PaolaCreativeLAB

The information I collect:
In order to complete your order, you must provide me with certain information (Etsy provided it to me with your permission), such as your name, email address, mailing address, payment information, and details of the product you ordered. You may decide to provide me with additional personal information (e.g. to order a custom piece of jewelry) if you contact me directly.
Why I need your information and how I use it: I rely on a number of legal bases to collect, use and share your information, including:
are necessary to provide my services, such as when I use your information to complete your order, resolve disputes, or provide customer service;
when you have provided affirmative consent, which you can revoke at any time, such as by signing up for my mailing list;
if necessary for compliance with legal obligations or a court order or in connection with a legal action, such as retaining information about your purchase if required by tax law; and
if necessary for my legitimate interest, provided your rights or interests do not override, such as 1) providing and improving my services. I use your information to provide the services you have requested and in my legitimate interest to improve my services; and 2) Compliance with Etsy's Seller Policy and Terms of Use. I use your information as necessary to comply with my obligations under the Seller Policy and the Etsy Terms of Use.
Sharing and Disclosure of Information: My customer information is important to my business. I will only share your personal information for limited reasons and circumstances as follows:
Etsy. I share information with Etsy as necessary to provide my services to you and to comply with my obligations under the Rules for Sellers and Etsy's Terms of Use.
Service Providers. I use trusted third parties to perform certain functions and provide services to my store, such as delivery companies. I will share your personal information with these third parties, but only as necessary to perform these services.
Business Transfers. If I were to go through a sale or merger of my business, I may disclose your information as part of that transaction, but only to the extent permitted by law.

Legal Compliance. I may collect, use, retain and share your information if, in good faith, I reasonably believe it is necessary to: (a) respond to legal process or governmental requests; (b) enforce contracts, conditions, and regulations; (c) prevent, investigate, and combat fraud, and other problems related to illegal, security, or technical activities; or (d) protect the rights, property, and safety of my clients, or others.
Data Retention: I will retain your personal information only as long as necessary to provide my services to you, as set forth in my Privacy Policy. However, I may be required to retain such data to comply with legal obligations, resolve disputes, and enforce contracts. Generally, I retain your information for the following period of time: 4 years.
Transfers of Personal Information Outside the EU: I may store and process your information through third-party hosting services in the United States and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and governmental oversight laws than those in your jurisdiction. If I were to transfer your personal information outside the EU, I would rely on Privacy Shield as the legal basis for the transfer, as Google Cloud has Privacy Shield certification.
Your rights: If you reside in certain territories, including the EU, you have several rights related to your personal information. While some of these rights are generally applicable, others apply only in certain specific cases. I describe these rights below:
Access. You have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
Modification, Limitation, Deletion In addition, you have the right to modify your personal information, limit the use of your personal information, or delete your personal information. Except in exceptional circumstances (such as where I am required to retain data for legal purposes), I generally delete personal information upon request.
Objection. You may object to (i) my processing of certain of your information based on my legitimate interest and (ii) your receipt of marketing messages from me after you have provided your express consent to receive them. In such cases, I will delete your personal information, except where there are overriding legitimate reasons on my part to continue using such information or where it is necessary for legal reasons.
Complaint. If you are located in the EU and wish to raise a concern about the use of your information (and without prejudice to any rights you may have), you have the right to do so with your local data protection authority.
How to contact me: For the purposes of the European Data Protection Act, I, Agnello Francesca am the controller of your personal information. If you have any questions or concerns, please contact me at campaillapaola712@gmail.com.