NicheBase

1. Data Controller

Jonas Bußer
Mozartstr. 31
67655 Kaiserslautern
Germany
Email: support [at] niche-base.de

---

2. General Information on Data Processing

I take the protection of your personal data very seriously.

I process personal data exclusively in connection with my Etsy shop and in accordance with the applicable legal requirements, including the GDPR and the German Federal Data Protection Act (BDSG).

As my shop is operated exclusively through Etsy, Etsy itself collects and processes a significant portion of all data. You can find Etsy’s Privacy Policy here:
https://www.etsy.com/de/legal/privacy

This Privacy Policy supplements Etsy’s Privacy Policy.

---

3. What Data I Receive and Process

I receive personal data only to the extent that Etsy provides it to me for the purpose of processing your order.

This may include in particular:

- Name
- Shipping address
- Billing address
- Email address, if provided by Etsy
- Telephone number, if provided by Etsy
- Information about the items ordered

I use this data exclusively to process your order or to respond to your messages.

I do not have access to payment data, such as credit card information. Such data is processed exclusively by Etsy or the respective payment service provider.

---
4. Purpose of Data Processing

I process your data for the following purposes:

- Processing your order
- Shipping and delivery
- Communication in case of questions
- Issuing invoices
- Compliance with legal obligations, such as tax requirements

Legal bases:

- Art. 6(1)(b) GDPR – performance of a contract
- Art. 6(1)(c) GDPR – compliance with legal obligations

---
5. Disclosure of Personal Data

I only disclose personal data where this is necessary:

a) For shipping

To shipping providers or transport companies.

They only receive your name and address.

b) For tax compliance

To tax advisors or tax authorities where required by law.

No further disclosure of personal data takes place.

I never sell personal data and do not share it with third parties for advertising purposes.

---
6. Data Retention Period

I store personal data only for as long as necessary for the following purposes:

- Compliance with statutory retention periods, for example under tax and commercial law: 6–10 years
- Processing cancellations, complaints and returns

Once these retention periods have expired, the data will be securely deleted or restricted from further processing.

---

7. Your Rights

You have the following rights at any time:

- The right to access your stored personal data
- The right to correct inaccurate data
- The right to deletion, provided that no statutory retention obligations prevent deletion
- The right to restriction of processing
- The right to object to processing in certain circumstances
- The right to data portability
- The right to lodge a complaint with the competent data protection authority

Competent supervisory authority:

The Hamburg Commissioner for Data Protection and Freedom of Information

---

8. Contact via Etsy

If you contact me through Etsy Messages, I receive your messages exclusively within Etsy’s system.

This communication remains stored there for as long as Etsy provides for its retention.

---

9. Data Transfers to Third Countries

Etsy is based in the United States.

Data transfers to Etsy are carried out in accordance with the applicable data protection regulations.

For this purpose, Etsy relies on the EU-U.S. Data Privacy Framework as well as additional safeguards.

---

10. Changes to this Privacy Policy

I reserve the right to amend this Privacy Policy where necessary, for example in response to new legal requirements or changes to my shop.