This Privacy Policy describes how and when I collect, use, and share information when you purchase an item from me, contact me, or otherwise use my services through Etsy.com or its related websites and services.

What information I collect:
In order for me to process your order, you must provide me with certain information (which you have authorized Etsy to provide to me). This includes your name, email address, mailing address, payment information, and information about the product you are ordering. You also have the option to provide me with additional personal information (for example, for a jewelry customization) when you contact me directly.

Why I need your information and how I use it:
I refer to a number of legal bases to collect, use and share your information. To wit:
To the extent I need your information to provide my services, such as to process your order, resolve disputes, or provide customer support;
if you have given your express consent (which you can withdraw at any time), for example by signing up for my newsletter mailing list;
if it is necessary to comply with a legal obligation or court order, or in connection with legal claims, such as the need to retain information about your purchases due to tax legislation; and
Where necessary for purposes of my legitimate interests - unless those legitimate interests are overridden by your rights or interests - such as 1. to provide and improve my services. I use your information to provide the services you have requested from me and in my legitimate interests to improve my services; and 2. to comply with Etsy's Seller Policy and Terms of Use. I use your information as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.

Information Sharing and Disclosure:
Customer information is important to my business. I only release your personal information for specific reasons and under very specific circumstances, as follows:
Etsy. I share information with Etsy as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.
Service Providers: I engage certain trusted third-party service providers to perform tasks and provide services for my store, such as parcel delivery services. I share your personal information with these third-party service providers, but only to the extent necessary to perform those services.
Business Transfers: If I sell my business or merge with another, I may disclose your information as part of that transaction, to the extent permitted by law.
Compliance with Laws: I may collect, use, retain and disclose your information as I believe in good faith is reasonable and necessary to: a) respond to legal process or governmental requests; b) enforce my contracts, terms, conditions, and policies; c) prevent, investigate, and remedy fraud and other illegal activities, security or technical issues; or d) protect the rights, property, and safety of my customers or others.

Data Retention:
I retain your personal information only for as long as is necessary to provide you with my services and as described in my Privacy Policy. However, I may need to retain this information to comply with legal obligations and regulations, resolve disputes, and enforce my agreements. Generally, I retain your information for the following period: 2 years.

Transfer of personal data outside the EU:
I may store and process your information through third-party hosting services in the US and other countries. As a result, I may transfer your personal data to countries whose laws on data protection and regulatory oversight differ from the corresponding laws in your country. If I am likely to transfer information about you outside the EU, I rely on the EU-US Privacy Shield as the legal basis for the transfer because Google Cloud is certified under the EU-US Privacy Shield.

Your Rights:
If you reside in certain regions, including the EU, you have a number of rights with respect to your personal data. Some of these rights apply generally and others apply only in certain circumstances. These rights are described below:
Access: you may have the right to access and obtain a copy of the personal data I hold about you by writing to me using the contact information below.
Modification, Restriction, Deletion: You may also have the right to modify your personal information, restrict my use of it, or delete it. Except in exceptional circumstances (such as when I need to store data for legal reasons), I will generally delete your personal data upon request.
Objection: You may object to (1) me processing some of your data with respect to my legitimate interests and (2) you receiving marketing communications from me after you have expressly consented to it in advance. In such cases, I will delete your personal data unless I can demonstrate compelling legitimate grounds for its continued use or it is required for legal reasons.
Complaint: If you reside in the EU and wish to raise concerns about my use of your data - without prejudice to any other rights you may have - you are entitled to contact your local data protection authority with these concerns.

How to contact me:
For purposes of the EU General Data Protection Regulation, I, James-Philipp CHRISTOPH , am the data controller for your personal data. If you have any questions or concerns, you can contact me at james_christoph@hotmail.com. Alternatively, you can write to me at the following address:
James-Philipp CHRISTOPH
Aidenstrasse 11
8714 Leising/Kraubath on the Mur
Styria
Austria