PRIVACY POLICY

Last updated: 24 September 2026

This Privacy Policy explains how Dans Ceramics s.r.o. processes personal data of visitors to www.dansceramics.com, customers, workshop participants and other individuals who contact us or use our services.

We process personal data in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable laws of the Slovak Republic.

1. Data Controller

The data controller is:

Dans Ceramics s.r.o.
Registered office: Borinka 653, 900 32
Company ID: 57820147
Email: info@dansceramics.com
Website: www.dansceramics.com

The company operates Dan’s Ceramics Studio, a pottery studio based in Zohor near Bratislava.

The controller has not appointed a Data Protection Officer, as the applicable conditions requiring the appointment of a Data Protection Officer do not apply.

2. Personal Data We Process

Depending on how you interact with us, we may process:

first and last name,
email address,
telephone number, if you provide it,
information related to your booking or requested service,
information required for issuing accounting documents,
information related to payments, such as confirmation of a bank transfer,
correspondence and communications with us,
technical information and website usage data collected through cookies and similar technologies.

We do not request personal data that are not necessary for the relevant purpose.

3. Purposes and Legal Bases for Processing

We may process personal data for the following purposes:

Bookings and provision of services

To accept and manage bookings, communicate with customers, organise workshops and provide the requested services.

Legal basis: performance of a contract or taking steps at the request of the data subject prior to entering into a contract, under Article 6(1)(b) GDPR.

Invoicing and accounting

To issue accounting documents, record payments and comply with legal accounting and tax obligations.

Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR.

Customer communication

To respond to enquiries, handle requests and communicate with customers in relation to our services.

Legal basis: performance of a contract, pre-contractual measures or our legitimate interest, depending on the circumstances of the communication.

Protection of our rights

To establish, exercise or defend legal claims and protect our property and legitimate interests.

Legal basis: legitimate interest under Article 6(1)(f) GDPR.

Marketing communications

If you subscribe to our marketing communications or newsletter, we may use your personal data to send information about workshops, news and offers.

Legal basis: your consent under Article 6(1)(a) GDPR, where consent is required.

You may withdraw your consent at any time.

4. Bookings and Online Services

Bookings for workshops and other services may be made through an online booking system available on our website.

When making a booking, we may process the information necessary to create and manage the booking, including your name, email address, telephone number, information about the selected service and payment-related information.

We may use external providers of website, booking, email and other technical services who may process personal data on our behalf to the extent necessary to provide these services.

5. Payment Information

When you make a booking or purchase through our website, we process the personal data necessary to arrange, process and record your payment.
For online payments, payment information is processed through our payment provider, Stripe. We do not receive or store your full payment card details. Stripe may process your personal data as a payment service provider and, where applicable, as an independent data controller in accordance with its Privacy Policy and applicable data protection laws.
For payments made by bank transfer, we process information necessary to identify and record the payment, such as the payer's name, payment amount, payment date and payment reference. Payment information may also be processed by our bank and other service providers involved in payment processing where necessary.
Payment information is processed where necessary to perform the contract with you, comply with our legal obligations, including accounting and tax requirements, and for the legitimate interests of our business, such as maintaining payment records and preventing fraud.
We do not store your full payment card details. Personal data processed by payment providers is retained in accordance with their applicable legal and contractual requirements.

6. Recipients of Personal Data

Where necessary, personal data may be provided or made accessible to:

providers of website, booking and IT services,
email service providers,
our accountant or accounting service provider,
banks, where necessary to process payments,
legal, tax or professional advisers where necessary,
public authorities where disclosure is required by law.

We do not provide personal data to third parties for their own marketing purposes without an appropriate legal basis.

7. Transfers Outside the European Economic Area

Some providers of technical or online services may process personal data outside the European Economic Area.

Where such transfers take place, we ensure that they are carried out in accordance with the GDPR, for example on the basis of an adequacy decision or appropriate safeguards available under the GDPR.

8. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.

In particular:

booking-related information is retained for the period necessary to process the booking and related communication,
accounting and tax records are retained for the period required by law,
information processed on the basis of consent is retained until consent is withdrawn, unless another legal basis allows or requires continued processing,
information necessary for the establishment, exercise or defence of legal claims may be retained for the relevant limitation period.

9. Your Rights

Subject to the conditions set out in the GDPR, you have the right to:

request access to your personal data,
request correction of inaccurate or incomplete data,
request erasure of your personal data,
request restriction of processing,
object to processing based on legitimate interests,
request data portability where applicable,
withdraw consent at any time where processing is based on consent,
lodge a complaint with a supervisory authority.

You may contact us at:

info@dansceramics.com

We will respond to your request within the time limits required by the GDPR.

10. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

In Slovakia, the supervisory authority is: Office for Personal Data Protection of the Slovak Republic

11. Provision of Personal Data

Some personal data are necessary for creating a booking, communicating with a customer or complying with legal obligations.

If you do not provide information that is necessary to create or process a booking, we may not be able to accept the booking or provide the requested service.

Where the provision of personal data is based on your consent, providing the data is voluntary. Refusing consent will not affect services that can be provided without such consent.

12. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you. We do not carry out profiling with such effects.

13. Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the operation, security and basic functionality of the website. Other cookies may be used, for example, for analytics or additional functionality, depending on the services and integrations currently used on the website.

Where required by applicable rules, we obtain consent for non-essential cookies through our cookie banner.

The cookies and similar technologies used on our website may change depending on the features, applications and integrations currently enabled on the website.

14. Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse.

Access to personal data is limited to persons and service providers who need such access to perform their duties or provide services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, particularly when our services, technologies or legal requirements change.

The current version will always be available on this website.