This privacy policy describes how and when I collect, use, and share your information when you purchase a product from me, contact me, or otherwise use my services through Etsy.com or related sites and services.
This privacy policy does not apply to the practices of third parties that I do not own and control, including Etsy or other third party services you access through Etsy. For more information about Etsy's privacy practices, please see its Privacy Policy.
1. Personal data I collect
In order for me to process your order, I need some of your data (which you authorize Etsy to provide), such as your name, email address, mailing address, payment details and details of the product you are ordering. You can also provide me with additional personal information (such as for special orders and shipments) if you contact me directly.
2. The legal basis under which I collect, use and share personal data.
Why do I need your data and how do I use it?
I collect, use and share your data based on various legal grounds, including the following:
- The need to provide my services, such as when I use your data to fulfill an order, resolve a dispute or provide customer service.
- Your informed consent, which you can withdraw at any time, and which was given, for example, when you signed up for my mailing list ( I don't have such a list at the moment, but there may be one in the future).
- The need to comply with a legal obligation or court order related to a legal claim - on this basis, for example, I retain information about your purchases required by law.
- My legitimate interest, if it does not violate your rights and interests. I may use the necessary data for purposes such as:
a) Providing and improving my services. I use your data to provide the services you have requested and, as part of my legitimate interest, to improve the quality of those services.
b) To comply with the Etsy Seller Policy and the Terms of Use. I use your information to the extent required to comply with my obligations under the Etsy Seller Principles and Terms of Use.
3. Third parties with whom I share personal data.
Information sharing and disclosure.
Information about my customers is important to me and to my company. I share your personal information only for very limited reasons and in rare circumstances, as below:
***Etsy*** I share your information with Etsy to the extent required to provide the services and fulfill my obligations set forth in the Etsy Seller Policy and Terms of Use.
***Service Providers*** I work with selected trusted third-party companies that provide services to my store, such as carriers. I share your personal information with such companies, but only to the extent required to perform these services.
***Business Transfer*** If I sell my business or merge it with another, I may transfer your information as part of this business transfer, but only to the extent permitted by law.
***Lawfulness*** I may collect, use, retain and share your information if I believe in good faith that it is reasonably necessary to:
(a) comply with a legal proceeding or administrative order;
(b) enforce the provisions of contracts, terms and regulations;
(c) investigate and resolve or prevent fraud or other illegal activity, technical problems, and security problems. and
(d) protect the rights, property and safety of my customers and others.
4. The period for which I keep personal data.
Data retention period.
I will only keep your personal data for as long as necessary to provide my services, as stated in my privacy policy. However, I may have an obligation to store this data to comply with laws and regulations, to resolve disputes, and to enforce contracts. I usually keep buyers' personal information for 4 years.
5. How will the transfer of data outside of Europe look like if I move data
(for example, if I sell the company to another continent).
If I, as a data controller, would intend to transfer the data outside the European Union, I have to take care of the security of the transfer. According to the provisions of the RODO, the procedure depends on the country to which the data is to be transferred:
a) if the European Commission determines that the country in question meets an adequate level of protection, the transfer will not require a separate authorization;
b) in other cases, I will be required - in principle - to obtain permission for the transfer, unless there are exceptions listed in the text of the RODO regulation.
6. Buyers' rights regarding my use of their personal information and my contact information.
Your rights.
Residents of certain regions, including the European Union, have certain rights regarding their personal data. Some of these rights apply generally, and some apply only in limited cases. I describe these rights below:
***Access*** You have the right to access and obtain a copy of your personal information that I have about you by contacting me using this contact information.
***Modification, restriction, deletion*** You also have the rights to modify and delete your personal information that I hold, or restrict my use of it. Except in exceptional situations (e.g., when I need to keep your data for legal reasons), I generally always agree to delete your personal data upon receipt of such a request.
***Submission of Objections*** You may submit objections to:
(a) my processing of some of your personal data on the basis of my legitimate interest, and (i) the following.
b) receiving marketing messages from me after you have provided me with your express consent to receive them. In such cases, I will delete your personal data unless I have a legitimate basis for further processing or if it is necessary for legal reasons.
***Complaint*** If you live in the EU and wish to raise concerns about the accuracy of my use of your personal data (or other concerns about violations of your rights), you may do so by contacting your local data protection authority.
How to contact me.
I, Kaja Karolczak, am the controller of your personal data for the purposes of EU data protection law. If you have any questions or concerns, please email me at karolczakkaja@gmail.com. You can also send me a letter by regular mail to:
Franz Skribany-Gasse 2/1/3, 2340 Mödling, Austria
If you contact me to access, correct or delete your personal data held by Etsy, I may ask the Etsy support team for help, or I may ask you to contact Etsy directly.