Notiquee

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services through Etsy.com or its related websites and services.

In order to process your order, you will need to provide me with certain information (which you have authorized Etsy to provide). This includes your name, email address, mailing address, payment information, and details about the product you are ordering. You also have the option to provide me with additional personal information (for example, for a custom jewelry order) if you contact me directly.

I rely on a number of legal bases to collect, use, and share your data. These include:
where I need your information to provide my services, for example, to process your order, resolve disputes, or provide customer support;
where you have given your explicit consent (which you can withdraw at any time), such as by signing up for my newsletter mailing list;
where it is necessary to comply with a legal obligation or court order, or in connection with legal claims, such as the need to retain information about your purchases due to tax legislation; and
where necessary for the purposes of my legitimate interests—provided those legitimate interests are not overridden by your rights or interests—such as 1) to provide and improve my services. I use your information to provide the services you have requested from me and in my legitimate interest to improve my services; and 2) to comply with Etsy's Seller Policy and Terms of Service. I will use your information as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.

Customer data is important to my business. I only share your personal information for specific reasons and under very limited circumstances, as follows:
Etsy. I share information with Etsy as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.
Service Providers: I engage certain trusted third parties to perform functions and provide services for my shop, such as package delivery. I share your personal information with these third parties, but only to the extent necessary to perform those services.
Business Transfers: If I sell my business or merge with another, I may disclose your information as part of that transaction, as permitted by law.
Compliance with Laws: I may collect, use, retain, and share your information when I believe in good faith that doing so is appropriate and necessary to: a) respond to legal process or governmental requests; b) enforce my agreements, terms, and policies; c) prevent, investigate, and address fraud and other unlawful activities, security or technical issues; or d) protect the rights, property, and safety of my customers or others.

I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may need to retain this information to comply with legal obligations and regulations, resolve disputes, and enforce my agreements. I generally retain your information for the following period: 4 years.

I may store and process your information through third-party hosting services in the US and other countries. As a result, I may transfer your personal information to countries with laws regarding data protection and regulatory oversight that differ from the laws in your country. When I reasonably expect to transfer information about you outside the EU, I rely on the EU-US Privacy Shield as the legal basis for the transfer, as Google Cloud is EU-US Privacy Shield certified.

If you live in certain regions, including the EU, you have a number of rights regarding your personal data. Some of these rights apply generally, and others only in specific circumstances. These rights are described below:
Access: You may have the right to access and obtain a copy of the personal data I hold about you by contacting me using the contact information below.
Amendment, restriction, erasure: You may also have the right to amend your personal data, restrict my use of it, or delete it. Except in exceptional circumstances (such as where I need to retain data for legal reasons), I will generally delete your personal data upon request.
Objection: You can object to 1) my processing of some of your data based on my legitimate interests and 2) you receiving marketing messages from me after you have explicitly consented to this. In such cases, I will delete your personal data unless I can demonstrate compelling legitimate grounds for its continued use or it is required for legal reasons.
Complaint: If you live in the EU and wish to raise concerns about my use of your data, without prejudice to any other rights you may have, you have the right to contact your local data protection authority with these concerns.

For purposes of the EU General Data Protection Regulation, I, Ella Tatarin, am the data controller of your personal data. If you have any questions or concerns, you can contact me at ellas.shopkontakt@gmail.com. Alternatively, you can write to me at:
Ella Tatarin, Untere Trift 14, 99427 Weimar, Germany