(1) Below we inform you about the nature, scope and purpose of the processing of your personal data when using our Etsy shop. Personal data is any information that relates to an identified or identifiable natural person.
(2) The person responsible within the meaning of the EU General Data Protection Regulation (DSGVO) is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data. For personal data, which processes the offerer of this Etsy shop, is responsible within the meaning of the DSGVO: Hanae Niu, Schlesische Str. 20, 10997 Berlin, telephone 017680488800, E-Mail niu.maternity [!at] gmail.com (in the following "we "). Incidentally, the privacy policy of Etsy applies in addition.
(3) When you enter into an agreement with us through our Etsy Shop, Etsy will send us your Etsy Username, name and billing address as deposited in your Etsy user account. Insofar as you provide additional data as part of your order (for example, a different delivery address or a telephone number), these will also be sent to us.
(4) We process the data referred to in paragraph 3 electronically for the proper fulfillment of the contract, in particular for the delivery, invoicing, the booking of payments and the processing of returns and complaints. This data processing is based on Article 6 (1) (b) GDPR. We retain this information until all mutual claims arising from the respective contractual relationship with you have been completely settled and the commercial and fiscal retention periods to which we are subject have expired.
(5) A contract between you and us requires us to receive your name, address and Etsy username. The necessity of providing this data arises, among other things, from the terms and conditions of Etsy as well as from legal regulations (such as § 312i (1) (3) BGB, § 14 (4) UStG). Without providing this data, you can not conclude a contract with us.
(6) As far as we send you physical goods on the basis of the purchase contract, we will forward your name and shipping address to Deutsche Post (Deutsche Post AG, 53113 Bonn) or DHL (DHL Paket GmbH, 53113 Bonn) as the shipping service provider, if applicable Purposes of delivery of the consignment to you and, if applicable, the return of your consignment to us on the basis of Article 6 (1) (b) GDPR.
(7) If you use PayPal's service for the payment, PayPal's Privacy Policy will apply in addition to the payment process. PayPal will act on your behalf. Link to privacy policy: (https://www.paypal.com/webapps/mpp/ua/privacy-full)
(8) If you use a payment method offered through Mangopay, Mangopay will collect and process on your behalf your name, card or bank account number and / or other information required for the payment method you have chosen. In this regard, the provisions of the Mangopay privacy policy apply in addition.
(9) If you send us a message via the "contact seller" function on Etsy, Etsy will send us your Etsy username along with your message. If you send us a message by e-mail, we will save your message with the sender details (name, e-mail address). We process the above-mentioned data in order to be able to answer your message and to be able to respond to possible later follow-up questions (legal basis: Article 6 (1) (f) GDPR). For the reception, storage and sending of e-mails, we use an e-mail provider who acts for us as a processor in accordance with Article 28 GDPR. We will delete the information collected from your message no later than six months after your last communication with you, subject to the following paragraph.
(10) If you provide us with a legally relevant declaration on the contractual relationship (for example, a revocation or a claim), the legal basis for the processing, regardless of the transmission method, is also Article 6 (1) (b) GDPR. In such a case, we will delete the data related to your declaration as soon as all reciprocal claims from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.
(11) An article photo may contain social media buttons; they can be recognized by the logos of the social media platforms (hereinafter "platforms") (Facebook: blue "f", Google Plus: red "g +", Pinterest: red "p", Twitter: blue bird silhouette) , These are links to the respective platforms based in the US. A click on such a link calls the website of the respective platform, whereby the IP address of the calling terminal as well as the address of the page from which the link is referred ("Referrer") are transmitted to the called platform in the USA. However, we do not collect or process data in connection with the social media buttons.
(12) We refrain from automated decision-making and profiling.
(13) The following rights apply to the personal information we process about you:
a) You have the right to ask us to confirm whether we are processing personal data concerning you. If this is the case, we will inform you about the personal data stored about you and the further information in accordance with Article 15 paragraph 1 u. 2 DSGVO with.
b) You have the right to have your incorrect personal data corrected without delay. Taking into account the purposes of processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
c) You can demand the immediate deletion of your personal data concerning you under the conditions of Article 17 paragraph 1 GDPR, as far as their processing is not required according to Article 17 paragraph 3 GDPR.
d) You may demand that we restrict the processing of your data if one of the requirements of Article 18 (1) of the GDPR exists. In particular, you can request the restriction instead of a deletion.
e) We will disclose any rectification or deletion of your personal data and a restriction of processing to all recipients to whom we have disclosed your personal data, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request it.
f) You have the right to receive the personal information you provide to us in a structured, common and machine-readable format, and we may require that we transfer that information to another person without hindrance, as far as technically possible.
g) If a data processing is based on your consent, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the data processing that took place until your revocation.
(14) OPPOSITION RIGHT: FOR REASONS ARISING OUT OF ITS SPECIAL SITUATION, YOU MAY, AT ANY TIME, DISCONTINUE THE PROCESSING OF THE PERSONAL DATA CONCERNED; this right of objection exists with regard to the processing of data which, on the basis of Article 6 (1) (f) of the GDPR, serves the legitimate interests of us or a third party, unless your interests or fundamental rights and fundamental freedoms, which require the protection of personal data, prevail.
If you exercise your right to object, we will no longer process the data in question unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of you, or that the processing of the assertion, exercise or Defense of legal claims serves.
(15) IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT ADVERTISING (eg NEWSLETTER), YOU MAY AT ANY TIME SUBMIT CONTRACT AGAINST THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSES OF SUCH ADVERTISING, WITH THE RESULT THAT WE WILL NOT INCREASE YOUR DATA FOR THIS PURPOSE BE PROCESSED.
(16) If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement. This does not exclude other administrative or judicial remedies.
