Privacy policy
(1) Below we inform you about the type, scope and purpose of processing your personal data when using our Etsy-Shop. Personal data is all information relating to an identified or identifiable natural person.
(2) Responsible person in the sense of the EU Data Protection Basic Regulation (DSGVO) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data. For personal data processed by the provider of this etsy-shop is the responsible person in the sense of the DSGVO: Kristinna Jovanovic, Carrer Pintor Fortuny 10, 08001 Barcelona, telephone 01734815741, e-mail kikolino@gmx.de (hereinafter "we"). In addition, the privacy policy of Etsy (Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland), available at www.etsy.com/de/legal/privacy, also applies.
(3) If you conclude a contract with us via Etsy, Etsy shall transmit to us your Etsy user name (if you do not purchase as a "guest"), your name and the billing address as they are deposited in your Etsy user account or as you have stated them in the course of the conclusion of the contract. As far as you provide further data within the scope of your order (e.g. a deviating delivery address or a telephone number), these will also be transmitted to us.
(4) We process the data mentioned in paragraph 3 electronically for the proper performance of the contract, in particular for delivery, invoicing, booking of payments and processing of returns and complaints. This data processing is based on Article 6 paragraph 1 letter b DSGVO. We will keep this data stored until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
(5) For a contract to be concluded between you and us, it is necessary that we receive your name and a delivery address. The necessity of providing this data results, among other things, from Etsy's terms and conditions of business as well as from legal regulations (such as § 312i para. 1 number 3 BGB, § 14 para. 4 UStG). Without the provision of this data, you can therefore not conclude a contract with us.
(6) As far as we send you physical goods on the basis of the sales contract, we will transmit your name and shipping address to Correos as shipping service provider, if applicable, for the purpose of delivering the shipment to you and, if applicable, returning your shipment to us on the basis of article 6 paragraph 1 letter b DSGVO.
(7) For the payment of a purchase, the payment service provider you have chosen will collect and process your name, card or account number and/or other data required for the respective payment method on your behalf. In this respect, the data protection regulations of the selected payment service provider shall apply and, if the recipient of the payment is Etsy, the Etsy Privacy Policy.
(8) If you send us a message via "Ask a question", "Ask a custom-made to" or via a similar function on the Etsy platform, Etsy will send us your Etsy user name or, if you do not have an Etsy user name, another sender identification together with your message (legal basis: Article 6 paragraph 1 letter a DSGVO). If you send us a message by e-mail, we store your message with the sender data (name, e-mail address) in order to answer it and also to be able to react to any subsequent questions you may have (legal basis: Article 6 paragraph 1 letter f DSGVO). For the receipt, storage and sending of e-mails, we use an e-mail provider who acts on our behalf as a processor in accordance with Article 28 DSGVO. We delete the data collected with your message no later than six months after the last communication with you regarding your request, subject to the provisions of the following paragraph.
(9) If you send us a legally relevant statement on the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing, regardless of the means of transmission, is also Article 6 paragraph 1 letter b DSGVO. In such a case, we will delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.
(10 ) Social media buttons may be displayed on Etsy's pages; they can be recognised by the logos of the social media platforms (hereinafter 'platforms') (Facebook: blue 'f', Pinterest: red 'p', Twitter: blue bird silhouette). These are links to the respective platforms based in the USA. A click on such a link calls up the website of the respective platform, whereby the IP address of the calling terminal device and the address of the page from which the link is made ("referrer") are transmitted to the called platform in the USA. However, no data is collected or processed by us in connection with the social media buttons.
(11) We refrain from automated decision making and profiling.
(12) You have the following rights with regard to the personal data we process about you:
a) You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, we will inform you of the personal data we have stored about you and of the further information in accordance with Article 15, paragraphs 1 and 2 of the DSGVO.
b) You have the right to have incorrect personal data concerning you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
c) You may demand from us the immediate deletion of the personal data concerning you under the conditions of Article 17 paragraph 1 DSGVO, insofar as their processing is not required under Article 17 paragraph 3 DSGVO.
d) You may demand that we restrict the processing of your data if one of the conditions of Article 18 paragraph 1 DSGVO applies. In particular, you may demand the restriction instead of deletion.
e) We will notify all recipients to whom we have disclosed personal data relating to you of any correction or deletion of your personal data and of any restriction on processing, unless this proves impossible or involves a disproportionate effort. We will also inform you of these recipients if you so request.
f) You have the right to receive the personal data that you have provided us with in a structured, common, machine-readable format and may request that we transfer this data to another responsible party without hindrance, insofar as this is technically possible.
g) If data processing is based on your consent, you have the right to revoke your consent at any time. Revocation of your consent does not affect the lawfulness of the data processing that has taken place until your revocation.
(13) RIGHT OF OBJECTION: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; this right of objection applies to data processing carried out on the basis of Article 6(1)(f) of the DPA in order to safeguard legitimate interests on our part or on the part of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, outweigh the processing.
If you exercise your right of objection, we will no longer process the data in question unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
(14) IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G. NEWSLETTERS), YOU CAN OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
(15) If you believe that the processing of your personal data contravenes the DPA, you may lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged contravention takes place. This does not preclude other official or judicial remedies.