Creat3DLab

This Privacy Policy describes how CREAT3D d.o.o. (“we”, “us”, “our”) collects, uses, and shares personal information when you purchase an item from our Etsy shop, contact us, or otherwise use our services through Etsy.com or its related services.

This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Etsy. Please refer to Etsy’s Privacy Policy to learn more about how Etsy handles your personal information.

1. Personal Information We Collect
To fulfill your order, you must provide certain personal information, which you authorize Etsy to share with us. This may include:
- Your name
- Email address
- Postal address
- Phone number (if provided)
- Details of the product you ordered

You may also choose to provide additional personal information if you contact us directly (for example, for a custom-made order or support request).

2. Why We Need Your Information and How We Use It
We collect, use, and share your personal information only as necessary and based on the following legal grounds under the General Data Protection Regulation (GDPR):

a) Performance of a Contract To:
- Process and fulfill your order
- Arrange shipping and delivery
- Communicate with you about your purchase
- Provide customer support and resolve disputes

b) Compliance with Legal Obligations
We may retain and use your information to comply with legal obligations, including tax and accounting requirements under Croatian law.

c) Legitimate Interests Where necessary to:
- Improve our services
- Ensure the security of our shop
- Prevent fraud or misuse
- Comply with Etsy Seller Policies

We only rely on legitimate interests where they do not override your rights and freedoms.

3. Information Sharing and Disclosure
We share your personal information only in limited circumstances, including:

Etsy
We share information with Etsy as necessary to provide our services and comply with Etsy’s Seller Policy and Terms of Use.

Shipping and Service Providers
We share relevant information with trusted third-party service providers (such as shipping and logistics companies) solely to fulfill your order.

Legal and Regulatory Requirements
We may collect, use, retain, or disclose your information if we reasonably believe it is necessary to:
- Respond to legal requests or government authorities
- Enforce our agreements and policies
- Prevent or investigate fraud or illegal activity
- Protect the rights, property, or safety of our customers or others

4. Data Retention
We retain your personal information only for as long as necessary to provide our services and comply with legal obligations.
In particular, we are required under Croatian tax and accounting law to retain certain records (such as invoices containing customer data) for up to 11 years. After this period, the data is securely deleted where possible.

5. Transfers of Personal Information Outside the EU
We may store and process personal information through third-party services located outside the European Union (including the United States).
When personal data is transferred outside the EU, we rely on appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission, or
- Other lawful transfer mechanisms recognized under GDPR

These safeguards are designed to ensure that your personal information remains protected.

6. Your Rights
If you reside in the EU or certain other jurisdictions, you have the following rights regarding your personal information:
- Access - Request a copy of the personal data we hold about you
- Rectification - Request correction of inaccurate or incomplete data
- Restriction - Request limitation of processing in certain cases
- Erasure - Request deletion of your personal data, where legally possible
- Objection - Object to processing based on our legitimate interests
- Complaint - Lodge a complaint with your local data protection authority

Please note that some requests may be limited where we are legally required to retain certain data.

7. How to Contact Us
For the purposes of EU data protection law, CREAT3D d.o.o. is the data controller of your personal information.

Contact details:
CREAT3D d.o.o.
Mostarska 51
31000 Osijek
Croatia
Email: support@creat3d.hr