PinmapEU

Privacy Policy of PinmapEU Shop

This Privacy Policy of Vibeart - Roksana Czyżman (operating under the store name PinmapEU) ("PinmapEU", "we", "us", "our") describes how and when we collect, use, and share information when customers make a purchase, contact us, or otherwise use our services through Etsy.com or related websites and services.

This Privacy Policy does not apply to third-party practices that we do not own or control, including Etsy or any third-party services that customers access via Etsy. For more information on Etsy's privacy practices, please refer to Etsy's Privacy Policy.

1. Information We Collect

To fulfill an order, customers must provide certain information (which Etsy authorizes us to access), such as:

- First name and Last name (Full name)
- Postal address
- Email address
- Payment information
- Details of the ordered product
- Personalization details (if applicable)
- Phone number (if provided after placing an order)
Customers may also choose to provide additional information (e.g., for map personalization) by contacting us directly.

2. Why We Need This Information and How We Use It

We rely on several legal bases to collect, use, and share information, including:

- To Provide Services: We use the information provided to complete an order, contact customers, or provide customer support.
- To Comply with Legal Obligations: We may retain information if required by law (e.g., tax regulations).
- For Legitimate Interests: Where it does not override customer rights or interests, we may use information to improve our services and comply with Etsy's Seller Policy and Etsy's Terms of Use.

3. Information Sharing and Disclosure

Customer information is important to us, and we only share it in limited circumstances:

- Etsy: We share information with Etsy to provide our services and fulfill our obligations under Etsy's Seller Policy and Etsy’s Terms of Use.
- Service Providers:
* Courier Companies - for order delivery,
* BaseLinker (order management system - operated by BaseLinker sp. z o.o. based in Poland) - for order management, document generation.
We share information with these entities only to the extent necessary to perform these services.
- Government Authorities: We may disclose information if required by law or in response to lawful requests by public authorities (e.g., court orders or tax demands).

4. Data Retention Period

We retain personal data only for as long as necessary to provide our services and as described in this Privacy Policy. We may also be required to retain this information to resolve issues and enforce our agreements. In compliance with tax regulations, we retain data for a period of 5 years.

5. Data Transfers and Privacy Protection in Different Regions

For customers in the European Union:
- Personal data is processed in accordance with GDPR.
- Core data processing occurs in the EU through:
* Our shop (PinmapEU),
* BaseLinker (order management system, BaseLinker sp. z o.o. based in Poland).
- Data is not transferred outside the EU except when:
* Customers order delivery outside the EU,
* Customers use the Etsy platform (based in the USA).
In such cases, data transfer is necessary to fulfill the order.

For customers outside the European Union:
- Data is processed according to the laws of the customer's country of residence and Etsy's privacy policy.
- Data may be transferred between different jurisdictions to fulfill the order.
- Due to the international nature of our operations, data transfers occur in connection with:
* Order fulfillment and delivery,
* Use of the Etsy platform,
* Cooperation with courier companies,
* Order management through BaseLinker (BaseLinker sp. z o.o. based in Poland).

6. Customer Rights

Customers residing in certain regions, including the EU, have specific rights regarding their personal data:

- Access: The right to access and receive a copy of the personal data we hold.
- Change, Restrict, Delete: The right to amend, restrict the use of, or delete personal data. Unless exceptional circumstances apply (e.g., a legal requirement to retain data), we will delete personal data upon request.
- Objection: The ability to object to certain data processing based on our legitimate interests.
- Complaint: If customers reside in the EU and have concerns about our use of their data (without prejudice to other rights), they may address these concerns to their local data protection authority.

7. Contact

Data Controller: For the purposes of European data protection law, we, PinmapEU, are the data controller of personal information. For questions or concerns regarding our privacy practices, please contact us via message on the Etsy platform or at:

Email: contact@pinmap.eu

Address:
Vibeart - Roksana Czyżman
ul. Jagiellońska 32/18
10-273 Olsztyn
Poland

8. Data Security

We use appropriate technical and organizational measures to protect customers' personal data against accidental loss, unauthorized access, or disclosure. Only authorized personnel have access to customer personal data, and solely to the extent necessary.

Note to customers: If you would like to access, correct or delete personal information stored by Etsy, please contact Etsy directly at Etsy.com/help.