International Online Consultation OÜ
Telliskivi tn 57, 10412 Tallinn, Põhja-Tallinna linnaosa, Harju maakond, Estland
service@ioconsultation.com
| Data | Purpose |
|---|---|
| Transaction IDs and Bitcoin addresses | Analysis of payment paths. This data is already public and permanent in the Bitcoin blockchain and is not created by us. |
| Self-chosen password | So your entries stay attributable and you can add to or delete them later. We explicitly ask you not to use your real name. |
| Optional factual note | Context for the entry. Optional; we explicitly ask you not to enter personal information. |
| Exchange or wallet (own only, optional) | If provided, the name of the exchange or wallet through which you yourself paid or received funds. This is voluntary and serves only to attribute the addresses you provided. It is not shared with the exchange. |
| Time of submission | Traceability of the data set. |
| IP address in the web server access log | Operation and abuse prevention. Deleted after a short period and not combined with your entries. |
| Email address (only for voluntary newsletter sign-up) | Notification about the outcome or news on the case file. Held in a separate table with no connection whatsoever to submitted transactions or passwords - see the dedicated section below. |
No name, no phone number, no postal address, no account or wallet details. There is no login and no cookies. Two limited exceptions to "no third-party services" exist: the email address for the voluntary newsletter sign-up (see below), and an internal operator notification sent via a messaging service whenever a new submission arrives - this contains only the case reference and the number of transactions, never the password, transaction ID, address, or note. For everything else, the database simply has no fields for such data.
Signing up for the outcome or news on a case file requires an email address. It is stored in a separate database table with no column or technical link to submitted transactions, passwords, or pseudonyms - a connection is not just organisationally excluded but not provided for in the database schema itself. The sign-up is verified via a confirmation link sent by email (double opt-in) and can be cancelled at any time, without giving a reason, via the link included in every email.
Processing is based on your voluntary submission and on the legitimate interest in clarifying payment structures and preventing fraud (Art. 6(1)(a) and (f) of Regulation (EU) 2016/679, GDPR). As EU law with direct effect, this applies regardless of the controller's member state; the Estonian implementing act, the Personal Data Protection Act (Isikuandmete kaitse seadus, IKS), applies in addition. Submission is voluntary; you suffer no disadvantage if you do not submit anything.
Entries are stored for as long as the investigation of the respective case continues, but no longer than 24 months from receipt. They are deleted thereafter, and at any time earlier upon your request. The same applies to the newsletter sign-up: stored until you unsubscribe or the case file is closed, then deleted.
Your entries are never shown individually to other contributors. A consolidated analysis may be made available to law enforcement or to lawyers instructed by affected persons. There is no disclosure for advertising purposes and no sale of data.
You have the following rights under the GDPR:
You can trigger deletion yourself at any time: at the bottom of the submission form under “Delete my entries”, using your password. Derived address attributions are deleted as well.
All transmission is encrypted (TLS). The data is held on a server in the European Union. Administrative and analysis functions are not reachable from the open internet.
Back to homepage · Active case files