PRIVACY POLICY FOR THE ETSY SHOP VERSFORM
English translation for your convenience. Only the German version is legally binding.
1. Controller
Concept4IT Consulting GmbH, represented by the managing director Doron Marcu, Gustav-Freytag-Straße 36, 60320 Frankfurt am Main, Germany
Phone: +49 69 95635768, e-mail: hello@versform.de
We have not appointed a data protection officer because the legal requirements for doing so are not met.
2. Etsy as the platform
Our shop runs on Etsy. Etsy is responsible for the processing on the platform itself (account, search, cookies, payment processing via Etsy Payments) (for Europe: Etsy Ireland UC, Dublin, Ireland). Etsy's privacy policy applies to that. This policy only describes what we as the seller do with your data.
3. What data we receive
When you buy from us, Etsy transmits the data required for the order: name, delivery address, e-mail address (or the Etsy messaging function), items ordered, prices and payment status. We do not receive card details or bank details; payment is handled by Etsy. If you send us a message via Etsy or an e-mail, we also process the content of your message.
4. Purposes and legal bases
- Processing your order (production, shipping, invoice, cancellation, returns, warranty, customer service): Art. 6(1)(b) GDPR.
- Compliance with legal obligations, in particular retention obligations under commercial and tax law: Art. 6(1)(c) GDPR.
- Answering enquiries, complying with Etsy's rules, defending against claims and preventing fraud: Art. 6(1)(f) GDPR (legitimate interest).
- Where you have given consent: Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
We do not send advertising by e-mail.
5. Disclosure to the shipping provider
We ship with DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany). For this, we pass your name and delivery address on to DHL, because delivery would otherwise not be possible (Art. 6(1)(b) GDPR). We only pass on your e-mail address or phone number if you have expressly agreed, so that DHL can notify you about the delivery (Art. 6(1)(a) GDPR).
6. Our server and other recipients
To produce and ship your order, we also store only your name, delivery address, the items ordered and the tracking number on a server, so that our shipping team can access them in a password-protected, non-public area. Your e-mail address, messages and payment data are not included. This server is operated for us by Droidtech e.K., Auf der Eichelsbach 19, 54533 Hasborn, Germany, solely on our behalf and according to our instructions (data processing under Art. 28 GDPR). The server is located at Host Europe GmbH, Cologne, Germany, in a data centre in the EU; Host Europe acts as a further processor (sub-processor) for Droidtech e.K. and is likewise bound by instructions. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). The delivery address is deleted there 90 days after shipping; statutory retention obligations for accounting records remain unaffected.
Our e-mail mailbox (hello@versform.de) is likewise provided to us by Droidtech e.K. as a processor; it is hosted by ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, Germany, which acts as a further processor (sub-processor) for Droidtech e.K. and is likewise bound by instructions (Art. 28 GDPR). Persons who handle orders for us are bound to confidentiality. Beyond that, we only pass on data where we are legally obliged to do so (e.g. to tax authorities or our tax advisers). We do not transfer data to countries outside the EU; Etsy's own privacy policy applies to Etsy.
7. Storage period
We store order data for as long as necessary for processing and possible warranty claims. We keep invoices and tax-relevant documents for as long as commercial and tax law requires (up to 10 years, § 147 German Fiscal Code (AO), § 257 German Commercial Code (HGB)). We delete messages unrelated to an order once the enquiry has been dealt with.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to hello@versform.de is sufficient. For data processed by Etsy itself, please contact Etsy.
9. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, www.datenschutz.hessen.de.
10. Obligation to provide data
The order details are required to conclude the contract; without them we cannot deliver. We do not use automated decision-making, including profiling.
Last updated: 3 October 2026