Privacy Policy

This privacy policy describes how and when I collect, use and share when you purchase a product from us, contact us or otherwise use our services via Etsy.com or its related sites and services. This Privacy Policy does not apply to third-party practices that I do not own or control, including Etsy or third-party services that you access through Etsy. In Etsy's Privacy Policy you can read more about how Etsy handles privacy.

1 Data that we collect
To be able to fulfill your order, you must submit certain information to us (you have given Etsy permission to provide it to us), such as your name, e-mail address, postal address, payment details and the details of the product you have ordered. If you contact us directly (for example if you place a custom order) you can also choose to give me additional personal information.

2 Why we need your data and how we use it
We rely on a number of legal bases to collect, use and share your data. We collect your data
... where necessary to provide our services, such as to be able to fulfill your order, settle disputes or provide customer service;
... only if you have given your express permission, which you can withdraw at any time;
... if necessary to comply with a legal obligation or court order or in connection with legal proceedings, such as keeping information about your purchases if required by tax law;
... if we need it for the purpose of my legitimate interests, but only if those legitimate interests are not overridden by your rights or interests, such as:
- delivering and improving our services (we use your data to provide the services you have requested and in my legitimate interest in improving our services)
- compliance with Etsy's Merchant Policy and the Terms of Use (we use your information if necessary to fulfill our obligations under Etsy's Merchant Policy and the Terms of Use).

3 Data exchange and disclosure
The details of my customers are important for our company. We only share your personal information for very limited reasons and in very specific situations, as follows:
- We share information with Etsy where necessary to provide you with my services and to fulfill my obligations as described in both Etsy's Seller Policy and Terms of Use.
- We engage certain trusted third parties to perform certain functions and deliver services to my shop, such as delivery personnel. We will share your personal information with these third parties, but only as far as necessary to provide these services.
- We can collect, use, store and share your information if we believe in good faith that this is reasonably necessary to / for:
(a) respond to a legal process or government requests;
(b) compliance with my agreements, conditions and policies;
(c) the prevention, investigation and handling of fraud and other illegal activities, security or technical problems;
(d) protect the rights, property and safety of my customers or others.

4 Data retention
We keep your personal information for as long as necessary to provide you with our products and as described in this Privacy Policy. In addition, we am obliged to keep this information in order to comply with our legal and regulatory obligations, resolve disputes and maintain my agreements. Generally we keep your data for 5 (five) years.

5 Transfer of personal data to a country outside the EU
We can store and process your data via third-party hosting services in the United States and other jurisdictions. As a result, we may transfer your personal information to a jurisdiction with a different data protection and government supervision law than yours. If we want to pass on your data to a country without an adequate level of protection, we can only do so if we meet the conditions as stated in article 77 of the Personal Data Protection Act (Wbp) or with a permit from the Minister of Justice and Security.

6 Your rights
If you live in certain areas, including the EU, you have a number of rights regarding your personal data. Although some of these rights are generally applicable, other rights relate to certain limited cases. I describe these rights below:
- Access: you may be entitled to access and receive a copy of the personal data that we hold about you. You can contact us via the details below.
- Modify, limit, delete: you may also have the right to change your personal details, to limit our use of them or to delete them. If there are no exceptional circumstances (such as that we have to store your details for legal reasons) we will usually delete your personal data on request.
- Objection: you can lodge an objection
(i) our processing of some of your data based on our legitimate interests and
(ii) receiving marketing messages after giving you explicit permission to receive them.
In such cases, we will delete your personal information, unless we have compelling and legitimate reasons to continue using that information or if this is necessary for legal reasons.
- Complaints: if you live in the EU and you want to express concern about our use of your data (and without prejudice to any other rights that you may have), you have the right to do so at your local data protection authority.

7 Contact me
In the context of the EU data protection legislation we are from VrijFormaat / Omniafausta, the data controller of your personal data. If you have questions or concerns about that management, you can contact us at hallo@vrijformaat.nl.