Conform the New General Protection Regulation (AVG/GDPR) as a shopowner I am obliged to provide you as a customer insights regarding your data and how this data is being used once you make a transaction in my Etsy webshop. Please find the privacy policy below.

1. What data is collected?

In order to dispatch your order I need specific data from you, for which you gave Etsy permission to share this information with me. This data includes information such as your e-mail address, your postal address, payment information and details regarding your order. This information is vital in order to make sure your order is processed properly and is used for this reason only. You may choose to provide us with additional information via e-mail or private message.

2. Why is this necessary and how is your data used?

The collected data is used for necessary and legally binding requirements in order to fulfill your order, as well as for us to fulfill our duties and lawful obligations as a registered company in The Netherlands. This includes:
- Providing you with our promised services (e.g. shipping)
- If necessary, resolve disputes
- Providing you with customer service
- Comply to legal obligations as a company (e.g. tax registration)
- If necessary to comply to court order or other legal obligations
- Comply with the terms and conditions of Etsy as a seller/shop owner
- Comply to Etsy’s shop policy and user conditions

This means data is used for legitimate purposes that focus on providing and improving my services to you as a customer, which should not exceed your rights or interests. Thus, your information is being used to provide you with the by you requested services and include all corresponding obligations for me as a company and Etsy seller in order to legally meet and fulfill this customer request.

3. Is information being shared with third parties?

Data from customers is not being shared with third parties unless this is necessary to fulfill the service requested by the customer, or if this is necessary to comply to legal obligations as a company in the Netherlands. I only share information for limited reasons and specific situations such as:
- Etsy - If necessary I share information with Etsy to provide you with my services and to meet the obligations as established in the terms and conditions by Etsy.
- Shipping services - I share information with trustworthy and official postal services such as PostNL, Sandd or DHL in order to make sure your order is being shipped properly your way. Only if necessary your information is shared with service providers that are necessary in order to dispatch your order and meet your requests.
- Tax Authorities – If necessary your information is used for tax registration and to meet the requirements of being established as an official company in the Netherlands. I need to fulfill the duties as a company in order to provide you with the by you requested service.
- Legal and Juridical Obligations: If necessary your information could be collected and used in case this is lawfully necessary for situations such as: (a) to respond to juridical obligations or government requests (b) in compliance to agreements, set terms and policies (c) to prevent, investigate and deal with fraud or illegal activities (d) to protect the rights, safety and property of customers, myself or others.
- In case of selling my company or merging my business data could be part of this transaction, but only if this would be legally permitted.

4.How long is data stored?

I only store personal information for the duration necessary to provide you with my services as stated in my privacy and shop policy. Please note this duration is also depended on the consequential administrative and legal obligations for me as a registered company. Tax Authorities in the Netherlands legally oblige me to store basic administration for the duration of seven years (fiscal retention). If necessary, information could be stored in the case of resolving a dispute or in order to maintain established agreements.

5. Transmission of personal data outside the EU

I may store and manage your data through hosting services of thirds in the United States and other jurisdictions. As a result it could be that your data is transferred to a jurisdiction with different laws and regulations regarding data protection than yours. In case I am requested to transfer your data outside the EU, I trust in Privacy Shield as the legal basis for this transaction, seeing the fact that Google Drive is certified by Privacy Shield.

6. Your rights regarding your data

Your rights regarding your data are specific to the area you live in. In case you live in specific areas such as the EU you are entitled to certain rights regarding your personal data. While some of these rights are generally applicable, some of these rights apply to specific limited situations.

(a) Access to your data: You have the right to access your data and receive a copy of the personal information I have in my possession of you. You can contact me as described in part 7 of this privacy policy.
(b) Adjust, restrict or remove your data: You possibly might also have the right to adjust your personal information, restrict my usage of your information, or the right to remove this information. In case there are no exceptional circumstances (e.g. legal reasons or motivations to store your information) I will delete your personal information if requested by you.
(c) Objections: You may object (1) my way of processing parts of your information or you may object (2) receiving marketing messages after you provided me, or Etsy, with permission to receive such messages. In such instances I will remove your personal data unless I have legitimate reasons to continue using personal data or if juridical reasons force me to keep using data.
(d) Complaints: If you live inside the EU and you are worried about my usage of your personal and want to express these concerns, you have the right to address your complaints at your local authorities for data protection.

Please note that objections to specific ways of how I use your personal data or a request to delete personal data might result in me being unable to meet and fulfill your requested services as a customer. Depending on the specific demands you request regarding your data this might affect the transaction and possibility of this transaction of the provided service.

7. Contacting me

In compliance to the European law regarding data protection, I am -Erik Buikema- the manager of your personal information.

If you have any questions or concerns, you can send an email to e.l.buikema@gmail.com or send me a letter:

Erik Buikema
Rembrandt van Rijnstraat 123
9718 PK Groningen
The Netherlands