Privacy Policy

Introduction

This Privacy Policy describes how Cyberdepot OÜ (“we”, “our”, or “us”), an Estonian company registered at Harju maakond, Tallinn, Põhja-Tallinna linnaosa, Ristiku tn 29-2, 10611, processes, collects, stores, and protects the personal data of users (“you” or “user”) who access or use our website located at STASH.CITY.

We comply fully with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Estonian data protection laws.

By using our Website and Services, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy.

2. Personal Data We Collect

We may collect and process the following types of personal data:

• Identification data (e.g., name, username)
• Contact information (e.g., email address, phone number)
• Transaction data (purchase history, payment details)
• Technical data (IP address, browser type, device information)
• Usage data (interaction with Website, preferences)

1. Purposes of Data Processing

Your personal data is processed for the following purposes:

• Managing your account registration and transactions
• Facilitating peer-to-peer transactions of digital items (Skins)
• Ensuring compliance with applicable laws and regulations
• Enhancing and improving our Website and Services
• Communicating with you regarding support requests and service updates

1. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual necessity: To fulfill obligations under our Terms of Service
• Legal compliance: To adhere to applicable laws and regulations
• Legitimate interests: To improve our Services, conduct marketing (with your consent), and maintain security
• Consent: Where explicit consent is provided by you

1. Sharing and Disclosure of Data

We may share your personal data with:

• Third-party service providers assisting with payment processing, customer support, data storage, and security
• Government authorities if required by law or to comply with legal obligations
• Professional advisors such as auditors, legal counsel, or consultants

1. International Data Transfers

We may transfer your data outside the European Economic Area (EEA). Transfers will occur only when appropriate safeguards, such as Standard Contractual Clauses, are in place to ensure your data’s protection in compliance with GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including compliance with legal, regulatory, accounting, or reporting obligations.

8. Your Data Protection Rights

Under GDPR, you have rights including:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of data processing
• Objection: Object to processing based on legitimate interests
• Portability: Request transfer of your data to another provider

To exercise these rights, please contact us.

9. Data Security

We implement robust security measures, both technical and organisational, to protect your data against unauthorised access, disclosure, alteration, or destruction.

10. Cookies

We use cookies and similar technologies to enhance your browsing experience and analyze Website usage. You can manage cookie preferences through your browser settings.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. All changes will be posted on our Website, with updates indicated by revising the “Last Updated” date.

12. Contact Information

For questions, complaints, or exercising your data protection rights, please contact us.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate at www.aki.ee.