1. What information I collect
In order for me to process your order, you must provide me with certain information (which you have authorized Etsy to provide to us). This includes your name, email address, postal address, payment information and information about the product you are ordering. You also have the option to provide us with additional personal information (e.g. for a custom order/commission) if you contact me directly.
2. Why I need your information and how I use it
I rely on a number of legal bases to collect, use and share your information. In fact:
where we need your information to provide our services, for example to process your order, resolve disputes or provide customer support;
where you have given your express consent (which you can withdraw at any time), if it is necessary to comply with a legal obligation or court order, or in connection with a legal claim, such as the need to retain information about your purchases due to tax legislation; and
as necessary for the purposes of our legitimate interests - provided these legitimate interests are not overridden by your rights or interests - such as 1. to provide and improve my services. I use your information to provide the services you have requested from us and in my legitimate interest to improve my services; and 2. to comply with Etsy's Seller Policy and Terms of Use. I use your information as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Service.
3. Sharing and Disclosure of Information
Customer data is important to my business. I will only release your personal information for specific reasons and under very specific circumstances, as follows:
Etsy: I share information with Etsy as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Service.
Service providers: I use certain reliable third-party parcel service providers. I share your personal information with this third party, but only to the extent necessary to perform those services.
Compliance with Laws: I may collect, use, retain and disclose your information when I have a good faith belief that doing so is reasonable and necessary to: a) respond to legal process or governmental requests; b) enforce my contracts, terms and policies; c) prevent, investigate and correct fraud and other illegal activities, security or technical issues; or d) protect the rights, property and safety of our customers or others.
4. Data Retention
I only store your personal data for as long as is necessary to provide you with my services and as described in our privacy policy. However, I may need to keep this information to comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. In general, we keep your data for the following period: 4 years.
5. Transfer of personal data to countries outside the EU
I may store and process your information through third party hosting services in the US and other countries. As a result, I may transfer your personal information to countries that have data protection and regulatory surveillance laws that differ from the relevant laws in your country. Where I am deemed to be transferring information about you outside of the EU, I rely on the EU-US Privacy Shield as a legal basis for the transfer as Google Cloud is EU-US Privacy Shield certified.
6. Your Rights
If you reside in certain regions, including the EU, you have a number of rights in relation to your personal information. Some of these rights are general and others are specific. These rights are described below:
Access: You may have the right to access and receive a copy of the personal information we hold about you by writing to me using the contact information below.
Modification, Restriction, Deletion: You may also have the right to modify your personal information, restrict our use of that information, or delete it. Except in exceptional circumstances (e.g. where we need to store data for legal reasons) I will generally delete your personal data upon request.
Objection: You can object to this. In these cases, I will delete your personal data unless I can demonstrate compelling legitimate grounds for its continued use or it is required for legal reasons.
Complaint: If you reside in the EU and wish to raise a concern about our use of your information - without prejudice to any other rights you may have - you have the right to raise these concerns with your local data protection authority.

How to contact me:
For the purposes of the EU General Data Protection Regulation, I, Susanna Schorr, am the data controller of your personal data. If you have any questions or concerns, please contact me at

Susanna.schorr@gmx.de
Alternatively you can write to me at the following address:

Susanna Schorr, Zellinger Str. 12, 94113 Tiefenbach, Germany