GDPR Compliance
Your rights under the General Data Protection Regulation
Our Commitment to Data Protection
We are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page explains your rights and how we fulfill our obligations as a data controller.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you voluntarily provide information through forms or email correspondence
- Contract: When processing is necessary to fulfill class registrations or service agreements
- Legitimate interests: For website analytics and improvement of our services, provided these interests do not override your rights
- Legal obligation: When required to retain records for tax or legal purposes
Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for processing based on legitimate interests.
Right to Data Portability
You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please send a written request to:
Email: [email protected]
Postal address: 47 Rue des Artisans, 69004 Lyon, France
We will respond to your request within one month of receipt. If your request is particularly complex or you have made multiple requests, we may extend this period by two additional months, and we will inform you of such extension.
Data We Collect
The personal data we may collect includes:
- Name and contact information
- Email address
- Information about your experience level and interests in ceramics
- Class registration and attendance records
- Payment information (processed through secure third-party payment providers)
- Website usage data and analytics
Data Retention
We retain your personal data only for as long as necessary:
- Inquiry data: Until addressed, then up to one year for reference
- Class registration data: Three years from the last class attended
- Financial records: Seven years as required by French tax law
- Website analytics: Anonymized after 14 months
International Data Transfers
Your personal data is primarily stored and processed within the European Economic Area. If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data Security
We implement appropriate technical and organizational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Website: www.cnil.fr
Updates to This Information
We may update this GDPR information page to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or via email to registered users.