Data protection.

The person responsible for data processing is:
SKAMA Katarzyna Kulikowska
Polna 6, 59-222 Milkowice
tech@skama.pl

Thank you for your interest in our Etsy store. Protection of your privacy is very important to us. Below you will find details of how we treat your data.

1. Access data and hosting
You can visit our website without providing any information about you. Upon any website access request, the WWW server only saves automatically the so-called “server log file”, i.e. it contains e.g. name of the requested file, your IP address, date and time of request, quantity of data sent and the calling provider (access data), and documents the request.
Such access data are saved for the sole purpose of ensuring seamless functioning of the website and improving our offer in accordance with Article 6.1.1 of the GDPR. Any access data will be removed not later than within seven days from the end of the visit on the website.

2. Gathering and use of data for the purpose of performance of a contract, establishment of contact.
Your personal data are collected via the Etsy website or directly by us if you provide them as part of your order or contact us (e.g. by via form or e-mail). Both Etsy and us act as the controller. Any data gathered via the Etsy website are processed on Etsy servers in accordance with Article 6.1.1 of the GDPR for the purpose of performance of a contract.
Mandatory fields are marked as such because we need those data for executing your order or for contacting you in connection with your order.
You can see what data are gathered in relevant entry forms. We use data provided by you in accordance with Article 6.1.1 of the GDPR in respect of processing of contracts and queries. Once the contract has been fully processed, further processing of your data will be restricted and your data will be removed after expiration of storage periods in accordance with tax and commercial laws, unless you expressed your consent to further processing or we reserve the right to any other use of data which is legally permissible.

3. Data transfer
For the purpose of performance of a contract in accordance with Article 6.1.1 of the GDPR, we provide your data to the courier company commissioned to make the delivery, if necessary for delivering the ordered goods. Depending on the payment service provider you choose in the ordering process, we will provide payment data collected for the purpose of making the payment to the financial institution commissioned to make the payment and, when appropriate, to the payment service provider whose services we use or to the selected payment service. In some cases, selected payment service providers also collect such data on their own, if you open an account with them. In such case, you must log in to the payment service provider and enter your access data during order placement. In this respect, the relevant payment service provider’s data protection statement applies.

Provision of data to delivery drivers.
If you gave your express consent during or after order placement, we will provide your e-mail address and telephone number to the selected delivery service provider so that they can contact you before delivery to inform you about delivery or coordinate it.

Consent may be withdrawn at any time by sending a message to us or directly to the delivery service provider to the contact address stated below. Once consent has been withdrawn, we will remove the data provided by you, unless you gave your express consent to further use of your data. We reserve the right to use data for purposes permitted by law.

General Logistics Systems Poland Sp. z o.o.
Teczowa 10, 62-052 Komorniki, Gluchowo, Poland

TNT/FedEx Express International B.V.
Taurusavenue 111, 2132, LS Hoofddorp, Netherlands

DHL Paket GmbH
Sträßchensweg 10, 53225 Bonn, Germany

UPS
55 Glenlake Parkway, NE, 30328 Atlanta, GA, United States

4. Use of data for making payments
If you decided to make a purchase, it is necessary for entering into a contract to provide personal details necessary for the purchase and for verifying identity and payment capability in accordance with Article 6.1.1 of the GDPR. Data such as name and surname, address, date of birth and account details will be sent to EtsyPayments. Such data are transferred so that EtsyPayments may process your purchase and verify identity and payment capability. Detailed information about that and used payment agencies may be found in information about data protection at EtsyPayments. You can express your opinion by contacting EtsyPayments, and challenge the decision.

5. Contact options and your rights
As the data subject, you have the following rights:
• In accordance with Article 15 of the GDPR – the right to request information about personal data processed by us within the scope stated therein;
• In accordance with Article 16 of the GDPR – the right to immediately request rectification of inaccurate personal data or to have personal data stored by us completed;
• In accordance with Article 17 of the GDPR – the right to request erasure of personal data stored by us, unless further processing is required for reasons of public interests, legal obligation or for the establishment, exercise or defence of legal claims;
• In accordance with Article 18 of the GDPR – the right to request restriction of personal data processing;
• In accordance with Article 20 of the GDPR – the right to receive your personal data provided to us by you, in a structured, commonly used and machine-readable format or request their transmission to another authorised person;
• In accordance with Article 77 of the GDPR – the right to lodge a complaint with a supervisory authority.

If you have any questions relating to gathering, processing or use of your personal data, information, rectification, restriction or erasure of data, withdrawal of consent or objection as to specific use of data, please contact us directly using our contact details.

Right to object
If we process personal data for the purpose of protecting our legitimate interests that are overriding in the context of weighting of interests, you can object to such processing with effect for the future. If data are processed for direct marketing purposes, you can exercise that right at any time, as described above.

Once you have exercised your right to object, we will no longer process your personal data, unless we are able to prove that there exist important legitimate reasons for processing that override your interests, rights and freedoms or processing requires confirmation of service provision.
This does not apply to cases where processing is done for direct marketing purposes. In such cases, we will no longer process your personal data for such purposes.

6. Validity of Etsy’s data protection statement
Furthermore, Etsy’s privacy policy applies. In this respect, Etsy is the person responsible for data processing. More information about how your data are processed at Etsy can be found here: https://www.etsy.com/legal/privacy/?ref=list