3DMood

Information I Collect
• Name, postal address, email address, payment information* and order details you provide via Etsy.
• Additional information you voluntarily provide (e.g. for custom orders).

*I never receive your full card or bank details; payments are processed securely through Etsy Payments.

Legal Bases for Processing
I rely on the following legal grounds under the EU General Data Protection Regulation (GDPR):
• Contractual necessity – to fulfil your order, provide customer support and settle disputes.
• Consent – for any additional information you choose to provide; you may withdraw consent at any time.
• Legal obligation – to retain records for tax and accounting laws in the Netherlands.
• Legitimate interests – to improve my services, provided those interests are not overridden by your rights.

Information Sharing and Disclosure
I share your personal data only when necessary, and only with:
• Etsy – to provide my services and comply with the Etsy Seller Policy.
• Service providers (e.g. postal carriers, fulfilment and IT providers) strictly for delivery and business operations.
• Business transfers – if I sell or merge the business, where permitted by law.
• Compliance with laws – to respond to legal or governmental requests, prevent fraud, and protect safety.

Data Retention
I keep your personal information only as long as necessary to: (a) provide my services; and (b) comply with legal obligations. Dutch tax law requires retaining order records for 7 years.

Transfers of Personal Information Outside the EU
I may store and process your data through third‑party services located outside the European Economic Area (EEA). When I transfer information internationally, I rely on legally recognised mechanisms, such as Standard Contractual Clauses or Privacy Shield frameworks (where applicable), to protect your data.

Your Rights
If you are an EU resident, you have the right to:
• Access the personal data I hold about you.
• Request correction, restriction or deletion of your data.
• Object to my processing based on legitimate interests.
• Receive a portable copy of your data.
• Lodge a complaint with your local data‑protection authority.

I will honour any valid request within 30 days unless legal requirements prevent me from doing so.

How to Contact Me
For the purposes of GDPR, I, [Your Name], am the data controller of your personal information. If you have questions or concerns, you may contact me at 3dmoodvases@gmail.com