ReThingStudio

PRIVACY POLICY

This Privacy Policy explains how I collect, use, store and share your personal data when you purchase an item from me, contact me, or otherwise use my services through Etsy.

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), the data controller is:

Radosław Czupryński
Rething Radosław Czupryński
ul. Dworcowa 24
46-030 Nowe Budkowice
Poland
Email: radoslaw.czuprynski@op.pl

This Privacy Policy applies to the processing of personal data by me as the owner of the ReThingWoodworks Etsy shop. Etsy processes personal data separately in accordance with its own Privacy Policy.

1. Personal data I collect and where it comes from

When you place an order through Etsy, Etsy provides me with information necessary to process and fulfil your order. I may also receive information directly from you when you contact me through Etsy Messages or otherwise communicate with me regarding your order.

Depending on the circumstances, this information may include:

your name;
email address;
postal and delivery address;
telephone number, where provided or required for delivery;
order and transaction details;
information about the product you ordered, including selected options or specifications;
information you provide in messages, including details necessary for custom orders, delivery or customer support.

I do not receive or store your full payment card or bank account details. Payments made through Etsy are handled by Etsy and its payment services.

2. Why I process your personal data and the legal bases

I process personal data only where I have a lawful basis to do so.

I process your data:

to perform my contract with you or take steps at your request before entering into a contract, including processing and fulfilling your order, producing customised items where applicable, arranging delivery, communicating about your order, handling cancellations, returns, complaints and providing customer support;
to comply with legal obligations, including accounting, tax and other obligations imposed by applicable law;
for my legitimate interests, where those interests are not overridden by your rights and freedoms. These interests may include preventing fraud or misuse, protecting and exercising legal claims, maintaining records necessary for the operation of my business and complying with my obligations as an Etsy seller.

I do not use personal data obtained through Etsy to send unsolicited marketing communications or add buyers to mailing lists without the consent required by applicable law and Etsy's rules.

3. Whether you must provide personal data

Certain personal data, such as your name, delivery address and information about the product ordered, is necessary to enter into and perform the contract and to deliver your order.

If you do not provide information that is necessary to process or deliver your order, I may be unable to fulfil the order.

Additional information that is not necessary for the order is voluntary.

4. Sharing of personal data

I disclose personal data only where necessary for the purposes described in this Privacy Policy.

Your data may be disclosed to:

delivery and logistics providers, where necessary to deliver your order;
customs authorities, customs brokers and other entities involved in international delivery, where required for cross-border shipments;
professional service providers, where necessary for accounting, tax, legal or other legitimate business purposes;
public authorities, courts or law-enforcement bodies, where disclosure is required by law or necessary for the establishment, exercise or defence of legal claims.

Only the information reasonably necessary for the relevant purpose is disclosed.

Etsy separately processes your personal data as an independent data controller in connection with your use of the Etsy platform. Etsy's own processing is governed by Etsy's Privacy Policy.

5. Transfers outside the European Economic Area

In connection with international orders or services used to operate my business, personal data may in some circumstances be transferred to countries outside the European Economic Area (EEA).

Where I am responsible for such a transfer, it will take place only where permitted under applicable data protection law, including where the European Commission has recognised an adequate level of protection, where appropriate safeguards are in place, or where a transfer is necessary for the performance of a contract with you or another applicable legal basis for the transfer exists.

6. How long I keep personal data

I retain personal data only for as long as necessary for the purposes for which it was collected.

Order, transaction, accounting and tax records are retained for the period required by applicable Polish law.

Other information, including correspondence relating to orders, customer service, returns or complaints, is retained only for as long as reasonably necessary to fulfil the relevant purpose, comply with legal obligations, or establish, exercise or defend legal claims.

When personal data is no longer required for any of these purposes, it will be deleted or otherwise no longer retained by me, subject to applicable legal requirements.

7. Your rights

Subject to the conditions provided by applicable data protection law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive personal data you have provided in a structured, commonly used and machine-readable format and, where applicable, request its transfer to another controller;
lodge a complaint with a competent data protection supervisory authority.

In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO).

Please note that some rights are not absolute. For example, I may be required to retain certain information despite a deletion request where retention is required by law or necessary for the establishment, exercise or defence of legal claims.

8. Automated decision-making and profiling

I do not use the personal data I process as the owner of ReThingWoodworks for automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Etsy may process personal data independently for its own purposes. Please refer to Etsy's Privacy Policy for information about Etsy's processing practices.

9. How to contact me

If you have questions about this Privacy Policy or would like to exercise your data protection rights, please contact me at:

Radosław Czupryński
Rething Radosław Czupryński
ul. Dworcowa 24
46-030 Nowe Budkowice
Poland
Email: radoslaw.czuprynski@op.pl

If your request concerns personal data controlled directly by Etsy rather than by me, please contact Etsy through its Help Centre.