Privacy Policy
(1) In the following notice I'll inform you about the type, scope and purpose of the processing of your personal data when using my Etsy shop. "Personal data" is all information that relates to an identified or identifiable natural person.
(2) The Data Protection Officer, as defined by the EU General Data Protection Regulation (GDPR), is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. The Data Protection Officer of this Etsy shop is: Constanze Moll, Sigweinweg 6/9, 6060 Hall in Tirol, Austria, email hello (-at-) constanzemoll.com (hereinafter "I"). In addition, the data protection guideline of Etsy (Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland), available at www.etsy.com/de/legal/privacy, as well as the information from Etsy about cookies and similar technologies, available at www.etsy.com/de/legal/cookies-and-tracking-technologies , also apply.
(3) If you conclude a contract with me via Etsy, Etsy will send me your Etsy username (unless you're buying as a "guest"), your name and the billing address stored in your Etsy user account or entered by you in the course of the conclusion of the contract. If you have given further data in the context of your order (e.g. a different delivery address or a telephone number), these will also be sent to me.
(4) I process the data mentioned in paragraph 3 electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, booking payments and processing returns and complaints. This data processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR. I keep this data stored until all mutual claims from the respective contractual relationship with you have been completely settled and the commercial and tax retention periods to which I am subject have expired.
(5) In order to conclude a contract between you and me, it is necessary that I receive your name and a delivery address. The necessity of providing this data results from the Etsy terms and conditions as well as from legal regulations (e.g. § 11 Paragraph 1 UStG). Without providing this data, you cannot conclude a contract with me.
(6) If I send physical goods on the basis of the sales contract, I will transmit the name and address of the recipient and, if you have consented, your email address to Austrian Post (Österreichische Post AG, Company Headquarters, Rochusplatz 1, 1030 Vienna, Austria) as a shipping service provider, specifically for the purpose of delivering the shipment, possibly including a prior e-mail notification about the expected delivery time, and for the purpose of a possible return of your shipment to me on the basis of Article 6 Paragraph 1 Letter b GDPR.
(7) To pay for a purchase, the payment service provider you have chosen collects and processes your name, your card or account number and / or other data required for the respective payment method on your behalf. In this respect, the data protection provisions of the selected payment service provider apply and, if the recipient of the payment is Etsy, the data protection guidelines of Etsy.
(8) According to § 18 Paragraph 11 UStG, electronic interfaces are obliged to record the place of dispatch and destination of a delivery as well as the time and amount of the turnover and to inform the tax authorities upon request. Therefore, these details of a delivery that you have ordered can be transmitted to the tax authorities in accordance with Article 6 Paragraph 1 Letter c GDPR.
(9) If you send me a message via "Ask a question", "Ask about a custom-made product", or a similar function on the Etsy platform, Etsy will send me your Etsy username, or -- if you do not have an Etsy username -- an individual identification number along with your message (legal basis: Article 6 Paragraph 1 Letter a GDPR). If you send me a message by e-mail, I will save your message with the sender data (name, e-mail address) in order to answer it and also to be able to respond to any subsequent questions from you (legal basis: Article 6 Paragraph 1 Letter f GDPR). For receiving, storing and sending e-mails, I use an e-mail provider who acts for me as a processor in accordance with Article 28 GDPR. I will delete the data collected with your message no later than six months after the last communication with you about your request, subject to the regulation in the following paragraph.
(10) If you send me a legally relevant declaration regarding the contractual relationship (e.g. a withdrawal or a complaint), the legal basis for processing it, regardless of the transmission method, is also Article 6 paragraph 1 letter b GDPR. In such a case, I will delete the data related to your declaration as soon as all mutual claims from the contractual relationship have been settled and the commercial and tax retention periods have expired.
(11) Social media buttons may be displayed on the Etsy website; they can be recognized by the logos of the social media platforms (hereinafter “platforms”) (Facebook: blue “f”, Pinterest: red “p”, Twitter: blue bird silhouette). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling device and the address of the page on which the link is found (“referrer”) is transmitted to the respective platform in the USA. However, no data is collected or processed by myself in connection with the social media buttons.
(12) Etsy uses various cookies. Cookies are small text files that are stored on your device when you visit the Etsy website. They allow Etsy and certain service providers used by Etsy to recognize your device the next time you visit. How these cookies work and what purposes they serve in detail, Etsy explains at www.etsy.com/legal/cookies-and-tracking-technologies . You can manage the way Etsy uses cookies via the link "Privacy Settings", which you can find at the bottom of every Etsy page. I -- as the provider of the individual Etsy shop constanzemon -- have no access to the cookies and also not to the data associated with them.
(13) I do not use automated decision-making or profiling.
(14) With regard to the personal data that I process about you, you have the following rights:
a) You have the right to request confirmation from me as to whether I am processing personal data relating to you. If this is the case, I will inform you of the personal data stored about you and the further information in accordance with Article 15 Paragraph 1 and 2 GDPR.
b) You have the right to have any incorrect personal data concerning you corrected immediately. Taking into account the purposes of your data being processed, you also have the right to request the completion of incomplete personal data -- including by means of a supplementary declaration.
c) You can request the immediate deletion of your personal data under the conditions of Article 17 Paragraph 1 GDPR, as long as its processing is not required in accordance with Article 17 Paragraph 3 GDPR.
d) You can ask me to restrict the processing of your data if one of the requirements of Article 18 Paragraph 1 GDPR is met. In particular, you can request the restriction instead of a deletion.
e) I will inform all recipients to whom I have disclosed personal data relating to you of any correction or deletion of your personal data and restriction of processing, unless this proves impossible or involves a disproportionate effort. I will also inform you about these recipients if you request this.
f) You have the right to receive the personal data that you have provided to me in a structured, commonly used and machine-readable format, and you can request that I transmit this data to another person responsible without hindrance, as far as this is technically possible.
g) If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the data processing that took place up until your withdrawal.
(15) RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNING YOU. This right to object exists in relation to data processing that takes place on the basis of Article 6 Paragraph 1 Letter f GDPR to safeguard legitimate interests on my part or a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail.
If you exercise your right to object, I will no longer process the data concerned, unless I can prove compelling, legitimate reasons for the processing that outweigh your interests, rights and freedoms, or I can prove that the processing serves the assertion, exercise or defense of legal claims.
(16) IN THE EVENT THAT I USE PERSONAL DATA FOR DIRECT ADVERTISING (E.G. A NEWSLETTER), YOU CAN AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING, WITH THE RESULT THAT I NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES.
(17) If you are of the opinion that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work, or the place of the alleged violation. This does not exclude other administrative or judicial remedies.
Mascarpone making sure all my work is up to par.