Privacy Policy
1) General Information and Data Controller
1.1 Thank you for visiting our Etsy shop (hereinafter "website"). We appreciate your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data refers to all data by which you can be personally identified.
1.2 The "Controller" responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is:
Robin Schmezko Im Gesenk 22 31275 Lehrte Germany Tel.: +49 1573 7162343 E-mail: codingry@gmail.com
The Controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 The Controller has appointed a Data Protection Officer, who can be reached at the address and contact details listed above.
2) Contacting Us
When you contact us (e.g., via contact form or e-mail), we collect personal data. The specific data collected via a contact form can be seen from the respective form. This data is stored and used exclusively for the purpose of answering your request, contacting you, and related technical administration.
Legal Basis: The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.
Deletion: Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the matter has been conclusively clarified, provided that there are no statutory retention obligations to the contrary.
3) Data Processing for Order Fulfillment
3.1 Transfer to Service Providers To process your order, we work with service providers who support us in the execution of contracts. Personal data is transmitted to these service providers as follows:
Logistics and Banking: To the extent necessary for contract performance (delivery and payment), personal data is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
Digital Goods Updates: If we owe you updates for goods with digital elements or digital products based on a contract, we will process the contact data (name, address, e-mail address) provided by you at the time of order. This is to inform you personally about upcoming updates within the legally stipulated period, in compliance with Art. 6 (1) lit. c GDPR. We use suitable communication means (e.g., post or e-mail). Your data is strictly used to inform you about owed updates and only to the extent necessary for this information.
3.2 Etsy Payments We use Etsy Payments for payment processing.
Etsy Ireland UC: If payment is made in currencies other than US Dollars or Canadian Dollars, processing is carried out by Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland.
Etsy Inc: If payment is made in US Dollars or Canadian Dollars, processing is carried out by Etsy Inc, 117 Adams Street, Brooklyn, NY 11201, USA.
The transfer of data takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing. For further details, please refer to the Etsy privacy policy: etsy.com/en/legal/privacy/
4) Rights of the Data Subject
4.1 Your Rights Applicable data protection law grants you comprehensive rights regarding the processing of your personal data:
Right of Access (Art. 15 GDPR): You have the right to request information about your personal data processed by us, the processing purposes, categories of data, recipients, storage duration, and the origin of your data if not collected by us. You also have the right to know about automated decision-making (including profiling) and guarantees regarding data transfers to third countries.
Right to Rectification (Art. 16 GDPR): You have the right to demand the immediate correction of inaccurate data or the completion of incomplete data stored by us.
Right to Erasure (Art. 17 GDPR): You have the right to demand the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. This right does not apply if processing is necessary for freedom of expression, legal obligations, public interest, or legal claims.
Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing while the accuracy of your data is verified; if you refuse deletion due to unlawful processing; if you need the data for legal claims after we no longer need it; or if you have objected to processing pending verification of legitimate grounds.
Right to Notification (Art. 19 GDPR): If you assert the right to rectification, erasure, or restriction, the controller must inform all recipients of your data, unless impossible or disproportionately difficult.
Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, machine-readable format or request its transfer to another controller, where technically feasible.
Right to Withdraw Consent (Art. 7 (3) GDPR): You may withdraw given consent at any time with future effect. Upon withdrawal, we will immediately delete the concerned data unless there is another legal basis for processing.
Right to Lodge a Complaint (Art. 77 GDPR): If you believe the processing of your data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the place of the alleged infringement.
4.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE THIS RIGHT, WE WILL STOP PROCESSING THE CONCERNED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR DATA FOR DIRECT MARKETING, YOU MAY OBJECT AT ANY TIME. IF YOU OBJECT, WE WILL STOP PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.
5) Storage Duration of Personal Data
The duration of storage is determined by the legal basis, the purpose of processing, and applicable statutory retention periods (e.g., commercial and tax laws).
Consent (Art. 6 (1) lit. a GDPR): Data is stored until you revoke your consent.
Contractual/Legal Obligations (Art. 6 (1) lit. b GDPR): Data subject to legal retention periods is deleted routinely after these periods expire, provided it is no longer required for contract fulfillment or initiation, and we have no legitimate interest in further storage.
Legitimate Interest (Art. 6 (1) lit. f GDPR): Data is stored until you exercise your right to object, unless we have compelling legitimate grounds for continued processing or it serves legal claims.
Direct Marketing: Data is stored until you exercise your right to object.
Unless otherwise stated, personal data will be deleted when it is no longer necessary for the purposes for which it was collected.
6) Etsy Privacy Policy
Please note that the Etsy platform is responsible for all further data processing that goes beyond the processing described above. For more information, please refer to Etsy's privacy policy: etsy.com/en/legal/privacy/