gregorsdottir

Privacy Policy (GDPR)

This Privacy Policy explains how and when I collect, use, and share information when you purchase an item from my Etsy shop, contact me, or otherwise use my services through Etsy.com and its related websites and services.
This Privacy Policy does not apply to the practices of third parties that I do not own or control, including Etsy or any third-party services you access through Etsy. You can learn more about Etsy's privacy practices by reviewing Etsy's Privacy Policy.

Information I Collect
To fulfill your order, Etsy provides me with certain information that you have authorized Etsy to share with me. This may include:
Your name
Your email address
Your billing address
Payment information (processed securely by Etsy)
Details of the product you purchased
You may also choose to provide additional personal information if you contact me directly.

Why I Need Your Information
I rely on several legal bases under the GDPR to collect, use, and share your information, including:
To fulfill your order and provide customer support.
To comply with legal obligations, such as tax and accounting requirements.
When necessary for my legitimate business interests, provided these interests are not overridden by your rights. This includes improving my shop and complying with Etsy's Seller Policy and Terms of Use.
With your consent, where required (for example, if you choose to subscribe to a newsletter).

Sharing Your Information
I only share your personal information when necessary, including:
Etsy, to provide my services and comply with Etsy's Seller Policy and Terms of Use.
Service providers, such as payment processors or technology providers, where necessary to operate my shop.
Legal authorities, when required by law or to protect my legal rights.
As my shop currently sells digital products only, I do not share your information with shipping or postal service providers.

Data Retention
I retain your personal information only for as long as necessary to provide my services and comply with legal obligations, resolve disputes, and enforce agreements. In general, I retain order-related information for up to four (4) years, unless a longer retention period is required by law.

International Data Transfers
Your information may be processed outside the European Economic Area (EEA) through Etsy or other trusted service providers. Where required, these transfers are protected using appropriate safeguards in accordance with applicable data protection laws, such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

Your Rights
If you reside in the European Union or certain other jurisdictions, you may have the right to:
Access the personal information I hold about you.
Correct inaccurate information.
Request the deletion of your personal information (subject to legal obligations).
Restrict or object to certain processing activities.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local data protection authority.

Contact
For the purposes of the General Data Protection Regulation (GDPR), I, Julia Baumeister, am the data controller responsible for your personal information.
If you have any questions about this Privacy Policy or your personal data, you can contact me at:
Julia Baumeister
Email: gregorsdottir@gmx.de