Privacy policy - IncredibleSkins

PRIVACY POLICY

WELCOME

Welcome to incredibleskins.com (https://incredibleskins.com ) (“website”)! We are dedicated to offering a secure and transparent environment for buying and selling gaming skins. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect your personal information. By using our website and services, you acknowledge and agree to the practices described in this Policy. If you have any questions or concerns, please contact us at info@incredibleskins.com .

WHO IS THE CONTROLLER OF YOUR DATA?

The data controller responsible for your personal data is Blaiskin OÜ (“Company” or “we”), registered in the European Union (Estonia). Contact details are as follows:
Name: Blaiskin OÜ
Registry Code: 16635965
Legal Address: Harju maakond, Tallinn, Kesklinna linnaosa, C. R. Jakobsoni tn 3-7, 10128, Estonia
Email: info@incredibleskins.com

TYPES OF DATA WE HANDLE

For the purposes mentioned in this Policy we may collect and further process different types of personal data. Here is a simple breakdown of the kinds of information in question:

Contact Info: The basics like your name, email, phone number, and where you live.
Account Details: This includes everything about your account with us, like your login details, settings, username, Steam IDs and Trade URLs, and how you have used our service.
Login Info: The details you use to log in, including any biometric data (like fingerprints) if we use that for authentication.
Identity Info: Personal bits like your birthday, ID number, and the details of your ID documents.
Legal Stuff: Information we need to follow laws and regulations, like data for Anti-Money Laundering checks, and to ensure we are doing things by the book.
Order Details: What you have bought or ordered from us, including the history of your purchases.
Sale Offers: What items (gaming skins) you wish to sell, including the history of your sales.
Payment Details: How you have paid or prefer to pay for things, including your credit card or bank account information.
Transaction Info: The history of your financial transactions with us and current balance.
Financial Info: Additional information about your financial dealings and status.
Communications: Records of any chats, emails, or calls between you and us.
Device Info: Information about the gadget you use to access our services, such as its IP address, type, and the web browser you are using.
Support Records: If you have needed help from us, this includes records of how we have assisted you.
Surveillance Data: If we have cameras in certain places for security (e.g., in our office premises), we might have video footage from those areas.
Marketing Preferences: Your choices about receiving marketing materials from us and details about any loyalty programs you are part of.

HOW WE GATHER YOUR DATA

We get your information through a few different ways:

Directly From You: Your data is gathered when you sign up, buy/sell something, or just interact with us or our website.
Other Parties and Public Data: Your data is also gathered from third-party service providers that are engaged in provision of our services (for example, payment processors). In certain scenarios we may also need to gather information from publicly available sources.
Cookies and Tech: Data is gathered through cookies and similar technologies employed on our website.

WHY WE NEED YOUR DATA

We process your personal data with specific objectives in mind, ensuring all actions are taken transparently and with a sense of responsibility. Below is an outline of the purposes for utilizing personal data, along with the legal justifications for these actions:

Service Delivery: We utilize your information to honor our contractual obligations, guaranteeing the delivery of the services you have subscribed to. Legal justification: Contractual necessity.
Account Creation and Maintenance: Your data is essential for establishing and maintaining your account with us, forming part of the agreement when you register. Legal justification: Contractual necessity.
Verification of Identity and Authentication of Users: Verifying your identity ensures the safety of our platform and adherence to legal requirements. Legal justification: Legal obligation, legitimate interests.
Order Management and Execution: We use your data to manage and execute any purchases or sales you make, ensuring a seamless transaction process. Legal justification: Contractual necessity.
Payment and Transaction Processing: This involves the secure and efficient handling of your purchases, sales, subscriptions, or other financial activities. Legal justification: Contractual necessity, legitimate interests.
Communication: We employ your data to maintain communication, provide updates, and offer support as necessary. Legal justification: Contractual necessity, legitimate interests.
Decision Making and Risk Management: Data analysis aids in making informed decisions, securing our platform, and ensuring its efficient operation. Legal justification: Contractual necessity, legal obligations, legitimate interests.
Service Improvement: Analyzing feedback and service usage helps us enhance your experience and satisfaction. Legal justification: Legitimate interests.
Compliance with Legal Requirements: Processing certain data is mandatory for us to comply with legal and regulatory requirements, such as anti-money laundering laws. Legal justification: Legal obligation, public task.
Technical Issue Resolution: We apply your data to address any problems, ensuring uninterrupted access to our services. Legal justification: Contractual necessity.
Fraud Prevention: Monitoring for and preventing fraudulent activity is critical for both your security and ours. Legal justification: Legal obligation, legitimate interests.
Security Measures: Protecting our services, your data, and our assets from unauthorized access or breaches is a priority. Legal justification: Contractual necessity, legal obligation, legitimate interests.
Marketing and Customization: With your consent, we engage in marketing and tailor your experience based on your preferences and usage patterns. Legal justification: Consent, legitimate interests.
Dispute Resolution: In the event of disputes or issues, your data may be utilized to achieve a fair resolution. Legal justification: Contractual necessity, legal obligation, legitimate interests.

SHARING YOUR DATA WITH US: MANDATORY OR OPTIONAL?

Providing certain personal data is mandatory for accessing and using our services. Failure to provide the required data may limit your access to our platform. Optional data can be provided at your discretion. We will clearly mark when the provision of data is mandatory.

WHO COULD RECEIVE YOUR DATA

We do not to sell or rent your personal information to anyone else. However, to deliver our services to you, we may share your data with our carefully selected partners who assist us in provsion of the respective services. We only share what is needed, and we make sure they are serious about protecting your data too. In addition to working with our partners, there are circumstances where we might have to share your information with regulatory bodies or state authorities. This would only happen if we are legally obligated to do so.

HOW WE HANDLE YOUR DATA STORAGE AND TIMEFRAME

We keep your personal information just as long as we need to for the reasons we have outlined in this Privacy Policy, or a bit longer if the law says we have to. How long we hold onto your data depends on a few things like what the law requires, what kind of data it is, and why we collected it in the first place. Sometimes, we might keep your data for a longer stretch if we need to follow legal rules, sort out disagreements, or other important reasons. When we do this, we will always stick to the rules, including those set by the General Data Protection Regulation (GDPR). Once your data is not needed anymore for these reasons, and if we are not required by law to keep it, we will make sure it is safely deleted from our systems. And if it is possible and makes sense, we will anonymize your data, which means we will take away anything that could identify you, ensuring your privacy is protected.

SECURITY OF YOUR DATA

Keeping your data secure is a fundamental part of our operations. We employ a robust security strategy that combines technical defenses with strict organizational protocols to safeguard your information’s integrity and confidentiality. Our security approach incorporates cutting-edge encryption for data transmission and storage, rigorous access controls to prevent unauthorized access, ongoing security education for our staff, and collaboration with trusted third-party partners who adhere to industry-leading security standards, such as the Payment Card Industry Data Security Standard (PCI DSS) for processing payments. While we actively work to safeguard your data, maintaining its security is a joint effort. We recommend adopting key information security practices, such as creating robust and distinct passwords, safeguarding your login details, steering clear of public Wi-Fi for sensitive transactions, regularly updating your device software, and staying alert to phishing schemes.

DATA ACROSS BORDERS

At times, it may be necessary for us to move your personal information to places outside the European Economic Area (EEA). Whenever this happens, rest assured, we adhere strictly to the data protection regulations, including the GDPR. To ensure your data is safeguarded across borders, we implement strong legal mechanisms like adequacy decisions and Standard Contractual Clauses (SCC). These steps guarantee the security and privacy of your information wherever it is processed.

YOUR PRIVACY RIGHTS

Individuals (data subjects) have a number of rights under the GDPR concerning their personal data, including the following:

- Right to request access to their data from the controller.
- Right to rectify their personal data.
- Right to erase their personal data.
- Right to restrict processing concerning the data subject.
- Right to object to certain types of processing (e.g., direct marketing).
- Right to data portability.
- Right to withdraw consent at any time (where processing is based on the individual’s consent), without affecting the lawfulness of processing based on consent before its withdrawal.

Please note that there may be certain conditions or obligations that could affect the speed or completeness of your ability to exercise these rights. Additionally, we may need to verify your identity to protect your information when processing your request. If you wish to exercise any of the rights listed above, please contact us using the information provided in Section 15.

AUTOMATED DECISION-MAKING AND PROFILING

We refrain from making automated decisions that carry legal implications. Nevertheless, we utilize profiling to enhance your user experience. Profiling enables us to provide personalized content and recommendations based on your preferences and past interactions. We prioritize transparency, ensuring you understand how this process improves your engagement with our services. If you have any inquiries or require clarification, please do not hesitate to reach out to us using the provided contact details.

IF YOU HAVE A COMPLAINT

Please reach out to us with any concerns or complaints you have regarding our data processing practices. We will make all reasonable efforts to resolve them in a friendly and efficient manner. However, you also have the right to lodge a complaint with the relevant supervisory authority – Estonian Data Protection Inspectorate (DPI).

POLICY CHANGES

We may update this Policy from time to time to reflect changes in our practices. Updated version of the Policy will be published on our website. Significant changes will be communicated to you. However, we still recommend revisiting this Policy regularly to stay updated.

HOW TO REACH US

For more information about or data processing practices, please contact us at info@incredibleskins.com .

Last Updated: 22.03.2024.