WildAndLovedDesigns

PRIVACY POLICY

of
Karin Subko
Pfennigsmoorweg 28
30826 Garbsen
Germany
Email: Subko.designs@protonmail.com

⸻

1. Controller Information
This Privacy Policy applies to:

Karin Subko
Pfennigsmoorweg 28
30826 Garbsen
Germany
Email: Subko.designs@protonmail.com

The controller within the meaning of the General Data Protection Regulation (GDPR) is Karin Subko.

⸻

2. Collection and Processing of Personal Data

When you place an order through my Etsy shop or contact me, the following personal data may be processed:
• First and last name
• Billing and shipping address
• Email address
• Payment information (processed via Etsy Payments)
• Order details (product, quantity, personalization details)
• Messages exchanged via Etsy

Purpose of Processing

Your data is processed for the following purposes:
• To identify you as a customer
• To process and fulfill your order
• To produce and ship your print-on-demand products
• To communicate with you
• To issue invoices
• To comply with legal obligations (e.g., tax retention requirements)
• To assert legal claims

Legal Basis

Processing is carried out on the basis of:
• Art. 6(1)(b) GDPR (performance of a contract)
• Art. 6(1)(c) GDPR (legal obligation)
• Art. 6(1)(f) GDPR (legitimate interest in operating my business properly)

Data is stored for the duration of statutory retention periods (generally 6–10 years under German commercial and tax law) and then deleted unless further retention is legally required.
The provision of personal data is necessary for the conclusion and performance of a contract. Without this data, it is not possible to process and fulfill an order.

⸻

3. Sharing of Data with Third Parties

Your personal data is only shared where necessary to fulfill the contract.

a) Etsy Platform

Sales are conducted via Etsy.

Etsy processes personal data in accordance with its own Privacy Policy. Etsy may transfer data to third countries, including the United States.

I have no control over Etsy’s independent data processing activities.
Etsy and I may act as joint controllers pursuant to Art. 26 GDPR with regard to certain data processing activities (e.g., providing the Etsy platform and processing transactions). The respective responsibilities are governed by Etsy’s Terms of Use and Privacy Policy.
⸻

b) Print-on-Demand Provider

To manufacture and ship products, I work with Printify.

For order fulfillment, the following data is shared with Printify:
• Name
• Shipping address
• Ordered product details

Printify processes this data solely for order fulfillment purposes.

Data transfers to third countries (e.g., United States) may occur. Such transfers are based on appropriate safeguards pursuant to Art. 46 GDPR, in particular the EU Standard Contractual Clauses (SCCs) or, where applicable, participation in the EU-U.S. Data Privacy Framework.
⸻

c) Payment Processing

Payments are processed via Etsy Payments and its payment service providers. I do not receive full payment details such as credit card numbers.

⸻

d) Shipping Providers

Where necessary, your name and shipping address will be shared with the shipping company responsible for delivery.

⸻

e) Email Communication

Email communication is conducted via ProtonMail (Proton AG, Switzerland). Personal data may be processed on servers located in Switzerland. Switzerland is recognized by the European Commission as providing an adequate level of data protection pursuant to Art. 45 GDPR.

Personal data may also be transferred to countries outside the European Union where customers are located, insofar as this is necessary for contract fulfillment (Art. 6(1)(b) GDPR).

⸻

4. Your Rights Under the GDPR

You have the following rights:
• Right to withdraw consent at any time
• Right of access to your stored personal data
• Right to rectification of inaccurate data
• Right to erasure (unless legal retention obligations apply)
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Competent authority:

State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany

⸻

5. Right to Object

If processing is based on legitimate interests, you have the right to object.

To exercise this right, please contact:
Subko.designs@protonmail.com

⸻

6. Data Processing via Etsy Website

My shop is hosted on Etsy.

When visiting Etsy’s website, technical data (e.g., IP address, browser type, cookies) is processed by Etsy. I have no influence over this processing.

Etsy’s own Privacy Policy applies in this respect.

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.