Privacy Policy (Other)

Privacy information

1. Declaration on the use of personal data and contact details of the person responsible.
2. Contact data recording
3. Processing of data for order processing
4. Rights of those affected
5. Duration of storage of personal data
6. Reference to the privacy policy Etsy

1. Declaration on the use of personal data and contact details of the person responsible
1.1 Here you will find important information about the handling of your personal data when using our website. This is all the data that allows you to be personally identified.
1.2 Responsible for the data processing within the meaning of the General Data Protection Regulation (DSGVO) is Andrea Schöps, Langster Str. 21a, 40668 Meerbusch, Germany, Tel. 0172-2687162, E-Mail tiluly@gmx.de.
The person responsible for the processing of personal data is the natural or legal person who, alone or in concert with others, decides on the means and the purpose of the processing of personal data.

2. Contact data recording
When contacting us (via e-mail or contact form), personal data will be collected. Which these are, you can see from the contact form. The data will be used and stored by us solely for the purpose of answering your request or for contacting us and the associated administrations. We rely on Art. 6 (1) lit.f DSGVO to be able to answer your request by processing the data. If a purchase contract is concluded, we point out, in addition to the processing, on Art. 6 para. 1 lit.b DSGVO. After completion of the processing, your data will be deleted, provided that there are no legal storage requirements.

3. Processing of the data for order processing
3.1 For the purpose of processing your order, we work together with the shipping companies who assist us in the execution. Certain personal data is transmitted to the shipping company.
3.2 Insofar as this is necessary for the delivery of the goods, the personal data collected by us will be transmitted to the shipping company, which was commissioned with the delivery by us. If it is necessary for a payment transaction, your payment data will be forwarded to the commissioned bank as part of the payment process. When transferring the data, we refer to Art. 6 (1) (b) DSGVO.
3.3 For the purpose of payment processing, we will pass on your payment data to MANGOPAY S.A., 59 Boulevard Royal, L-2449 Luxembourg, by "Sofort Transfer", "Credit Card (MasterCard / Visa)" or "Paypal". This is only to the extent that this is necessary for the settlement of payments and takes place in accordance with Art. 6 para. 1 lit. b DSGVO. The privacy policy of MANGOPAY can be found at https://www.mangopay.com/terms/dawanda/Privacy_Policy-EN.pdf. read.
3.4 To tick the payment, we give your payment data by direct debit or credit card via PayPal, to the PayPal (Europe) S.a.r.l. Et Cie S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter PayPal). This is only to the extent that this is necessary for the settlement of payments and takes place in accordance with Art. 6 para. 1 lit. b DSGVO.

4. Rights of those affected
4.1 With regard to the processing of your personal data, the applicable data protection law grants you data subject rights (information and intervention rights) to the person responsible.
Right to information Art. 15 GDPR:
Right to information about the personal data
planned storage duration (criteria for determining storage duration)
the processing purpose
Categories of processed personal data
Insist on the right of rectification
Deletion of the data
Recipients or categories of recipients to whom your data has been disclosed
Restriction of processing
Complaint to the supervisory authority
Opposition to the processing
Origin of your data, if they were not collected from us
Right to information regarding guarantees for forwarding data to third countries Art. 46 GDPR
Automated decision making including profiling and meaningful information about the logic involved and the scope of the intended impact of this processing
Right of rectification Art. 16 GDPR
Your data stored with us, which are incorrect and / or incomplete, must be corrected by us immediately.
Deletion of data Art. 17 GDPR
Your personal data must be deleted by us immediately upon presentation of the requirements of Art. 17 para. 1 DSGVO. The exception to this is where the data are required to exercise, assert or defend legal rights and are required in the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public law.
Restriction of processing Art. 18 GDPR
You may request restriction of your personal data if you refuse to delete your data due to inadmissible data processing. In addition, as long as the accuracy of the information you have disputed is verified, or you need your information to assert, exercise, or defend your rights, and we no longer need that information for purposes of ours. Similarly, if you have filed an objection based on your personal situation and it is not yet clear whether our legitimate reasons prevail.
Information Art. 19 GDPR
In the event of cancellation, rectification or restriction, the controller is obliged to notify all recipients to whom your personal data have been disclosed of their deletion, rectification or restriction. This does not apply if this is impossible or involves a disproportionate effort. You can be informed about these recipients.
Data transferability Art. 20 DSGVO
Your personal data provided by us may be requested for inspection at any time in a standard, machine-readable format, as far as this is technically feasible.
Revocation of granted consent Art. 7 para. 3 DSGVO
Once consent has been granted to the processing of data, it may be revoked at any time with future effect. In this case, the data will be deleted by us immediately. The exception to this is that the data for further processing can not be based on a legal basis for consentless processing. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation of the consent.
Complaint Art. 77 GDPR
You have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR, especially in the Member State of your whereabouts, the place or your place of work of the alleged infringement. Notwithstanding a judicial or other administrative remedy.
4.2 Right of objection
In the processing of your personal data in the context of a balance of interests, due to our predominant legitimate interest, you have at any time the opportunity to appeal against the future, with effect on the future. In this case we stop the processing of the data concerned. Further processing of the data is only possible if we can provide compelling, legitimate reasons for the processing. Similarly, if the processing is for the defense or exercise of legal rights. In direct mail, you have the right to object at any time to the processing of your personal data. The processing of data for direct marketing purposes will be terminated in the event of an objection. The contradiction can, as described above, be inserted.

5. Duration of storage of personal data
Personal data is stored for as long as required by the respective legal retention period (for example, tax and commercial retention periods). The data will be routinely deleted after the expiry of this period, provided that we have no legitimate interest in a re-storage and / or they are no longer required for contract initiation or fulfillment.

6. Reference to the privacy policy Etsy
The Etsy platform is responsible for all other data processing that goes beyond the data processing stored here. All privacy information about Etsy can be found in the Etsy Privacy Policy https://www.etsy.com/en/legal/privacy/?ref=ftr