GeekerThings

Privacy Policy – Etsy Shop
Last updated: [date]
1. Data Controller
This privacy policy describes how personal data is collected and used by:
Name / Business name: [Name of the micro-enterprise or personal name]
Status: Sole trader / Micro-enterprise
Address: [professional postal address or personal address if permitted]
Contact email: [contact email address]
The data controller is the individual operating the Etsy shop.

2. Personal Data Collected
As part of the operation of the Etsy shop, the following personal data may be collected:
• First and last name
• Postal address
• Email address
• Phone number (if provided by the buyer)
• Order information (products purchased, date, amount)
• IP address and technical data related to the use of the Etsy platform
No sensitive personal data as defined by Article 9 of the GDPR is collected.

3. Purposes of Processing
Personal data is collected and processed solely for the following purposes:
• Processing and shipping orders
• Communicating with buyers (order tracking, customer service)
• Managing payments and accounting obligations
• Complying with legal and tax obligations
• Fraud prevention and transaction security
No data is used for advertising purposes outside of the Etsy platform.

4. Legal Basis for Processing
Personal data processing is based on the following legal grounds (Article 6 GDPR):
• Performance of a contract (order processing)
• Legal obligation (invoicing, accounting)
• Legitimate interest (customer service, abuse prevention)

5. Data Sharing
Personal data may be shared only with:
• Etsy Ireland UC, as the hosting platform and payment intermediary
• Shipping service providers (postal services, carriers) strictly for order delivery
• Administrative or tax authorities when legally required
No personal data is sold, rented, or transferred to third parties for commercial purposes.

6. Transfers Outside the European Union
Some personal data may be processed by Etsy outside the European Union.
Etsy commits to ensuring an adequate level of data protection in accordance with the GDPR, notably through Standard Contractual Clauses approved by the European Commission.

7. Data Retention Period
Personal data is retained only for as long as necessary for the purposes for which it is collected:
• Order and invoicing data: 10 years (legal obligation)
• Communication data: up to 3 years after the last contact
• Technical data: according to Etsy’s own data retention policy

8. Data Subject Rights
In accordance with the GDPR, users have the following rights:
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
Any request may be sent by email to: [contact email]
A response will be provided within a maximum period of one month.

9. Complaints
In case of a dispute, users may lodge a complaint with the competent supervisory authority:
CNIL – French Data Protection Authority
www.cnil.fr

10. Changes to This Policy
This privacy policy may be amended at any time to remain compliant with legal or technical developments.
The applicable version is the one published in the Etsy shop.