KoryDesignStudio

Data Processing on Etsy
I use the Etsy platform provided by Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland.
Etsy itself is the primary controller for all platform-wide data such as payment processing, analytics and cookies.
For details on Etsy’s own processing, please refer to Etsy’s Privacy Policy
When you place an order in my shop, Etsy transmits to me the data necessary to fulfil your purchase:

your name
billing / delivery address
email address (if available)
chosen product and payment information
I process this data solely to handle your order, prepare any personalised artwork and provide customer service (Art. 6 (1)(b) GDPR).

Custom Orders and Photos
If you order a personalised item, you may send me photos or other files.
I use these files only to create the commissioned artwork.
The files are stored securely and deleted automatically after the order has been completed, unless legal retention duties require longer storage (Art. 6 (1)(b) GDPR).

Communication
If you contact me via Etsy Messages, email, or WhatsApp Business, I process the data you provide (for example name, phone number, message content) to respond to your enquiry (Art. 6 (1)(f) GDPR).
Messages are deleted once your request has been resolved, unless statutory archiving periods apply.

WhatsApp Business is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Your use of WhatsApp implies acceptance of its own privacy policy:
https://www.whatsapp.com/legal/#privacy-policy
Only contacts who actively message me are stored in my device’s WhatsApp address book.

Payment Processing
Payments are handled exclusively through Etsy and its integrated providers (e.g. Etsy Payments, PayPal, Klarna, Apple Pay).
I do not receive or store your full payment details.
Data transfer to these providers occurs on the basis of Art. 6 (1)(b) GDPR (contract performance).

Data Retention
Order-related information is stored as long as required by German commercial and tax law (usually 10 years).
Other personal data is deleted when it is no longer necessary for the purpose for which it was collected.

Data Recipients
If necessary to complete your order, certain information (e.g. name, address, artwork file) may be shared with production or printing partners such as Shirtigo GmbH, Siemensstraße 2, 50354 Hürth, Germany, strictly for fulfilment purposes (Art. 6 (1)(b) GDPR).
No data is sold or shared for advertising.

Security
All transmissions through Etsy are encrypted (HTTPS / TLS).
I take appropriate technical and organisational measures to protect personal data against loss or unauthorised access.

Your Rights (EU / EEA)
You have the right to:
access and obtain a copy of your data (Art. 15 GDPR)
rectification or deletion (Arts. 16 – 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
withdraw consent at any time (Art. 7 (3) GDPR)
lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise these rights, contact me at service@kory-vertrieb.de

Legal Basis and Updates
All processing is based on Art. 6 GDPR as detailed above.
I may update this policy to comply with future legal requirements.
The latest version is always available on my Etsy shop page.