies are used on the basis of your consent (GDPR Art. 6(1)(a)). You can manage or withdraw cookie preferences through your browser settings.
Purpose and legal basis
We process your data for the following purposes:
- Fulfilling your order and delivering goods (legal basis: performance of a contract, GDPR Art. 6(1)(b))
- Issuing invoices and processing payments (legal basis: legal obligation, GDPR Art. 6(1)(c))
- Responding to inquiries and complaints (legal basis: legitimate interest, GDPR Art. 6(1)(f))
- Measuring website performance and delivering advertising (legal basis: consent, GDPR Art. 6(1)(a), and legitimate interest, GDPR Art. 6(1)(f))
Sharing data with third parties
We may share your personal data with:
- Courier services for delivery
- Accounting service providers
- Payment processors
- Google and Meta (Facebook) for analytics and advertising
We do not sell your personal data. All third-party service providers are bound by data processing agreements.
Data retention
We retain personal data for as long as necessary to fulfil the purposes described above, typically for the duration of the warranty period (2 years) and as required by Estonian accounting legislation (7 years for financial records).
Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Request rectification of inaccurate data
- Request erasure of your data (where legally permissible)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where consent is the legal basis)
To exercise any of these rights, contact us at Contacts.
Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee).
This policy may be updated from time to time. The current version is always available on this page.