Privacy Policy

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services through Etsy.com or its websites and services.
This Privacy Policy does not apply to the practices of any third party that does not belong to and is not controlled by me, including Etsy and any third party services that you access through Etsy. To learn more about Etsy privacy practices, see Etsy's Privacy Policy.

1. What information I collect
In order for me to process your order, you need to provide me with certain information (which you have authorized Etsy to provide me with). This includes your name, email address, postal address, payment information and information about the product you are ordering. You also have the option to provide me with further personal information (for example for personalization) if you contact me directly.

2. Why I need your information and how I use it
I refer to a number of legal bases to collect, use, and share your information. In fact:
• as far as I need your information to provide my services, for example to process your order, resolve disputes or provide customer support;
• if you have given your express consent (which you can revoke at any time), for example by subscribing to my newsletter mailing list;
• when it is necessary to comply with a legal obligation or court order, or in connection with legal claims, such as the need to retain information about your purchases under tax law; and
• To the extent necessary for the purposes of my legitimate interests - unless these legitimate interests are overridden by your rights or interests - for example 1. to provide and improve my services. I use your information to provide the services you have requested from me and in my legitimate interest to improve my services; and 2. to comply with Etsy's Seller Policy and Terms of Use. I will use your information as necessary to fulfill my obligations under the Etsy's Seller Policy and Terms of Use.

3. Sharing and Disclosure of Information
Customer data is important to my business. I only release your personal data for specific reasons and under very specific circumstances, as follows:
• Etsy: I share information with Etsy as necessary to fulfill my obligations under the Etsy Seller Policy and Terms of Use.
• Service providers: I commission certain trustworthy third-party providers to carry out tasks and provide services for my shop, such as parcel services. I pass on your personal data to these third-party providers, but only to the extent that they are necessary for the implementation of these services.
• Business Transfers: If I sell my business or merge with another, I may disclose your information in connection with that transaction, to the extent permitted by law.
• Compliance with Laws: I may collect, use, retain, and disclose your information if I have a good faith belief that it is appropriate and necessary to: a) respond to legal process or regulatory requirements; b) enforce my contracts, terms and policies; c) prevent, investigate and correct fraud and other illegal activities, security or technical problems; or d) protect the rights, property and safety of my customers or others.

4. Data retention
I only store your personal data for as long as it is necessary to provide you with my services and as described in my privacy policy. However, it is possible that I need to retain this information in order to comply with legal obligations and regulations, resolve disputes, and enforce my agreements. In general, I keep your data for the following period of time: 4 years.

5. Transfer of personal data to countries outside the EU
I may store and process your information through third party hosting services in the US and other countries. Therefore, I can transfer your personal data to countries whose laws on data protection and regulatory supervision differ from the corresponding laws in your country. If I am expected to transfer information about you outside of the EU, I will rely on the EU-U.S. Privacy Shield as the legal basis for the transfer, as Google Cloud is certified under the EU-U.S. Privacy Shield.

6. Your rights
If you live in certain regions, including the EU, you have a number of rights in relation to your personal information. Some of these rights are general and others only in specific cases. These rights are described below:
• Access: You may have the right to access and get a copy of the personal information I hold about you by writing to me using the contact information below.
• Change, restriction, deletion: You may also be entitled to change your personal data, to restrict my use of this data or to delete it. With the exception of exceptional circumstances (e.g. if I have to save data for legal reasons), I will generally delete your personal data upon request.
• Objection: You can object to 1. that I process some of your data with regard to my legitimate interests and 2. that you receive marketing messages from me after you have given your express prior consent. In such cases, I will delete your personal data unless I can demonstrate convincing reasons worthy of protection for its further use or it is required for legal reasons.
• Complaint: If you live in the EU and want to raise concerns about my use of your data - without prejudice to other rights you have - you are entitled to contact your local data protection authority with these concerns.


This is how you contact me
In terms of the EU General Data Protection Regulation, I, Christopher Gries, am the data controller for your personal data. If you have any questions or concerns, you can contact me at clairekindershirtsgries@gmail.com. Alternatively, you can write to me at the following address:

Christopher Matthias Antonius Gries, Freie Erde 25, 50737 Cologne, Germany