DATA PROTECTION
Privacy policy

Responsible for the data processing according to Art. 27 para. 1 GDPR is:
Frau
Berit Brandt
Obergasse 15
34298 Helsa
Germany
Phone: +49 5605 / 93 29 53 – 7
E-Mail: kontakt@johnnyundjune.de

We appreciate your interest in our Etsy shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting
You can visit our websites without giving any personal information. Each time a web page is called, the web server merely automatically stores a so-called server log file, which can be used, for example. contains the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data), and documents the retrieval.

These access data are evaluated exclusively for the purpose of ensuring a trouble-free operation of the site as well as the improvement of our offer. In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your page visit.

2. Data collection and use for contract processing and opening a customer account
Your personal data will be collected via Etsy or directly from us if you provide it as part of your order or when contacting us (for example via contact form or e-mail). Both Etsy and we act as responsible persons. All data collected via Etsy will be processed on the Etsy servers and, in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract execution, or for processing your contact us.
Obligatory fields are marked as such, since in these cases we need the data for contract processing, or to process your contact and you can not complete the order without their specification, or can not send the contact. Which data are collected, can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract handling and processing of your inquiries. After completion of the contract, your data will be restricted for further processing and deleted after expiry of any tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to otherwise use the data which is permitted by law and which we will inform you in this statement.

3. Data transfer
For fulfillment of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR we pass on your data to the shipping company responsible for the delivery, as far as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we will forward payment data collected to the credit institution commissioned with the payment and any payment service providers commissioned by us to process the payments or to the selected payment service. In part, the selected payment service providers also collect this data themselves, provided that you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies. For order and contract processing, we also use an external merchandise management system. The data transfer or processing taking place to this extent is based on order processing.

4. Contact options and your rights
As a affected, you have the following rights:
• pursuant to Art. 15 GDPR, the right to request information on the personal data processed by us in the scope specified therein;
• pursuant to Art. 16 GDPR the right to demand without delay the correction of incorrect or complete personal data stored with us;
• pursuant to Art. 17 GDPR the right to demand the deletion of your personal data stored with us, unless the further processing
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims
is required;
• pursuant to Art. 18 GDPR the right to demand the restriction of the processing of your personal data, as far as
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you reject its deletion;
- we no longer need the data, but you need it for asserting, exercising or defending legal claims or
- you filed an objection against the processing in accordance with Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
• pursuant to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

For questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent or objection to a particular use of data, please contact us directly via the contact details in our imprint.

*****************************************************************
Revocation
To the extent that we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the context of a weighing up of interests, you can object to this processing with effect for the future. If the processing is for the purpose of direct marketing, you can exercise this right at any time as described above. Insofar as the processing takes place for other purposes, you are only entitled to a right of objection if there are reasons that arise from your particular situation.

After exercising your right to object, we will not further process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of Legal claims serves.

This does not apply if the processing is for direct marketing purposes. Then we will not process your personal data for this purpose.
*****************************************************************

5. The validity of the Etsy Privacy Policy
Incidentally, the privacy policy of Etsy applies. In that regard, Etsy is the data responsible. You can find out about how to handle your data here at Etsy: https://www.etsy.com/legal/privacy.