Semilasso Privacy Policy:
What information I collect
In order for me to process your order, you must provide me with certain information (which you have authorized Etsy to provide to me). This includes your name, email address, mailing address, payment information, and details about the product you are ordering.
Why I need your information and how I use it
I rely on a number of legal bases to collect, use, and share your data. These include:
to the extent that I need your information to provide my services, for example, to process your order, resolve disputes, or provide customer support;
if you have given your express consent (which you can revoke at any time), for example, by subscribing to my newsletter mailing list;
if it is necessary to comply with a legal obligation or court order, or in connection with legal claims, such as the need to retain information about your purchases due to tax legislation; and
to the extent necessary for the purposes of my legitimate interests—provided that these legitimate interests are not overridden by your rights or interests—such as 1. to provide and improve my services. I use your information to provide the services you have requested from me and in my legitimate interest to improve my services; and 2. to comply with Etsy's Seller Policy and Terms of Use. I use your information as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.
Sharing and disclosure of information
Customer data is important to my business. I only disclose your personal data for specific reasons and in very specific circumstances, as follows:
Etsy. I share information with Etsy as necessary to fulfill my obligations under Etsy's seller policy and terms of use.
Service Providers: I engage certain trusted third-party service providers to perform tasks and provide services for my shop, such as package delivery services. I share your personal information with these third-party service providers, but only to the extent necessary for them to perform these services.
Business transfers: If I sell my business or merge with another, I may disclose your information as part of that transaction, to the extent permitted by law.
Compliance with laws: I may collect, use, retain, and share your information if I believe in good faith that it is reasonable and necessary to: a) respond to legal process or regulatory requirements; b) enforce my contracts, terms, and policies; c) prevent, investigate, and address fraud and other illegal activities, security or technical issues; or d) protect the rights, property, and safety of my customers or others.
Data retention
I only store your personal data for as long as necessary to provide you with my services and as described in my privacy policy. However, I may need to retain this information to comply with legal obligations and regulations, resolve disputes, and enforce my agreements. In general, I retain your data for the following period: 4 years.
Transfer of personal data to countries outside the EU
I may store and process your information using third-party hosting services in the US and other countries. Therefore, I may transfer your personal data to countries whose laws on data protection and government surveillance differ from the relevant laws in your country. If it is likely that I will transfer information about you to countries outside the EU, I rely on the EU-US Privacy Shield as the legal basis for the transfer, as Google Cloud is certified under the EU-US Privacy Shield.
Your rights
If you live in certain regions, including the EU, you have a number of rights regarding your personal data. Some of these rights apply generally, and others only in specific cases. These rights are described below:
Access: You may have the right to access the personal data I hold about you and to obtain a copy of it by writing to me using the contact details below.
Modification, restriction, deletion: You may also have the right to modify your personal data, restrict my use of it, or delete it. Except in exceptional circumstances (such as when I am required to retain data for legal reasons), I will generally delete your personal data upon request.
Objection: You may object to 1. my processing of some of your data in relation to my legitimate interests, and 2. your receiving marketing communications from me, after you have previously expressly consented to this. In such cases, I will delete your personal data unless I can demonstrate compelling legitimate grounds for its further use or it is required for legal reasons.
Complaint: If you live in the EU and wish to raise concerns about my use of your data, without prejudice to any other rights you may have, you are entitled to contact your local data protection authority with these concerns.
How to contact me
In accordance with the EU General Data Protection Regulation, I, Louis Kempf, am the data controller for your personal data. If you have any questions or concerns, you can contact me at Louis.Kempf@gmx.de. Or via my address:
Louis Kempf. Rudolf-Clausius Straße 85 97080 Würzburg
Phone: +49 162 960 7848
