Privacy Policy
1. Data Controller
The controller responsible for the processing of personal data in connection with this Etsy shop is:
Tim Paulat
Anna-Heinemann-Weg 16
45131 Essen
Germany
Email: etsy-shop@lunashop-24.de
Phone: +49 170 5505100
Protecting your personal data is important to us. The following information explains how personal data is processed in connection with orders, inquiries, digital downloads, and the production and delivery of products purchased through our Etsy shop.
2. Processing of Personal Data for Orders and Customer Communication
Personal data may be processed when you:
place an order through our Etsy shop,
contact us through Etsy Messages or by email,
request a return, submit a complaint or make a warranty claim,
purchase or download a digital product.
Depending on the type of order, the following data may be processed:
first and last name
billing address
delivery address
email address
telephone number, where applicable
order number
product and variant information
shipping information
information you provide when contacting us
Where processing is necessary to perform a contract with you or to take steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.
Where processing is necessary to comply with legal obligations, the legal basis is Article 6(1)(c) GDPR.
3. Data Processing by Etsy
Our shop is operated through the online marketplace Etsy.
When you visit our shop, place an order, download a digital product, make a payment or communicate with us through Etsy, Etsy processes personal data in accordance with its own privacy policies.
Etsy provides us with the personal data necessary to:
process your order,
communicate with you,
fulfil our contractual obligations,
handle returns and complaints, and
comply with legal obligations.
Etsy also processes certain personal data under its own responsibility as a data controller. We do not have full control over the nature, scope or duration of such independent processing by Etsy.
Etsy's current privacy policies apply additionally to this processing.
4. Payment Processing through Etsy
Payments for orders placed through Etsy are generally processed using the payment services provided by Etsy, in particular Etsy Payments.
The data required for the selected payment method is processed by Etsy and, where applicable, by payment service providers used by Etsy.
We generally receive only the payment and transaction information that Etsy makes available to us for the administration and fulfilment of your order.
We generally do not receive complete credit card information or other complete payment credentials unless Etsy expressly makes such information available as part of its services.
Etsy's and the relevant payment provider's privacy policies apply to their processing of payment data.
5. Physical Products – Print-on-Demand and Fulfilment
For the production and shipment of certain physical products, particularly historical maps, posters and art prints, we use print-on-demand and fulfilment service providers.
We currently use the Printify platform for this purpose.
Personal data necessary to fulfil your order may be transferred to Printify.
This may include:
recipient's name
delivery address
email address, where applicable
telephone number, where applicable
order number
product and variant information
other order information required for production and shipment
Where this processing is necessary for the manufacture and delivery of the goods you ordered, it is based on Article 6(1)(b) GDPR.
Where Printify processes personal data on our behalf, such processing is carried out in accordance with Printify's applicable data processing terms.
6. Production and Fulfilment Partners
Print-on-demand products may be manufactured and shipped directly to customers by different production and fulfilment partners.
The production partner used for a particular order may depend on:
the product ordered,
the selected size or variant,
the delivery country,
availability,
production capacity, and
available shipping options.
For certain products, a provider such as Posterflow or another suitable Print Provider available through Printify may currently be used.
We reserve the right to change production partners or use different suitable production partners where this is necessary or appropriate for production and delivery.
Only the personal data necessary for:
production,
packaging,
order fulfilment, and
delivery
is transferred to the production partner used for the relevant order.
The processing is generally carried out for the performance of the purchase contract pursuant to Article 6(1)(b) GDPR.
Where production partners act as processors or sub-processors, the processing is carried out in accordance with the applicable contractual data protection arrangements.
7. Shipping Providers
For the delivery of physical orders, the personal data required for shipment is transferred to the relevant shipping provider.
For print-on-demand orders, the shipping provider is generally selected by Printify or the relevant production or fulfilment partner.
Only information necessary for delivery is transferred, in particular:
name
delivery address
telephone number or email address, where required for delivery or shipping notifications
The processing is carried out for the performance of the purchase contract pursuant to Article 6(1)(b) GDPR.
The shipping provider used may vary depending on the production location, delivery address and selected shipping method.
8. Digital Products and Downloads
We may also offer digital products through Etsy, including:
historical maps,
digital art prints,
image files,
printable poster files, and
other downloadable products.
For digital products, the personal data necessary to process the purchase is handled through Etsy.
Digital files are generally made available through Etsy's download functions.
For orders consisting exclusively of digital products, your shipping information is generally not transferred to Printify, production partners or shipping providers, as no physical production or delivery is required.
The processing is carried out for the performance of the contract pursuant to Article 6(1)(b) GDPR.
9. Customer Communication
If you contact us through Etsy Messages or by email, we use the information you provide solely for the purpose of responding to your inquiry and the associated communication.
This may include inquiries relating to:
products,
orders,
shipping,
digital downloads,
returns,
complaints,
warranty claims, or
other customer service matters.
Where the communication relates to an existing or prospective contractual relationship, the legal basis is Article 6(1)(b) GDPR.
Where processing is necessary for other legitimate business interests, it may be based on Article 6(1)(f) GDPR.
10. No Unsolicited Marketing Using Order Data
Personal data received in connection with an Etsy order is generally not used for our own unrelated promotional emails or newsletters unless we have obtained the necessary consent or another lawful basis applies.
11. Transfers of Data to Third Countries
Depending on the service provider, production partner, shipping provider or production location used, it may be necessary for personal data to be processed outside the European Union or European Economic Area.
This may apply in particular where products are manufactured or delivered outside the EU.
Where special legal requirements apply to such international transfers, personal data is transferred only in accordance with applicable data protection law and on the basis of appropriate safeguards where required.
12. Data Retention
We retain personal data only for as long as necessary for:
processing and fulfilling contracts,
providing customer service,
handling returns and warranty claims,
establishing, exercising or defending legal claims, and
complying with tax, commercial and other statutory retention obligations.
Once the relevant purpose no longer applies, the data will be deleted or its processing restricted unless statutory retention obligations or another legal basis require continued storage.
Processing for compliance with statutory retention obligations is based on Article 6(1)(c) GDPR.
13. Your Rights
Subject to the applicable legal requirements, you have the following rights:
Article 15 GDPR – Right of Access
You have the right to request information about the personal data we process about you.
Article 16 GDPR – Right to Rectification
You have the right to request correction of inaccurate data and completion of incomplete data.
Article 17 GDPR – Right to Erasure
You may request deletion of your personal data where the legal requirements are met.
Article 18 GDPR – Right to Restriction of Processing
You may request restriction of the processing of your personal data where the legal requirements are met.
Article 20 GDPR – Right to Data Portability
You may have the right to receive personal data you provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
Article 21 GDPR – Right to Object
You may have the right to object to certain processing of your personal data.
Article 77 GDPR – Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
You may in particular contact the supervisory authority responsible for your habitual residence, your place of work or our place of business.
14. Right to Object
Where we process personal data on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.
15. Contact
If you have any questions regarding data protection or wish to exercise your rights, please contact:
Tim Paulat
Anna-Heinemann-Weg 16
45131 Essen
Germany
Email: etsy-shop@lunashop-24.de
Phone: +49 170 5505100
16. Additional Privacy Policies of Etsy and Printify
Etsy's current privacy policy additionally applies to personal data that Etsy processes under its own responsibility.
Printify's current privacy policy and data processing terms additionally apply to personal data processed in connection with the use of Printify.
Where additional production, fulfilment or shipping providers are used, their respective privacy policies may additionally apply to processing carried out by those providers under their own responsibility.
