WorryCharm

PRIVACY POLICY

1. DATA CONTROLLER

The person responsible for processing personal data in connection with orders placed through the Etsy shop “WorryCharm” is:

Timo Daniel Mayer
c/o Online-Impressum #8756
Europaring 90
53757 St. Augustin
Germany
[contact@worrycharm.com](mailto:contact@worrycharm.com)

2. PERSONAL DATA I PROCESS

To process an order, I receive the personal data required for this purpose from Etsy. This may include, in particular:

• Name
• Shipping and billing address
• Email address
• Details of the order and the items purchased
• Information voluntarily provided by buyers when communicating through Etsy

Payments are processed by Etsy or the payment service providers used by Etsy. I do not receive complete credit card details or any other complete payment information.

3. PURPOSES AND LEGAL BASES FOR PROCESSING

I process personal data only to the extent necessary:

• to process and fulfil orders;
• to deliver the ordered goods;
• to communicate with buyers;
• to handle returns, complaints or other customer enquiries;
• to comply with legal, tax and accounting obligations; and
• where applicable, to protect legitimate interests, such as establishing, exercising or defending legal claims.

The processing is carried out, in particular, on the basis of Article 6(1)(b) GDPR for the performance of a contract, Article 6(1)(c) GDPR for compliance with legal obligations and, where necessary, Article 6(1)(f) GDPR on the basis of legitimate interests.

4. SHARING OF PERSONAL DATA

Personal data is shared only where necessary to process an order or comply with legal obligations.

Recipients may include, in particular:

ETSY

I share information with Etsy where necessary to use the Etsy platform, process orders or comply with Etsy’s policies.

SHIPPING PROVIDERS

To ship an order, the necessary information, particularly the buyer’s name and shipping address, is provided to the shipping service provider used for the order.

SERVICE PROVIDERS

If I use external service providers to support my shop, they receive personal data only to the extent necessary and in accordance with applicable data protection laws.

PUBLIC AUTHORITIES AND LEGAL OBLIGATIONS

Personal data may be disclosed where I am legally required to do so or where disclosure is necessary to establish, exercise or defend legal claims.

I do not sell or rent buyers’ personal data, nor do I use personal data received through Etsy to send unsolicited advertising messages.

5. DATA RETENTION

Personal data is retained only for as long as necessary to process an order, communicate with customers and fulfil the contract.

Data may be retained for a longer period where required by statutory commercial, tax or other retention obligations, or where necessary to establish or defend legal claims.

Once the relevant purpose no longer applies and the statutory retention periods have expired, the data will be deleted unless there is another legal basis for its continued retention.

6. RIGHTS OF DATA SUBJECTS

Subject to the applicable legal requirements, buyers have the right, in particular:

• to request access to the personal data stored about them;
• to request the correction of inaccurate data;
• to request the deletion of their data;
• to request the restriction of processing;
• to object to the processing of their data; and
• to request the provision or transfer of their data, where the applicable legal requirements are met.

To exercise these rights, buyers may contact me using the email address provided above.

Data subjects also have the right to lodge a complaint with a competent data protection supervisory authority.

7. ETSY

Etsy’s own privacy policy also applies to data processing carried out directly by Etsy. Etsy processes personal data in connection with the use of its platform under its own responsibility and in accordance with its applicable privacy policy.

8. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated if legal requirements, the operation of the Etsy shop or the services used change.