Privacy policy

Privacy Policy

1. General Information

This Privacy Policy explains how Pronoto OÜ (“we”, “us”, “our”) collects, processes, and protects your personal data when you use our website and services.

We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

The online store only provides digital goods via Steam Trade. No physical shipment is made.

2. Data Controller

Company: Pronoto OÜ #16844094
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50–201, 10152, Estonia
Email: [email protected]

3. What Data We Collect

When you use our website and services, we collect the following categories of data:

Steam account information (SteamID, username, avatar, public profile data via Steam OpenID).
Steam trade history related to your purchases.
Order and transaction details (order data, payment method, purchase amount).
Contact details (email address);
IP address and browser data (for security purposes).
Cookies and similar technologies (see our Cookie Policy for details).

We do not collect or store your card payment data. All payments are processed via certified payment providers.

4. Steam API Authorization

When logging in via Steam, we use Steam OpenID API to collect the following:

SteamID;
Steam username and avatar;
Public profile data (if available).

This information is necessary for user identification and delivery of digital goods via Steam Trade.

5. Legal Basis for Data Processing

We process your data based on:

Contract performance: To process your order and deliver digital goods via Steam Trade.
Legal obligation: To comply with tax and anti-fraud requirements.
Legitimate interest: To ensure the security and functionality of the service.
Consent: For sending marketing communications.

6. How We Use Your Data

We use your data to:

Process orders and deliver digital goods via Steam Trade.
Provide customer support and respond to inquiries.
Detect and prevent fraud and abuse.
Comply with legal and tax obligations.
Improve the functionality and user experience of our website.

7. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law (e.g., accounting data is retained for 7 years under Estonian law).

8. Data Sharing

We may share your data with:

Payment service providers for transaction processing.
IT and hosting providers for secure operation of the website.
Government authorities if required by law (e.g., tax or anti-fraud agencies).
The Steam platform (exclusively within the functionality of Steam Trade).

We do not sell your personal data to third parties.

9. International Data Transfers

If your data is processed outside the European Economic Area (EEA), we ensure appropriate safeguards (e.g., EU Standard Contractual Clauses) in accordance with GDPR.

10. Your Rights

Under GDPR, you have the right to:

Request access to your data.
Correct inaccurate data;
Request erasure of your data (“right to be forgotten”) under certain conditions.
Restrict data processing;
Request data portability;
Object to processing based on legitimate interests.
Lodge a complaint with the Estonian Data Protection Inspectorate or your local data protection authority.

You can exercise your rights by contacting us at [email protected].

11. Withdrawal of Consent

You may withdraw your consent to receive marketing emails at any time by clicking the "Unsubscribe" link in any of our emails or by contacting [email protected].

12. Security Measures

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

13. Cookies and Analytics

We use cookies and similar technologies based on your consent in accordance with Article 6(1)(a) GDPR.

For analytical purposes, we may use tools such as Google Analytics to collect anonymized usage statistics. You can manage your cookie preferences at any time (see our Cookie Policy).

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date.
Last Updated: 14.01.2025

15. Contact Information

For any data protection-related inquiries, please contact:

Email: [email protected]
Company: Pronoto OÜ #16844094
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50–201, 10152, Estonia