MidnightVision

Privacy Policy – MidnightVision Etsy Shop
Effective Date: 12.05.2025

This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from my shop, contact me, or otherwise use my services through Etsy.com or its related services, in accordance with the General Data Protection Regulation (GDPR).

1. Information I Collect
To fulfill your order, you must provide certain information (which you authorize Etsy to provide to me), such as:

- Your name
- Email address
- Postal address
- Payment information (handled securely via Etsy and never directly visible to me)
- Details of the product you’re ordering
- Optional personal information (e.g., for custom orders)

2. Why I Need Your Information and How I Use It

I rely on a number of legal bases to collect, use, and share your information, including:
- To provide my services, such as fulfilling your order, resolving disputes, or providing customer support;
- When you have provided your affirmative consent (e.g., subscribing to a mailing list, if applicable);
- If necessary to comply with a legal obligation or court order (e.g., retaining information about your purchase for tax purposes);
- As necessary for the purpose of my legitimate interests, provided those interests are not overridden by your rights or interests (e.g., improving my services).

3. Information Sharing and Disclosure
I share your personal information only for very limited reasons and in limited circumstances, as follows:

-Etsy: I share information with Etsy as necessary to provide my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
-Service providers: I engage trusted third parties to perform functions and provide services to my shop (e.g., delivery companies). I will share your personal information with these third parties, but only to the extent necessary to perform these services.
- Compliance with laws: I may collect, use, retain, and share your information if I am legally required to.

4. Data Retention
I retain your personal information only for as long as necessary to provide you with my services and as described in this Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, resolve disputes, and enforce my agreements. I generally keep your data for 4 years.

5. Transfers of Personal Information Outside the EU
I may store and process your information through third-party hosting services (such as Etsy or Google) in the US and other jurisdictions. As a result, your personal information may be transferred to a jurisdiction with different data protection and government surveillance laws. In such cases, I rely on Privacy Shield or other legal mechanisms recognized by the EU to ensure adequate data protection.

6. Your Rights under the GDPR
If you reside in the EU or EEA, you have a number of rights under the GDPR, including:

-The right to access and receive a copy of the personal information I hold about you;
-The right to rectify or erase your personal information;
- The right to restrict or object to my use of your data;
- The right to data portability.

You may contact me at any time using the contact information below to exercise these rights.

7. Contact Information
For purposes of EU data protection law, I, [Gabriela Lakasz], am the data controller of your personal information. If you have any questions or concerns, you may contact me at:

- Email: midnightvisionjewelry@gmail.com
- Business address: Dunajska 29, Samorin, 93101, Slovakia