> Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:
> (a) the identity and the contact details of the controller and, where applicable, of the controller’s representative;
Usually, these contact details are in the privacy policy.
It's certainly unusual for a website to omit this, and in most cases I wouldn't buy from a site where it's missing. In this particular case, maybe it's less strange.
However, I still wouldn't order without knowing from where the package will be sent. Something from Estonia arrives here without any import taxes, something from outside the EU can do (the CrowdSupply site says they handle VAT), but can also attract high processing fees.
https://gdpr-info.eu/art-13-gdpr/
(Note I'm not interested in buying a BusKill; I'm just procrastinating.)