The information I collect

To process your order, you must provide me with certain information (which you have authorized Etsy to send to me), including your name, email, mailing address, payment details

Why do I need your information and how I use it

I rely on a number of legal bases to collect, use and share your information, including:

- to provide you with my services, for example when I use your information to process your order, resolve a dispute or provide customer service;
- when you have given me your explicit consent, which you can revoke at any time, for example by subscribing to my newsletter;
- if necessary, to meet a legal obligation, a legal judgment or in connection with a legal request such as for example the fact of keeping information concerning your purchases within the framework of the tax legislation; and
- if necessary, to serve my legitimate interests, in the event that those legitimate interests are not invalidated by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you have requested from me and in my legitimate interest to improve those services; and 2) compliance with Etsy's Seller Rules and Terms of Service. I use your information, as necessary, to comply with my obligations under the Seller Rules and Etsy's Terms of Service.

Sharing and disseminating information

Information about my customers is important to my business. I only share your personal information for a very limited number of reasons, as well as in a limited number of circumstances such as:

- Etsy. I share your information with Etsy when necessary to provide my services to you and to comply with my obligations under Etsy's Seller Rules and Terms of Service.
- Service providers. I use certain third parties that I trust to perform certain actions or provide certain services for my store - shipping companies for example. I may have to share your personal information with these third parties, but only that which is essential for the performance of these services.
- Activity transfers. If I sell my business or merge it with another, I may have to disclose your information in connection with this transaction but only to the extent permitted by law.
- Respect for the law. I may have to collect, use, retain and share your information if I believe in good faith that it is necessary and reasonable to: (a) respond to a legal process or state request; (b) enforce my agreements, conditions or regulations; (c) prevent, investigate or manage any fraud or other illegal activity, or any technical or security problem; or (d) protect the rights, property and safety of my customers or others.

Data retention

I keep your information only as long as necessary to provide you with my services and for the purposes set out in my privacy policies. I may also need to keep this information to comply with legislative and legal obligations, resolve disputes and enforce my commitments. I generally keep them for a period of: 4 years.

Transfers of personal information outside the EU

I may potentially store and process your information through third party hosts located in the United States or other countries. It may therefore happen that I transfer your personal information to a jurisdiction where the legislation regarding data protection and government surveillance is different from that of your country. If I have to transfer your personal information outside of the European Union, I rely on the Privacy Shield as the legal basis for this, Google Cloud having the Privacy Shield certification.

Your rights

If you are a resident of certain territories, and in particular of the European Union, you have certain rights relating to your personal information. Some of these rights apply generally, and others only in limited cases. These rights are described below:

- To access. You may have the right to access the personal information that I hold about you and to receive a copy of it by contacting me. You will find my contact details below.
- Modify, restrict, delete. You may also have the right to modify your personal information, restrict my use of it, or delete it. Except in exceptional circumstances (if for example I had to keep data related to my store for legal reasons), I will generally delete your personal information on request.
- To oppose. You can object 1) to my processing some of your information in the context of my legitimate interests and 2) to receiving marketing messages from me after having explicitly consented to receive them. In these specific cases, I will delete your personal information unless I have legitimate reasons for continuing to use it, or in cases where it is necessary for legal reasons.
- To complain. If you are from the European Union and would like to raise a concern about my use of your information (and without infringing any other rights you may have), you can do so with your local data protection authorities.

How to contact me

For the purposes of European data protection law, I, the undersigned, Kinga Suszka Aouizerat, am the data controller with respect to your personal information. For any questions or concerns, you can contact me on my email kaouizerat@gmail.com. You can also send me a mail to the address:

INOUI
Kinga Suszka Aouizerat,
1 rue henri germain, 06110
Le Cannet- France