Privacy policy

Who is responsible for your data

The controller is Bugvin Web Development OÜ, Estonia. For questions and requests about personal data, contact info@bimatrix.ee.

info@bimatrix.ee

Data and purposes

Enquiries and support: your name, contact details, messages and files you choose to send. We use these to answer you and provide support, take steps towards a contract or pursue our legitimate interest in resolving enquiries (GDPR Article 6(1)(b) or (f)). Do not send passwords, payment card details or unrelated personal information.

Orders: name, email, telephone, billing and delivery addresses, items, payment method and status, and order correspondence. Business orders may include company and VAT details. We use these to fulfil the contract, arrange payment and delivery, and handle warranty claims (Article 6(1)(b)); invoices, tax records and VAT verification also meet legal obligations (Article 6(1)(c)). Required fields are marked in the form; without the necessary details we cannot process the order or delivery.

Technical operation: IP address, request time, requested resources, browser and device information, and errors may appear in server logs. Where you use an account, we also process login details and access records. Our legitimate interests are keeping the service working, preventing misuse and protecting accounts (Article 6(1)(f)).

Cookies and saved preferences

Technical cookies support the session, shopping cart and form protection. The auth cookie, where an account is used, lasts up to 7 days and may be renewed on use. The bimatrix_swap_plan_v1 cookie saves the installation checklist you select for up to 365 days. Where the CMS cookie permission control is used, cookies_allowed remembers permission for up to 30 days. Session duration depends on the server and browser settings.

You can remove cookies or restrict them in your browser; doing so may interrupt sign-in, the cart or saved checklist. Cookies strictly necessary for a service you request do not require consent. Additional analytics or advertising cookies require prior consent, which can be withdrawn. This policy does not itself grant that consent.

Recipients and external services

People handling your request or order can access the necessary data. Hosting and email service providers, payment providers, banks, carriers and accounting service providers receive data needed for their tasks. Authorities may receive data where required by law. A selected payment service also processes data under its own privacy notice.

For an EU business VAT check, VAT and country details, and where needed company name and address, are sent to the European Commission VIES service. The verification result and supporting evidence may be saved with the order for tax purposes.

When you start an embedded video, your browser connects to YouTube (Google), which receives connection and playback data. Following links to Facebook, Thingiverse or other websites brings you under their privacy notices. External services may process data outside the European Economic Area; their notices explain applicable countries and safeguards. A delivery outside the EEA requires sharing the necessary recipient details in the destination country. Contact us for information about recipients and transfers associated with your order.

How long data are kept

Accounting source documents and records needed to explain transactions are kept for 7 years from the end of the relevant financial year under Estonian accounting law. Order, warranty and dispute records are kept for fulfilment and for the applicable legal obligations and claim periods.

Other enquiries are kept while needed to resolve the matter and related follow-up. Technical and access records are retained according to troubleshooting and security needs; incident evidence is kept while the incident or a related claim remains open. Backup copies follow the backup retention cycle. You can ask us for the retention criteria applying to your data.

Your rights

Subject to the GDPR conditions, you may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interests. Where consent is the basis, you may withdraw it without affecting earlier lawful processing. Erasure may be limited by accounting duties or the need to establish or defend claims.

Send your request to info@bimatrix.ee. We may ask for information necessary to verify your identity. We normally respond within one month; if a lawful extension is needed, we explain it within that month. You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or another competent supervisory authority.

Andmekaitse Inspektsioon

Automated decisions and updates

The checkout calculates prices, delivery charges and VAT from the information provided. You can contact us to clarify a result or resolve a failed verification. We do not use these functions to make decisions with legal or similarly significant effects based solely on automated processing. Changes to this policy are published here with an updated date.