Prodast

# Privacy Policy (GDPR Compliant)

## 1. General Information

This Privacy Policy describes how **Prodast** ("we", "us", "our") collects, uses, shares, and protects your personal information when you use our shop on Etsy.

We are committed to complying with the General Data Protection Regulation (GDPR) for customers located in the European Economic Area (EEA).

---

## 2. Personal Data We Collect

We may collect and process the following personal data:

* Full name
* Email address
* Billing address (if provided via Etsy)
* Order details (digital products purchased)
* Any communications sent through Etsy

---

## 3. Legal Basis for Processing

We rely on the following legal bases to process your data:

* **Contractual necessity**: to process and fulfill your order
* **Legal obligations**: to comply with applicable laws and regulations
* **Legitimate interests**: to improve our services and communicate with customers
* **Consent** (where applicable): for marketing or newsletter subscriptions

---

## 4. How We Use Your Data

We use your personal data to:

* Process and deliver digital products
* Provide customer support
* Manage orders and transactions
* Improve user experience
* Comply with legal obligations

---

## 5. Data Sharing

We only share your data when necessary with:

* Etsy, to operate our shop
* Legal authorities when required

We do not sell your personal data to third parties.

---

## 6. International Data Transfers

Since Etsy and certain service providers may operate outside the EEA, your data may be transferred outside this region.
In such cases, appropriate safeguards are implemented to ensure your data is protected in accordance with GDPR.

---

## 7. Data Retention

We retain your personal data only for as long as necessary to:

* Provide our services
* Comply with legal and tax obligations
* Resolve disputes

---

## 8. Your Rights Under GDPR

If you are located in the EEA, you have the following rights:

* Right to access your personal data
* Right to rectification
* Right to erasure ("right to be forgotten")
* Right to restrict processing
* Right to object to processing
* Right to data portability
* Right to withdraw consent at any time (where applicable)

To exercise any of these rights, please contact us via Etsy messages.

---

## 9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration.

---

## 10. Data Minimization

We only collect the data necessary to provide our services.

---

## 11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted here.

---

## 12. Contact

For any questions regarding this Privacy Policy or to exercise your rights, please contact us via Etsy messages.