GridLockedDigital

What Information I Collect
To process your order, you must provide me with certain information (which you have authorized Etsy to provide to me). This includes your name, email address, postal address, payment information, and details about the product you are ordering. You also have the option to provide me with additional personal information (for example, for a custom jewelry order) if you contact me directly.

Why I Need Your Information and How I Use It
I rely on several legal bases to collect, use, and share your information. These include:

As necessary to provide my services, such as processing your order, resolving disputes, or providing customer support.

When you have given your explicit consent (which you can withdraw at any time), for example by signing up for my newsletter mailing list.

When necessary to comply with a legal obligation, court order, or in connection with legal claims, such as the need to retain information about your purchases due to tax regulations.

As necessary for the purposes of my legitimate interests—provided these legitimate interests are not overridden by your rights or interests—such as:

To provide and improve my services. I use your information to deliver the services you request and in my legitimate interest to improve my services.

To comply with Etsy’s Seller Policy and Terms of Use. I use your information as necessary to fulfill my obligations under Etsy’s Seller Policy and Terms of Use.

Information Sharing and Disclosure
Customer information is important for my business. I share your personal information only for certain reasons and under specific circumstances, as follows:

Etsy: I share information with Etsy as necessary to comply with my obligations under Etsy’s Seller Policy and Terms of Use.

Service providers: I engage certain trusted third parties to perform tasks and provide services for my shop, such as delivery companies. I share your personal information with these third parties only to the extent necessary for them to perform these services.

Business transfers: If I sell or merge my business, I may disclose your information as part of that transaction, to the extent permitted by law.

Compliance with laws: I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to:
a) respond to legal processes or government requests;
b) enforce my agreements, terms, and policies;
c) prevent, investigate, and address fraud and other illegal activities, security issues, or technical problems; or
d) protect the rights, property, and safety of my customers or others.

Data Retention
I retain your personal information only for as long as necessary to provide you with my services and as described in my privacy policy. However, I may also be required to retain this information to comply with legal obligations and regulations, resolve disputes, and enforce my agreements. In general, I retain your data for the following period: 4 years.

Your Rights
If you reside in certain regions, including the EU, you have several rights regarding your personal data. Some of these rights apply generally, while others apply only in specific cases. These rights are described below:

Access: You may have the right to access the personal data I hold about you and to receive a copy of it by contacting me using the details below.

Correction, Restriction, Deletion: You may also have the right to correct your personal data, restrict my use of it, or request its deletion. Except in exceptional circumstances (for example, where I must retain data for legal reasons), I will generally delete your personal data upon request.

Objection: You may object to

my processing of some of your information based on my legitimate interests, and

receiving marketing messages from me after you have previously given explicit consent.
In such cases, I will delete your personal data unless I have compelling legitimate grounds to continue using it or it is required for legal reasons.

Complaint: If you reside in the EU and wish to raise a concern about my use of your data—without prejudice to any other rights you may have—you have the right to lodge a complaint with your local data protection authority.

For the purposes of the EU General Data Protection Regulation (GDPR), I, Felix Wacha, am the data controller of your personal data. If you have any questions or concerns, you may contact me at dev.wafe@gmail.com
. Alternatively, you can write to me at the following address:

Waltherstraße 7
4020 Linz
Austria