Privacy Policy for the Processing and Protection of Personal Data

Introduction

This Privacy Policy for the Processing and Protection of Personal Data (hereinafter – the "Policy") has been developed and operates within the company OÜ «Excess Channel», registered address: Tallinn, Estonia (hereinafter – the "Company" or "Excess Channel").

Excess Channel (specializing in the supply of networking equipment) collects, uses, and protects personal data that you provide when using our website, interacting with our mobile application (hereinafter – the "Site") from any device, as well as during any form of communication with us. All actions are carried out in strict compliance with this Policy.

By using our Site and providing us with your personal data, you confirm your consent to the processing of such information under the terms set out in this Policy.

1. Key Definitions

"Personal Data" – any information relating to a directly or indirectly identified or identifiable natural person (data subject).

"Processing of Personal Data" – any operation or set of operations performed on your personal data, including: collection, recording, systematization, accumulation, storage, updating, modification, retrieval, use, transfer (dissemination, provision, access), anonymization, blocking, erasure, and destruction. Processing may be carried out with or without the use of automated means.

2. Data We Collect

In the course of our activities related to the sale of networking equipment and ancillary services, we collect:

• Personal data you provide when filling out forms on the Site (e.g., contact forms, equipment selection requests, order placement), subscribing to newsletters, registering for events (webinars, exhibitions), as well as when accepting an offer agreement.
• Data from messages and communications you send to us (including equipment setup questions, requests for quotations – RFQ).
• Data provided when responding to job vacancies at Excess Channel.
• Technical data automatically transmitted by your device: IP address, cookie data, browser information, date and time of access, requested page URLs, device technical specifications.
• Other data you voluntarily leave on our Site.

3. Purposes of Data Processing

Processing of your personal data by Excess Channel is carried out strictly for purposes consistent with your consent, including:

• Registering you on the Site to provide access to your personal account, concluding and performing purchase and sale agreements for networking equipment.
• Informing you about the Company’s activities, promotions, new networking equipment, and upcoming events.
• Communicating with you for technical support, product consulting, and order processing.
• Complying with legal requirements (including tax and accounting obligations).
• Other purposes for which you have given separate consent.

Processing of technical data is aimed at:

• Ensuring stable operation and cybersecurity of our Site.
• Improving user experience and Site functionality.

We do not publish your personal data in publicly available sources. Excess Channel does not make decisions based solely on automated processing that produce legal effects concerning you.

4. Your Rights

Protecting your rights and freedoms is a priority for Excess Channel. Upon your request, we guarantee the following:

• Confirmation of whether we process your personal data and access to such data within 30 days of receiving your request.
• Disclosure of the source of collection, composition, legal bases, purposes, retention periods, and methods of processing.
• Rectification of inaccurate or incomplete data within 7 business days upon your verification of inaccuracies.
• Information regarding any cross-border data transfers (if applicable).
• Cessation of newsletters and marketing communications.
• Termination of processing and erasure of data in case of withdrawal of consent or upon detection of unlawful processing (within statutory periods of 7–30 days).
• Responses to all questions concerning the processing of your personal data.

5. How to Contact Us Regarding Personal Data

You may submit a request concerning the processing of your personal data or withdraw your consent. To do so, please send an email marked "Personal Data Request" or "Withdrawal of Consent" to:

6. Security of Personal Data

Excess Channel takes all necessary legal, organizational, and technical measures to protect your data from unlawful or accidental access, destruction, alteration, blocking, copying, and disclosure. The Company maintains internal local regulations on data security, with which all employees having access to personal data are familiar.

7. Cross-Border Data Transfers

In the course of its operations (including interactions with networking equipment manufacturers), Excess Channel may engage in cross-border transfers of your personal data. We take all measures to ensure the confidentiality and security of such transfers. Transfers to territories that do not ensure an adequate level of protection are made only with your written consent or in other circumstances permitted by applicable law.

8. Cessation of Personal Data Processing

Processing of your data ceases:

• Upon achievement of the processing purposes or when such purposes are no longer necessary.
• Upon your request or withdrawal of consent (in the absence of other lawful grounds).
• Upon liquidation of OÜ «Excess Channel».
• After expiration of the established data retention periods.

9. Cookies

Excess Channel uses cookies to tailor the Site interface to your preferences. Most browsers allow you to refuse cookies or delete them from your device.

10. Links to Third-Party Websites

Our Site may contain links to the websites of networking equipment manufacturers or partners, which we do not control. Excess Channel assumes no responsibility for the privacy policies of such external resources.

11. Changes to This Policy

We may update this Policy from time to time. We recommend that you periodically check the current version on our Site. By continuing to use the Excess Channel Site after changes are made, you confirm your acceptance of the revised Policy.

12. Contact Person for Privacy Matters

For any questions regarding this Policy, please contact Excess Channel’s responsible person at: privacy@excesschannel.ee