Privacy Policy (Other)
This Privacy Policy describes how and when we collect, use, and share information when you purchase an item from us, contact us, or otherwise engage in our services through Etsy.com or its related sites and services.

This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Etsy or any third party services that you access through Etsy. To learn more about Etsy's privacy practices, see Etsy's Privacy Policy.

1. What information we collect

In order for us to process your order, you must provide us with certain information (which you have authorized Etsy to provide to us). This includes your name, email address, postal address, payment information and details of the product you are ordering. You also have the option to provide us with additional personal information (e.g. for a custom order) if you contact us directly.

2. Why we need your information and how we use it

We rely on a number of legal bases to collect, use and share your information. In fact:

where we need your information to provide my services, for example to process your order, resolve disputes, or provide customer support;
if you have given your express consent (which you can revoke at any time), for example by registering for our newsletter mailing list;
when necessary to comply with a legal obligation or court order, or in connection with a legal claim, such as retaining information about your purchases for tax purposes; and
as necessary for the purposes of our legitimate interests - provided these legitimate interests are not overridden by your rights or interests - such as 1. to provide and improve our services. We use your information to provide the services you have requested from us and in our legitimate interests to improve our services; and 2. to comply with Etsy's Seller Policy and Terms of Use. We use your information as necessary to fulfill our obligations under Etsy's Seller Policy and Terms of Service.

3. Sharing and Disclosure of Information

Customer data is important to our business. We only release your personal information for specific reasons and under very specific circumstances, as follows:

Etsy: We share information with Etsy as necessary to fulfill our obligations under Etsy's Seller Policy and Terms of Service.
Service Providers: We engage certain trusted third-party service providers to perform tasks and provide services for our store, such as parcel services. We share your personal information with these third parties, but only to the extent necessary to perform those services.
Business Transfers: If we sell our business or merge with another, we may disclose your information as part of that transaction, to the extent permitted by law.
Compliance with Laws: We may collect, use, retain and disclose your information when we have a good faith belief that doing so is reasonable and necessary to: a) respond to legal process or governmental requests; b) enforce our contracts, terms and policies; c) prevent, investigate and correct fraud and other illegal activities, security or technical problems; or d) protect the rights, property and safety of our customers or others.

4. Data Retention

We store your personal information only for as long as is necessary to provide you with our services and as described in our Privacy Policy. However, we may need to retain this information in order to comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. In general, we keep your data for the following period: 4 years.

5. Transfer of personal data to countries outside the EU

We may store and process your information through third party hosting services in the United States and other countries. As a result, we may transfer your personal information to countries that have data protection and regulatory surveillance laws that differ from the relevant laws in your country. Where information about you is deemed to be transferred outside of the EU, we rely on the EU-US Privacy Shield as the legal basis for the transfer because Google Cloud is EU-US Privacy Shield certified.

6. Your Rights

If you reside in certain regions, including the EU, you have a number of rights in relation to your personal information. Some of these rights are general and others are specific. These rights are described below:

Access: You may have the right to access and receive a copy of the personal information we hold about you by writing to us using the contact information below.
Modification, Restriction, Deletion: You may also have the right to modify your personal information, restrict our use of that information, or delete it. Except in exceptional circumstances (e.g. where we need to keep data for legal reasons), we will generally delete your personal data upon request.
Objection: You can object to 1. that we process some of your data in relation to our legitimate interests and 2. that you receive marketing messages from us after you have previously expressly consented to this. In such cases, we will delete your personal data unless we can demonstrate compelling legitimate grounds for its continued use or it is required for legal reasons.
Complaint: If you reside in the EU and wish to raise a concern about my use of your information - without prejudice to any other rights you may have - you have the right to raise these concerns with your local data protection authority.

For the purposes of the EU General Data Protection Regulation, we, Mashrapur, represented by the founder, Stefan Ille, are the data controller of your personal data.
If you have any questions or concerns, you can contact us at info[at]mashrapur.com.
Alternatively, you can write to us at the following address:
Mashrapur
Owner: Stefan Ille
Hauptstr. 20
18586 Mönchgut