Book a class
Book a class
My account

Legal information

Privacy policy

What personal data the website collects, why, how long we keep it and what your rights are.

Draft based on current Slovak law – a lawyer checks it before launch

Data highlighted in yellow is still missing; Helena will supply it.

  1. Controller

    The controller of your personal data under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. is:

    • Business name: doplniť
    • Registered office: doplniť
    • Company ID (IČO): doplniť
    • Tax / VAT ID: doplniť
    • Registration: doplniť
    • Studio: Na vrátkach 1K, 841 01 Bratislava
    • Email: info@keramikahelienka.sk
    • Phone: +421 903 394 212

    We have not appointed a data protection officer, as the law does not require one.

  2. What data we process and why

    • Shop orders: name, email, phone, delivery address, the contents of the order and the payment status. Card details are processed only by Comgate. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
    • Invoices and accounting records: the details on the invoice. Legal basis: a legal obligation under the Slovak Accounting Act No. 431/2002 Coll. (Art. 6(1)(c) GDPR).
    • Class and workshop sign-ups: name, email, phone, chosen date, and for children also the child's name and age. Legal basis: performance of a contract.
    • Contact form and emails: name, phone, email, message, and for team building also company, place, number of people, type of making and preferred date. Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in answering questions (Art. 6(1)(b) and (f) GDPR).
    • “Letters from the studio” newsletter: email. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe with the link in every email. doplniť
    • Visitor analytics (Google Analytics, Microsoft Clarity): pseudonymous identifiers from cookies, device and browser type, approximate location by country or city, pages visited, clicks and movement on the page. Clarity hides the text you type into forms. Legal basis: your consent in the cookie bar (Art. 6(1)(a) GDPR and § 109(8) of Slovak Act No. 452/2021 Coll.).
    • Running and securing the website: IP address and technical server logs. Legal basis: our legitimate interest in a secure website.

    Data needed to conclude and perform a contract is required; without it we cannot process an order or a sign-up. Providing any other data is voluntary.

  3. How long we keep data

    • Orders and sign-ups: while the contract is performed and then for the two-year liability period for defects, unless we need them longer to exercise our rights.
    • Accounting records: 10 years after the year they relate to (§ 35 of Act No. 431/2002 Coll.).
    • Contact form messages: until we have dealt with your question, at most doplniť.
    • Newsletter: until you withdraw your consent.
    • Analytics: Google Analytics doplniť, Microsoft Clarity under its own rules (session recordings usually 30 days).

  4. Who else processes data

    We pass on data only as far as needed for each purpose, to these processors and recipients:

    • Comgate, a. s. – payment gateway (card payments).
    • Google Ireland Limited – Google Analytics, Google Tag Manager, and after a click also Google Maps and YouTube.
    • Microsoft Ireland Operations Limited – Microsoft Clarity.
    • Supabase, Inc. – database of the website and orders. The data is stored on servers in the EU (Ireland). doplniť
    • Cloudinary Ltd. – storage and delivery of the website's photos. Loading a photo processes the visitor's IP address. doplniť
    • doplniť
    • doplniť
    • doplniť
    • doplniť
    • doplniť

    Google and Microsoft may transfer data to the USA. Both companies are certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023.

    We do not use automated decision-making or profiling that has legal effects on you.

  5. Your rights

    • Access – find out what data we hold about you (Art. 15 GDPR).
    • Rectification of incorrect data (Art. 16).
    • Erasure, if we no longer need the data or process it unlawfully (Art. 17).
    • Restriction of processing (Art. 18).
    • Portability of data you gave us under a contract or consent (Art. 20).
    • Objection to processing based on legitimate interest (Art. 21).
    • Withdrawal of consent at any time, for example with “Cookie settings” in the footer or the link in the newsletter. Withdrawal does not affect processing before it (Art. 7(3)).

    Exercise your rights by email to info@keramikahelienka.sk. We will reply within one month at the latest.

    If you believe we handle your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

  6. Effective date

    This privacy policy is effective from doplniť.