Privacy Policy

Last updated: 2026-09-05

Introduction

We are committed to protecting your personal data. This policy describes how we collect, use, and protect your information in compliance with the EU General Data Protection Regulation (GDPR).

Controller Identity

The trader below is responsible for processing personal data for this webshop.

Legal entity name: DroneCo
Trade name: Ukrainian Products
Registered address: Koningsweg 40-05, 3762 EC Soest, Netherlands
Contact email: info@ukrainianproducts.nl
Phone: +31625456444

Data We Collect

Account Data: Username and hashed password when you create an account.
Order Data: Items purchased, total amounts, delivery slot selections, and order history.
Consent Data: Your cookie consent preferences, anonymous identifier, and timestamp.
Technical Data: Hashed IP addresses and user agent strings for site security and rate limiting. When Google tags are used, the browser also sends Google the page URL and IP address; with the relevant consent, Google may use IP-derived information for ads measurement and, depending on settings, ads personalization.

Legal Basis

We process your data based on: (a) performance of a contract (order processing), (b) legitimate interest (security), and (c) consent for analytics cookies and marketing tags.

Why We Process Data

To process and deliver orders, including payment handling and customer service.
To prevent fraud, secure accounts, and protect transactions.
To answer customer questions, complaints, and return/withdrawal requests.
To meet legal obligations such as accounting and tax retention requirements.
Our application manages consent and initializes Google Consent Mode v2 with all optional storage denied. Google Tag Manager manages tags, Google Analytics provides website analytics after analytics consent, and Google Ads may provide campaign measurement or advertising personalization after marketing consent where enabled by the relevant configuration.

Recipients & Processors

Data may be shared with service providers required to run the store, such as payment, hosting and email delivery providers. Our application manages consent and loads Google Tag Manager for tag management after setting denied Consent Mode v2 defaults. While optional consent is denied, Google tags may send cookieless consent-status and measurement pings that can include technical information such as the page URL and IP address; optional Google storage remains denied. analytics_storage is enabled only after analytics consent. ad_storage, ad_user_data and ad_personalization are enabled only after marketing consent, and subsequent campaign measurement or ads personalization depends on the relevant Google Ads configuration. Umami Analytics loads only after analytics consent. Learn how Google uses this data: https://policies.google.com/technologies/partner-sites

Data Retention

Account data is retained until you request deletion. Order data is retained for legal/tax compliance (typically 7 years). Session data is automatically deleted upon expiration.

Your Rights

Right of access — request a copy of your personal data
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data
Right to data portability — receive your data in a portable format
Right to object — object to processing based on legitimate interest

How to Exercise Your Rights

For privacy-related inquiries, contact us by email or use the Privacy Controls page when signed in. info@ukrainianproducts.nl.

Complaint Route

If you are not satisfied with our response, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Autoriteit Persoonsgegevens

Data We Collect

Account Data: Username and hashed password when you create an account.

Order Data: Items purchased, total amounts, delivery slot selections, and order history.

Consent Data: Your cookie consent preferences, anonymous identifier, and timestamp.

Technical Data: Hashed IP addresses and user agent strings for site security and rate limiting. When Google tags are used, the browser also sends Google the page URL and IP address; with the relevant consent, Google may use IP-derived information for ads measurement and, depending on settings, ads personalization.

Why We Process Data

To process and deliver orders, including payment handling and customer service.

To prevent fraud, secure accounts, and protect transactions.

To answer customer questions, complaints, and return/withdrawal requests.

To meet legal obligations such as accounting and tax retention requirements.

Our application manages consent and initializes Google Consent Mode v2 with all optional storage denied. Google Tag Manager manages tags, Google Analytics provides website analytics after analytics consent, and Google Ads may provide campaign measurement or advertising personalization after marketing consent where enabled by the relevant configuration.

Recipients & Processors

Your Rights

Right of access — request a copy of your personal data

Right to rectification — request correction of inaccurate data

Right to erasure — request deletion of your data

Right to data portability — receive your data in a portable format

Right to object — object to processing based on legitimate interest