/ What information I collect

In order for me to process your order, you must provide me with certain information (which you have authorized Etsy to provide to me). This includes your name, email address, postal address, payment information and details of the product you are ordering. You also have the option to provide me with additional personal information (for example for personalization) if you contact me directly.

If you order personalization and send me photos for this purpose, I will use them within the scope of what is necessary to provide the service (e.g. for portraiture or motif adjustment).
As an artist, I of course like to use a great motif as a reference to give other buyers a better picture of the possibilities. If you do not want it to be used as a reference (I will explicitly point this out to you in case the worst comes to the worst), then please let me know.

// Why I need your information and how I use it

I refer to a number of legal bases to collect, use and share your information. Namely:

- to the extent that I need your information to provide my services, for example to process your order, resolve disputes or provide customer support;

- if you have given your express consent (which you can revoke at any time), for example by subscribing to my newsletter distribution list;

- when necessary to comply with a legal obligation or court order, or in connection with legal claims, such as the need to retain information about your purchases for tax purposes; and

- to the extent necessary for the purposes of my legitimate interests - provided these legitimate interests are not overridden by your rights or interests - for example

1. to provide and improve my services.
I use your information to provide the services you have requested from me and in my legitimate interest to improve my services; and

2. to comply with Etsy's Seller Policy and Terms of Service. I will use your information as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.

Sharing and Disclosure of Information

Customer data is important to my business. I only release your personal information for specific reasons and under specific circumstances, as follows:

Etsy:
I share information with Etsy as necessary to fulfill my obligations under Etsy's Seller Policy and Terms of Use.

Service provider:
I engage certain trusted third parties to perform tasks and provide services for my shop, such as parcel services. I share your personal information with these third parties, but only to the extent necessary to perform those services.

Business transfers:
If I sell my company or merge with another, I may disclose your information as part of that transaction to the extent permitted by law.
Compliance with Law: I may collect, use, retain and disclose your information if I believe in good faith that doing so is appropriate and necessary to:
a) to respond to legal process or governmental requests;
b) enforce my contracts, terms and policies;
c) prevent, investigate and resolve fraud and other unlawful acts, security or technical problems or
d) protect the rights, prope// Data retention

I will only retain your personal information for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may need to retain this information to comply with legal obligations and regulations, resolve disputes and enforce my agreements. In general, I keep your data for the following period: 4 years.

An exception to this are portraits that I make from your photo. Since as an artist I rely on references to show other interested parties the design options, I keep them indefinitely and use them to advertise the corresponding service if necessary. If you do not agree to reference use or would like your personal data to be deleted, please send me an email.

// Transfer of personal data to countries outside the EU

I may store and process your information through third party hosting services in the United States and other countries. Therefore, I may transfer your personal data to countries whose data protection and government surveillance laws differ from the corresponding laws in your country. If I am expected to transfer information about you outside the EU, I will rely on the EU-US Privacy Shield as the legal basis for the transfer because Google Cloud is EU-US Privacy Shield certified.

// Your rights

If you live in certain regions, including the EU, you have a number of rights regarding your personal data. Some of these rights apply generally and others apply only in specific cases. These rights are described below:rty and safety of my customers or others.

Access:

You may have the right to access and obtain a copy of the personal information I hold about you by writing to me using the contact information below.

Change, restriction, deletion:

You may also have the right to change your personal information, limit my use of that information, or delete it. Except in exceptional circumstances (such as if I need to retain data for legal reasons), I will generally delete your personal data upon request.

Contradiction:

You can object to that

1. that I process some of your data with regard to my legitimate interests and
2. that you will receive marketing messages from me after you have previously expressly agreed to this.
In such cases, I will delete your personal data unless I can demonstrate convincing legitimate reasons for its continued use or if it is necessary for legal reasons.

Complaint:
If you live in the EU and would like to raise concerns about my use of your data - without prejudice to any other rights you may have - you have the right to contact your local data protection authority to address these concerns.

// This is how you contact me:

For the purposes of the EU General Data Protection Regulation, I, Anne Dietrich, am the data controller of your personal data. If you have any questions or concerns, you can contact me at datenschutz@hatgirl.de. Alternatively, you can write to me at the following address:

Anne Dietrich, Holunderweg 6, 01099 Dresden