Privacy policy
Privacy Policy (GDPR)
Controller: Thunderline OÜ trading as Thunderline
Website: thunderline.eu
Effective date: 10 September 2026
This policy explains how Thunderline OÜ (“we”, “us”) processes personal data when you use thunderline.eu, contact us, or purchase excavator attachments and related services.
1. Data controller
| Legal name | Thunderline OÜ |
|---|---|
| Trading brand | Thunderline |
| Registry code | 17399986 |
| VAT | EE102950139 |
| Address | Sepapaja tn 6, Lasnamäe, Tallinn 15551, Harju County, Estonia |
| hello@thunderline.eu | |
| Phone | +372 58326609 |
2. Personal data we process
Depending on how you interact with us, we may process:
- Identity & contact: name, company name, email, phone, billing and delivery addresses
- Business details: VAT number, role/title, order and quote history
- Transaction data: products ordered, amounts in EUR, payment status (payment card details are handled by payment providers — we do not store full card numbers)
- Technical data: IP address, browser type, device/approximate location, pages visited, cookies or similar technologies (where used)
- Communications: emails, call notes, and support messages you send us
We do not intentionally collect special-category (sensitive) personal data for storefront operations.
3. Purposes and legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Process and deliver orders, invoices, shipping | Contract performance (Art. 6(1)(b)) |
| Customer support and fitment enquiries | Contract / legitimate interests (Art. 6(1)(b)/(f)) |
| Accounting, tax, and legal compliance | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention, IT security, dispute handling | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails (if any) | Consent (Art. 6(1)(a)) or soft opt-in where allowed; you may withdraw anytime |
| Website analytics (if enabled) | Consent and/or legitimate interests, depending on tool configuration |
Legitimate interests are balanced against your rights; you may object where applicable (see Section 8).
4. Who we share data with
We share data only as needed with:
- EU warehouse and logistics partners — to fulfil and deliver orders
- Payment service providers — to process payments in EUR
- IT / hosting / email providers — to operate the website and communications (including Shopify)
- Professional advisers (accountants, lawyers) — where required
- Authorities — when required by Estonian or EU law
We do not sell personal data. Processors are bound by contracts requiring GDPR-compliant handling.
5. International transfers
We aim to keep personal data in the EEA. If a provider processes data outside the EEA, we use appropriate safeguards (e.g. EU Standard Contractual Clauses) as required by GDPR Chapter V.
6. Retention
- Orders & invoices: retained for the periods required by Estonian accounting and tax law (typically several years)
- Support correspondence: retained as long as needed for the business relationship and limitation periods
- Marketing consents / suppressions: until withdrawn, plus a short record to honour opt-outs
- Technical logs: kept for a limited security/operations period
When data is no longer needed, we delete or anonymise it.
7. Cookies and similar technologies
If the site uses cookies or similar tools, we will provide a cookie notice or settings where required. Strictly necessary cookies may run without consent; analytics/marketing cookies require consent where the law requires it. You can control cookies via your browser settings.
8. Your rights
Under GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (“right to be forgotten”) in certain cases
- Restrict or object to processing
- Data portability (where applicable)
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with a supervisory authority
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): https://www.aki.ee
To exercise rights, email hello@thunderline.eu. We may need to verify your identity before responding.
9. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. No online transmission is completely secure; please use strong unique passwords if you create an account.
10. Children
Our storefront is aimed at professional buyers. We do not knowingly collect personal data from children.
11. Changes
We may update this policy from time to time. The effective date above will be revised; material changes will be indicated on this page.
12. Contact
Privacy enquiries: hello@thunderline.eu · +372 58326609
Thunderline OÜ · Sepapaja tn 6, Lasnamäe, Tallinn 15551, Harju County, Estonia