B. Information on data protection
1) Information on the collection of personal data and contact details
of the controller
1.1 We are pleased that you are visiting our Etsy site (hereinafter "Website")
and thank you for your interest. In the following we inform you about the handling
with your personal data when you use our website. Personal data
data are all data with which you can be personally identified.
1.2 The controller in charge of data processing within the meaning of the General Data Protection
Regulation (GDPR) is Jessica David, MedusaMacrame, Jülicher Straße 106,
40477 Düsseldorf, Germany, e-mail: MedusaArt@myyahoo.com. The
controller responsible for the processing of personal data is the natural or legal person who
natural or legal person who alone or jointly with others determines the purposes and means of the
purposes and means of the processing of personal data.
2) Making contact
When you contact us (e.g. via contact form or e-mail), we collect the personal data you
the personal data you provide to us for this purpose. This data
exclusively for the purpose of processing your request and the associated technical
associated technical administration. The legal basis for
processing of the data is our legitimate interest in the processing of your
request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the
conclusion of a contract, the additional legal basis for the processing is
Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your
request, provided that there are no statutory retention obligations to the contrary.
We consider the processing of your request to be completed when it can be inferred from the
circumstances indicate that the matter in question has been conclusively clarified.
3) Data processing for order processing
3.1 Insofar as necessary for the processing of the contract for delivery and payment purposes
the personal data collected by us in accordance with Art. 6 para. 1 lit. b
DSGVO to the commissioned transport company and the commissioned credit institution.
passed on.
If, on the basis of a corresponding contract, we provide you with updates for
goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact
the contact details (name, address, e-mail address) you provided when placing the order,
in order to inform you within the scope of our statutory information obligations pursuant to Art. 6 para. 1 lit. c
GDPR by suitable means of communication (e.g. by post or email) about
upcoming updates personally within the legally prescribed period.
inform you personally. Your contact details will be used strictly for the purpose of notifications
updates owed by us and will only be processed by us for this purpose to the extent
only to the extent that this is necessary for the respective information.
To process your order, we also work with the following service provider(s)
service provider(s) who support us in whole or in part in the execution of
concluded contracts. In accordance with the following
certain personal data in accordance with the following information.
3.2 When using the payment method Etsy Payments, payment processing takes place
via Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland (hereinafter: Etsy
UC), unless the payment is made in US dollars or Canadian dollars.
dollars. In this case, payment is processed via Etsy Inc, 117 Adams
Street, Brooklyn, NY 11201 , United States of America (hereinafter: Etsy Inc.).
The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent that this is
is necessary for payment processing.
For further data protection information, please refer to the
Privacy policy of Etsy: etsy.com/en/legal/privacy/
4) Rights of the data subject
4.1 The applicable data protection law grants you the following rights vis-à-vis the controller
the controller with regard to the processing of your personal data
rights (information and intervention rights), about which we will inform you below.
inform you about below:
- Right to information in accordance with Art. 15 GDPR: In particular, you have the right to information
about your personal data processed by us, the purposes of the processing
the categories of personal data processed, the recipients or categories of recipients
categories of recipients to whom your data has been or will be disclosed, the planned
the planned storage period or the criteria for determining the storage period
storage period, the existence of the right to request rectification, erasure, restriction of
of processing, objection to processing, complaint to a supervisory authority, the
supervisory authority, the origin of your data if it was not collected by us from you
collected by us, the existence of automated decision-making
including profiling and, where applicable, meaningful information about the logic involved and the
logic involved and the significance and envisaged consequences of such processing for you
processing, as well as your right to be informed of the safeguards pursuant to Art. 46
GDPR if your data is transferred to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain without undue delay
rectification of inaccurate data concerning you and/or completion of incomplete data
incomplete data stored by us;
- Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your
personal data if the requirements of Art. 17 para. 1 GDPR are met.
to demand. However, this right does not exist in particular if the
processing is necessary for exercising the right of freedom of expression and information, for the
fulfillment of a legal obligation, for reasons of public interest or
necessary for the establishment, exercise or defense of legal claims
is required;
- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data,
as long as the accuracy of your data, which you dispute, is being verified, if you request the
deletion of your data due to unauthorized data processing and instead
request the restriction of the processing of your data if you need your data for the
assertion, exercise or defense of legal claims,
after we no longer need this data after the purpose has been achieved or if you
have lodged an objection on grounds relating to your particular situation, as long as it is
it has not yet been established whether our legitimate reasons prevail;
- Right to information in accordance with Art. 19 GDPR: Do you have the right to rectification,
erasure or restriction of processing vis-à-vis the controller, the controller is
controller, the controller is obliged to inform all recipients to whom the personal data concerning you
recipients to whom the personal data concerning you have been disclosed of this rectification
restriction of processing, unless this proves impossible or involves disproportionate effort.
impossible or involves disproportionate effort. You have the
the right to be informed about these recipients.
- Right to data portability in accordance with Art. 20 GDPR: You have the right to have your
personal data that you have provided to us in a structured, commonly used and
structured, commonly used and machine-readable format or to request the transmission to another
to another controller, insofar as this is technically feasible;
- Right to revoke consent given in accordance with Art. 7 para. 3 GDPR: You have the
right to withdraw your consent to the processing of data at any time with future effect.
effect for the future. In the event of revocation, we will delete the
data concerned immediately, unless further processing is based on a legal basis for
legal basis for processing without consent. Through the
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its
processing carried out until the revocation;
- Right to lodge a complaint pursuant to Art. 77 GDPR: If you are of the opinion that the
processing of personal data concerning you infringes the GDPR, you have the
GDPR, you have the right - without prejudice to any other administrative or judicial
judicial remedy, you have the right to lodge a complaint with a supervisory authority, in
in particular in the Member State of your habitual residence, place of work or place
place of the alleged infringement.
4.2 RIGHT TO OBJECT
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL
DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST
INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO
REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH
WITH EFFECT FOR THE FUTURE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED.
PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING
PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE
PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS
DIENT.
IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO
DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING
THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH
THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS
DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE
PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
5) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis
legal basis, the purpose of the processing and - if applicable - the respective
the respective statutory retention period (e.g. commercial and tax retention periods).
retention periods under commercial and tax law).
When processing personal data on the basis of express consent in accordance with
consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
stored until you withdraw your consent.
If there are statutory retention periods for data that is processed in the context of
legal or similar obligations on the basis of Art. 6 para. 1 lit. a GDPR.
Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after expiry of the
routinely deleted after expiry of the retention periods, provided they are no longer required for
fulfillment or initiation of a contract and/or we have no legitimate interest in the continued
legitimate interest in further storage persists.
When processing personal data on the basis of Art. 6 para. 1 lit.
f GDPR, this data is stored until you exercise your right to object in accordance with
Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the
reasons for the processing which override your interests, rights and freedoms, or the
outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or
defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of
Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise
you exercise your right to object in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific
processing situations, stored personal data will be erased when they are no longer necessary.
data are deleted when they are no longer necessary for the purposes for which they were collected or
otherwise processed, are no longer necessary.
6) Reference to the Etsy privacy policy
For all further data processing that goes beyond the data processing described above
data processing described above, the Etsy platform is responsible. Further
information on Etsy's data protection can be found in Etsy's privacy policy
Etsy: etsy.com/en/legal/privacy/?ref=ftr