DeskFolkStudio

PRIVACY POLICY

1. WHO I AM
This shop, DeskFolkStudio, is operated by Ibrahim Yildirim, based in Turkiye.
I am the data controller for the personal information described below. You can
reach me at any time through Etsy Messages.

2. WHAT INFORMATION I RECEIVE
When you buy from this shop, Etsy shares the information I need to complete your
order:
- your name and shipping address
- your Etsy username
- the contents of your order and any note you send with it
- the messages you send me through Etsy
I do not receive, see or store your payment card details. Etsy handles payment
and I never have access to that information.

3. WHY I USE IT, AND ON WHAT BASIS
- To make and ship the item you ordered, and to deal with delivery problems,
returns or questions. Legal basis: performance of our contract.
- To keep the records that tax and accounting law require me to keep. Legal
basis: compliance with a legal obligation.
- To resolve a dispute or protect a legal claim if one arises. Legal basis: my
legitimate interest.
I do not use your information for marketing, I do not send unsolicited messages,
and I do not sell, rent or trade it to anyone.

4. WHO ELSE SEES IT
Items in this shop are printed to order, so your order has to reach the people
who print and deliver it:
- Printify and the print provider that produces your item receive your name and
shipping address in order to fulfil and ship the order.
- The shipping carrier receives your name and address in order to deliver it.
- Etsy processes the order and the payment as the platform.
- My accountant and the tax authority receive the transaction records that law
requires.
Each of these receives only what is needed for that purpose and nothing more.

5. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
I am based in Turkiye and the production and shipping partners described above
are located outside the EEA, including in the United States. This means that
when you order from the EEA, your name and delivery address are transferred
outside the EEA so the order can be produced and delivered to you. That transfer
is necessary for the performance of our contract, under Article 49(1)(b) GDPR.

6. HOW LONG I KEEP IT
I keep order information for as long as the applicable tax and commercial law
requires me to retain business records. Messages and correspondence are kept
only as long as they are needed to handle your order and any question arising
from it, and are deleted afterwards.

7. YOUR RIGHTS
If you are in the EEA or the UK you have the right to ask me for a copy of the
personal data I hold about you, to have it corrected, to have it erased, to have
its use restricted, to receive it in a portable form, and to object to my use of
it. Some of these rights are limited where I am legally required to keep records
of a sale.
To exercise any of them, message me through Etsy and I will answer within 30
days. If you are not satisfied with my answer, you have the right to complain to
your local data protection supervisory authority.

8. ETSY'S OWN ROLE
Etsy is a separate data controller for the information it collects about you as
a user of its marketplace, including your account, browsing and payment data.
Etsy's own Privacy Policy governs that information and is available on Etsy's
website.