KinCollared

Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR) is:

Kincollared Etsy Shop
(Contact anytime via Etsy messaging)

2. Collection and Processing of Personal Data

We collect and process personal data only to the extent necessary for processing your order and fulfilling the contract.

The data processed includes, in particular:

First and last name

Billing and shipping address

Email address

Payment information (via Etsy or payment service providers)

Order details (items, quantity, price)

Processing is carried out in accordance with Art. 6(1)(b) GDPR (performance of a contract).

3. Use of Data for Contract Fulfillment

The data you provide will be used exclusively for:

Processing your order

Communication regarding your purchase

Delivery of goods

Your data will only be shared if necessary for contract fulfillment, for example, with:

Shipping service providers

Payment service providers

Etsy as the platform operator

4. Payment Processing

Payments are processed via Etsy Payments.
Your payment information is handled directly by Etsy or their payment service providers.
We do not have access to your full payment details.

For more information, please refer to Etsy’s Privacy Policy:
https://www.etsy.com/legal/privacy

5. Communication via Etsy

If you contact us through Etsy, your messages—including any personal data contained therein—will be stored for the purpose of processing your request.
This data will not be shared without your consent.

Legal basis: Art. 6(1)(b) and (f) GDPR.

6. Data Retention

We store personal data only as long as necessary:

To fulfill the contract, or

As required by law (e.g., tax and commercial retention periods of up to 10 years)

7. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Right of access to your personal data (Art. 15 GDPR)

Right to rectification of inaccurate data (Art. 16 GDPR)

Right to erasure of your data (Art. 17 GDPR)

Right to restriction of processing (Art. 18 GDPR)

Right to data portability (Art. 20 GDPR)

Right to object to processing (Art. 21 GDPR)

You can exercise these rights at any time by contacting us via email.

8. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
For example, the supervisory authority in your federal state is competent.

9. Changes to the Privacy Policy

We reserve the right to modify this privacy policy to adapt it to changes in the law or changes to our services.