Privacy Policy
(1) Below we inform you about the type, scope and purpose of the processing of your personal data when using our Etsy store. Personal data is any information relating to an identified or identifiable natural person.
(2) The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. For personal data processed by the provider of this Etsy store, the controller within the meaning of the GDPR is: Sabrina Gehrsitz, Am Binsenrain 25, 97262 Hausen bei Würzburg, Germany, phone +49 (0) 174 2773572, email: hello@mrs-postman.com (hereinafter referred to as “we”). In addition, Etsy's privacy policy (Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland), available at www.etsy.com/de/legal/privacy , as well as Etsy's information on cookies and similar technologies, available at www.etsy.com/de/legal/cookies-and-tracking-technologies, apply.
(3) If you conclude a contract with us via Etsy, Etsy will send us your Etsy user name (if you do not buy as a “guest”), your name and the billing address as they are stored in your Etsy user account or as you have provided them in the course of concluding the contract. If you provide further data as part of your order (e.g. a different delivery address or a telephone number), this will also be transmitted to us.
(4) We process the data referred to in paragraph 3 electronically for the proper performance of the contract, in particular for delivery, invoicing, booking payments and processing returns and complaints. If we are obliged to provide you with updates for a digital product or for a product with digital elements, we will also process your contact details for this purpose. This data processing is carried out on the basis of Article 6(1)(b) GDPR. We store this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.
(5) In order to conclude a contract between you and us, it is necessary that we receive your name and a delivery address. The necessity of providing this data results, among other things, from the terms and conditions of Etsy as well as from legal regulations (e.g. § 312i para. 1 no. 3 BGB, § 14 para. 4 UStG). Therefore, you cannot conclude a contract with us without providing this data.
(6) If we send physical goods on the basis of the purchase contract, we will transmit the name and address of the recipient and, if you have consented to this, your e-mail address, to shipping service provider for the purpose of delivering the shipment, including, if applicable, prior e-mail notification of the expected delivery time, and for the purpose of any return of your shipment to us on the basis of Article 6(1)(b) GDPR.
(7) For the payment of a purchase, the payment service provider selected by you collects and processes your name, your card or account number and/or other data required for the respective payment method on your behalf. In this respect, the data protection provisions of the selected payment service provider apply and, if the recipient of the payment is Etsy, Etsy's privacy policy.
(8) Pursuant to Section 22f UStG, electronic marketplaces are obliged to record the place of dispatch and destination of a delivery as well as the time and amount of the turnover and to inform the tax authorities upon request. Therefore, these details of a delivery that you have ordered may be transmitted to the tax authorities in accordance with Article 6(1)(c) GDPR.
(9) If you send us a message via “Ask a question”, “Ask a custom order” or via a similar function on the Etsy platform, Etsy will send us your Etsy username or, if you do not have an Etsy username, another sender identification together with your message (legal basis: Article 6(1)(a) GDPR). If you send us a message by e-mail, we store your message with the sender data (name, e-mail address) in order to answer it and also to be able to respond to any subsequent follow-up questions from you (legal basis: Article 6(1)(f) GDPR). To receive, store and send emails, we use an email provider that acts for us as a processor in accordance with Article 28 GDPR. We will delete the data collected with your message no later than six months after the last communication with you regarding your request, subject to the regulation in the following paragraph.
(10) If you send us a legally relevant declaration regarding the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing is also Article 6(1)(b) GDPR, regardless of the means of transmission. In such a case, we will delete the data associated with your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.
(11) Social media buttons may be displayed on the Etsy pages; they can be recognized by the logos of the social media platforms (hereinafter referred to as “platforms”) (Facebook: blue “f”, Pinterest: red “p”, Twitter: blue bird silhouette). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling end device and the address of the page from which the link is made (“referrer”) are transmitted to the platform called up in the USA. However, we ourselves do not collect or process any data in connection with the social media buttons.
(12) Etsy uses various cookies. Cookies are small text files that are stored on your device when you visit the Etsy website and that allow Etsy and certain service providers with whom Etsy works to recognize your device the next time you visit. Etsy explains how these cookies work and what purposes they serve in detail at www.etsy.com/de/legal/cookies-and-tracking-technologies . You can influence the use of Etsy cookies via the “Privacy settings” link, which you can find at the bottom of every Etsy page. We - as the provider of the individual Etsy store MrsPostmanDesign - have no access to the cookies and also not to the associated data.
(13) We do not use automated decision-making or profiling.
(14) You have the following rights with regard to the personal data that we process about you:
(a) You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, we will provide you with the personal data stored about you and further information in accordance with Article 15 (1) and (2) GDPR.
b) You have the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
c) You have the right to obtain from us the erasure of personal data concerning you without undue delay under the conditions of Article 17(1) GDPR, unless the processing is necessary pursuant to Article 17(3) GDPR.
d) You may request that we restrict the processing of your data if one of the conditions of Article 18 (1) GDPR is met. In particular, you can request the restriction instead of erasure.
e) We will communicate any rectification or erasure of your personal data or restriction of processing to each recipient to whom we have disclosed your personal data, unless this proves impossible or involves disproportionate effort. We will also inform you about these recipients if you request this.
f) You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and may request that we transmit this data to another controller without hindrance, insofar as this is technically feasible.
g) If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of the data processing that took place prior to your withdrawal.
(15) RIGHT TO OBJECT: ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; This right to object exists in relation to data processing carried out on the basis of Article 6(1)(f) GDPR for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.
If you exercise your right to object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
(16) IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING PURPOSES (E.G. NEWSLETTERS), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
(17) If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.
