What information I collect
In order to complete your order, you must provide me with certain information (for which you have authorized Etsy to provide it to me). This includes your name, email address, mailing address, billing information and the product you order. You also have the option to provide me with other personal information (for example, for a custom product) if you contact me directly.
Why I need your information and how I use it
I'm referring to a number of legal bases to capture, use and share your information. In fact:
• as far as I need your information to provide my services, for example to handle your order, resolve conflicts or provide customer support;
• if you have given your explicit consent (which you can revoke at any time), for example by signing up for my newsletter mailing list;
• when required to comply with a legal obligation or court order, or in connection with legal claims, such as the need to retain information about your purchases under the tax code; and
• To the extent necessary for the purposes of my legitimate interests - unless such legitimate interests are offset by your rights or interests - for example, 1. to provide and improve my services. I use your information to provide the services you have requested from me, and in my legitimate interest to improve my services; and 2. to comply with Etsy's Seller Policy and Terms of Use. I use your information as needed to fulfill my obligations under Etsy's Seller Policy and Terms of Service.
Disclosure and disclosure of information
Customer data is important to my business. I only post personal information for specific reasons and under specific circumstances, as follows:
• Etsy: I pass on information to Etsy as needed to fulfill my obligations under Etsy's Seller Policy and Terms of Use.
• Service Provider: I mandate certain trusted third parties to perform tasks and services for my shop, such as parcel services. I share your personal information with these third parties, but only to the extent that they are required to perform those services.
• Business Transfers: If I sell my business or merge with another, I may disclose your information as part of that transaction, to the extent permitted by law.
• Law Enforcement: I may collect, use, retain and disclose your information when I have a good faith belief that it is appropriate and necessary to: a) Respond to a legal process or regulatory requirements; b) to enforce my contracts, conditions and policies; c) to prevent, investigate and remedy fraud and other illegal activities, safety or technical problems, or d) protect the rights, property and safety of my clients or other persons.
Retention
I only retain your personal information for as long as is necessary to provide you with my services and as described in my Privacy Policy. However, it is possible that I must keep this information in order to comply with legal obligations and regulations, settle disputes and enforce my agreements. In general I keep your data for the following period: 4 years.
Transfer of personal data to countries outside the EU
I can store and process your information about third-party hosting services in the US and other countries. Therefore, I may transfer your personal information to countries whose privacy and regulatory surveillance laws are different from the laws in your jurisdiction. Assuming that I transfer information about you to countries outside the EU, I rely on the EU-US Privacy Shield as the legal basis for the transfer because Google Cloud is certified under the EU-US Privacy Shield.
Your rights
If you live in certain regions, including the EU, you have a number of rights to your personal information. Some of these rights are general and others only in certain cases. These rights are described below:
• Access: You may have the right to access the personal information I have stored about you and to obtain a copy thereof by posting to me using the contact information below.
• Change, restriction, deletion: You may also be authorized to change your personal information, limit my use of this information, or delete it. Except for exceptional circumstances (such as when I need to store data for legal reasons), I will generally delete your personal information on request.
• Contradiction: You may object: 1. that I process some of your data in relation to my legitimate interests; and 2. that you receive marketing messages from me after you have expressly consented to them. In such cases, I will delete your personal information unless I can provide convincing, legitimate grounds for its continued use or it is required for legal reasons.
• Complaint: If you live in the EU and you have concerns about my use of your information, without prejudice to any other rights that you may have, you have the right to address these concerns to your local data protection authority.
So you contact me
For the purposes of the EU General Data Protection Regulation, Rosina Gaudio, I am the data controller for your personal data. If you have questions or concerns, you can contact me at rosinaportugal@sapo.pt. Alternatively you can contact me at the following address:
Rosina Gaudio
Beco da Rua Nossa Senhora da Fatima
3740-218 Sever do Vouga
Portugal