1. Introduction

Welcome to CSSUPREME.COM (the “Website”), operated by COMPANYNAME OÜ (“we,” “us,” or “our”) a company incorporated in Estonia with registered address at XXX and company registration number YYY.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your information in compliance with the European Union General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for your personal data is:

COMPANYNAME OÜ

[Insert Address]

[email protected]

3. Personal Data We Collect

We collect minimal personal data necessary to provide our services:

  • Account Information: Email address and username.
  • Transaction Data: Records of products you have acquired.
  • Usage Data: Information about how you interact with our Website.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

  • To Provide Services: Facilitate the acquisition of skins. (Legal Basis: Article 6(1)(b) GDPR – Performance of a contract)
  • Communication: Send updates or information regarding your account. (Legal Basis: Article 6(1)(b) GDPR)
  • Legal Obligations: Comply with applicable laws and regulations. (Legal Basis: Article 6(1)(c) GDPR)

5. Use of Steam

Please note that our products require the use of Steam, a service operated by Valve Corporation. Your interaction with Steam is governed by Valve’s own privacy policy and terms of service. We do not share your personal data with Steam, but you may be required to provide personal information to Valve Corporation to use their services.

6. Data Sharing

We do not share your personal data with third parties, except when required by law or necessary to fulfill our contractual obligations to you.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy:

  • Account Information: Retained until you delete your account or withdraw consent.
  • Transaction Data: Retained for 10 years, in compliance with financial regulations.
  • Usage Data: Retained for 1 year for analytics purposes.

8. Your Rights

Under the GDPR, you can contact us using the contact information in paragraph 2 of this privacy policy to exercise the following rights that you have:

  • Access: Request access to your personal data.
  • Rectification: Correct any inaccurate or incomplete data.
  • Erasure: Request the deletion of your personal data.
  • Restriction: Restrict the processing of your data under certain conditions.
  • Objection: Object to the processing of your data.
  • Data Portability: Receive your personal data in a structured, commonly used format.

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

10. International Data Transfers

Your personal data is processed within the European Economic Area (EEA) and is not transferred outside the EEA unless required by Estonian or other applicable law.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the contact details found in paragraph 2.

14. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority in the EU.