Datenschutzerklärung

The controller responsible for the processing of personal data on this website is:

Asami Pimpajee
Silly Clay Studio
Munich, Germany
E-Mail: pimpajee.asami@gmail.com

[TODO: Full address and any trade register details to be added after business registration]

Contact form — When you use our contact form we collect your name, email address, and message. We use this solely to respond to your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) / Art. 6(1)(f) GDPR (legitimate interest in communication).

Shop orders — When you place an order we collect your name, email address, delivery address, and the items ordered. We use this to process and fulfil your order and to communicate with you about it. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Class bookings — When you book a pottery class we collect your name, email address, phone number (optional), and any notes you provide. We use this to manage your booking and communicate with you about it. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Newsletter — If you subscribe to our newsletter we store your email address to send you occasional updates about new class dates and shop releases. You can unsubscribe at any time via the link in every email or by emailing us. Legal basis: Art. 6(1)(a) GDPR (consent).

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Order and booking data is kept for up to 7 years for tax and accounting purposes as required by German law (§ 147 AO). Newsletter data is retained until you unsubscribe. Contact form data is deleted once the enquiry is resolved.

We use the following services to operate this website. Each service processes data according to its own privacy policy.

Cloudflare is based in the United States. Data transfers are covered by Cloudflare's Standard Contractual Clauses. Supabase stores data in the EU (Frankfurt region). Resend is based in the United States and processes email metadata under Standard Contractual Clauses.

This website does not use tracking cookies. We use Cloudflare Web Analytics, a privacy-friendly analytics tool that does not use cookies, does not fingerprint users, and does not share data with third parties. It only collects aggregate, anonymous statistics (page views, referrers, browser type). No consent is required for this type of analytics under GDPR.

As a data subject you have the right to:

• Access — request a copy of the personal data we hold about you (Art. 15 GDPR)
• Rectification — ask us to correct inaccurate data (Art. 16 GDPR)
• Erasure — ask us to delete your data ("right to be forgotten") (Art. 17 GDPR)
• Restriction — ask us to restrict processing of your data (Art. 18 GDPR)
• Data portability — receive your data in a structured, machine-readable format (Art. 20 GDPR)
• Object — object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw consent — withdraw any consent you've given at any time (e.g. newsletter unsubscribe)

To exercise any of these rights, contact us at pimpajee.asami@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority in Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), lda.bayern.de.

By entering your email address in the newsletter sign-up form you consent to receiving our occasional newsletter. You can unsubscribe at any time by clicking the unsubscribe link at the bottom of any newsletter email, or by emailing us directly.

We do not share your email address with third parties for marketing purposes. Emails are sent via Resend (see section 4).

We may update this privacy policy from time to time. The current version is always available at sillyclay.com/datenschutz.