Information I collect
In order to fulfill your order, you must provide me with certain information (you have authorized Etsy to pass this on to me), such as your name, email address, postal address, payment information, and the details of the product you ordered. If you contact me directly (for example when you place a custom order) you can also choose to provide me with additional personal information.
===============================
Why I need your data and how I use it
I rely on a number of legal bases to collect, use and share your information, including:
• as necessary to provide my services, such as when I use your information to fulfill your order, resolve disputes, or provide customer service;
• where you have given your explicit consent, which you can withdraw at any time, such as by signing up for my mailing list;
• as necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
• as necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as
1) providing and improving my services. I use your data to provide the services you have requested and in my legitimate interest to improve my services;
and
2) Compliance with Etsy's Seller Policies and Terms of Use. I use your information as necessary to comply with my obligations under Etsy's Seller Policies and Terms of Use.
===============================
Data Sharing and Disclosure
My customers' data is important to my business. I only share your personal information for very limited reasons and very specific situations, as follows:
• Etsy. I share information with Etsy as necessary to provide you with my services and to fulfill my obligations set forth in both Etsy's Seller Policies and Terms of Use.
• Service providers I engage certain trusted third parties to perform certain functions and provide services to my shop, such as delivery drivers. I will share your personal information with these third parties, but only to the extent necessary to provide these services.
• Business Transfers. If I sell or merge my business, I may disclose your information as part of that transaction, but only to the extent permitted by law.
• Compliance with laws. I may collect, use, retain and share your information if I have a good faith belief that it is reasonably necessary to:
a) respond to legal process or government requests;
b) comply with my agreements, terms and policies;
c) preventing, investigating and addressing fraud and other illegal activities, security or technical issues;
d) protect the rights, property and safety of my customers or others.
=============================
Data retention
I will only retain your personal information for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with our legal and regulatory obligations, resolve disputes, and enforce my agreements. In general, I keep your data for 4 years.
=============================
Transfer of personal data outside the EU
I may store and process your information through third party hosting services in the United States and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than yours. If I am required to transfer your data outside of the EU, I will rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.
=============================
Your rights
If you live in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights are general, some rights relate to specific, limited cases. I describe those rights below:
• Access. You may have the right to access and receive a copy of the personal information I hold about you. You can contact me via the information below.
• Change, limit, delete. You may also have the right to change your personal information, restrict my use of it, or delete it. If there are no exceptional circumstances (such as where I am required to store data for legal reasons) I will generally delete your personal data upon request.
• Objection. You can object to (i) my processing of some of your data based on my legitimate interests and (ii) receiving marketing communications after giving your explicit consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate reasons to continue using that information or if it is necessary for legal reasons.
• Complaints. If you live in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
=============================
How to contact me
For purposes of EU data protection law, we, company AUDRA (AdrialleShop belongs to company AUDRA), are the data controller of your personal information. If you have any questions or concerns, you can contact us at:
• contact button on AdrialleShop shop on Etsy
=============================
Registered with Chamber of Commerce A'dam 34258798
VAT: NL002441644B45