Privacy Policy (Other)
1) Information on the collection of personal data and contact details of the responsible party
1.1 We are pleased that you are visiting our Etsy page (hereinafter "Website") and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The person responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is Christine Hüsch Grafikdesign (Shop: Flairhead Creative Content), Birkenhof 1, 24944 Flensburg, Germany, Tel.: 0491632526476, Email: flairheadcc@posteo.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Contacting us
In the course of contacting us (e.g., via contact form or email), personal data is collected. You can see which data is collected from the contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request according to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, then additional legal basis for the processing is Art. 6 Abs. 1 lit. b GDPR. Your data will be deleted after final processing of your request, this is the case if it can be inferred from the circumstances that the relevant matter has been finally clarified and provided that there are no legal storage obligations.
3) Data processing for order processing
3.1 Insofar as necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided when ordering (name, address, email address) to inform you personally about upcoming updates within the legally prescribed period via suitable communication means (such as by mail or email) according to Art. 6 Para. 1 lit. c GDPR. Your contact details are used strictly for the purpose of notifications about updates owed by us and are processed by us only to the extent necessary for the respective information.
For the processing of your order, we also work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data is transmitted to these service providers according to the following information.
3.2 When using the payment method Etsy Payments, the payment processing is carried out via Etsy Ireland UC, 66/67 Great Strand Street, Dublin 1, Ireland (hereinafter: Etsy UC), unless the payment is made in the currencies US dollar or Canadian dollar. In this case, the payment processing is carried out by Etsy Inc., 117 Adams Street, Brooklyn, NY 11201, United States of America (hereinafter: Etsy Inc.). The transfer is made according to Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
For further privacy information, please refer to the privacy policy of Etsy: etsy.com/de/legal/privacy/
4) Rights of the data subject
4.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:
Right of access according to Art. 15 GDPR: You have the right to request information about your personal data processed by us, the purposes of processing, the categories of processed personal data, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, limitation of processing, objection to processing, complaint to a supervisory authority, the source of your data if it was not collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the involved logic and the scope and intended effects of such processing, as well as your right to be informed of the guarantees according to Art. 46 GDPR when your data is transferred to third countries;
Right to correction according to Art. 16 GDPR: You have a right to immediate correction of data concerning you that is incorrect and/or completion of your incomplete data stored with us;
Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right of free expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising, or defending legal claims;
Right to restriction of processing according to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the correctness of your data disputed by you is being checked, if you refuse the deletion of your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data for asserting, exercising or defending legal claims after we no longer need this data after achieving the purpose, or if you have lodged an objection for reasons of your special situation, as long as it has not yet been determined whether our legitimate reasons prevail;
Right to be informed according to Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you was disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transmission to another controller, as far as this is technically feasible;
Right to revoke granted consents according to Art. 7 Para. 3 GDPR: You have the right to revoke once given consent to the processing of data at any time with effect for the future. In the case of revocation, we will delete the affected data immediately, unless further processing can be based on a legal basis for processing without consent. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation;
Right to complain according to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your workplace or the place of the suspected violation, without prejudice to any other administrative or judicial remedy.
4.2 RIGHT TO OBJECT
IF, IN THE CONTEXT OF A BALANCE OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT
FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.
5) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and - if relevant - additionally by the respective legal retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of explicit consent according to Art. 6 Para. 1 lit. a GDPR, this data is stored until you revoke your consent.
If there are statutory retention periods for data that are processed within the framework of legal or legal-like obligations based on Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the retention periods expire, provided they are no longer necessary for the fulfillment or initiation of the contract and/or there is no continued legitimate interest in their further storage.
When processing personal data based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right of objection according to Art. 21 Para. 1 GDPR, unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
When processing personal data for the purpose of direct advertising based on Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right of objection according to Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
6) Note on the Etsy Privacy Policy
For all other data processing that goes beyond the data processing described above, the platform Etsy is responsible. Further information on Etsy's data protection can be found in the data protection notices of Etsy: etsy.com/de/legal/privacy/?ref=ftr
7) Tools and Miscellaneous
- Debitoor
For accounting purposes, we use the service of the cloud-based accounting software of the following provider: Debitoor GmbH, Grunerstr. 13, 10179 Berlin, Germany
The provider processes incoming and outgoing invoices as well as possibly the bank transactions of our company to automatically capture invoices, match them to transactions, and create the financial accounting from this in a partially automated process.
Insofar as personal data is also processed here, the processing is carried out according to Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in efficient organization and documentation of our business transactions.
