Privacy Policy
This policy explains how KeraKult handles your personal data when you use this website, join the waitlist, or buy an online master-class or course. We follow the EU General Data Protection Regulation (GDPR) and Czech law.
1. Who we are
The controller of your personal data is:
- Kerakult s.r.o., IČO 17666333
- Registered office: Olšanská 2898/4h, Žižkov, 130 00 Prague 3, Czech Republic
- Contact: kerakultceramics@gmail.com
We have not appointed a Data Protection Officer; for any privacy question, write to the address above.
2. What data we collect
- Waitlist: your email address and, if you give it, your first name.
- Purchases: your name, billing address, email, and — if you buy as a company — your company name, IČO and DIČ, so we can issue a valid invoice.
- Payment: card payments are processed by our payment provider (Stripe). We do not receive or store your full card details.
- Usage & cookies: if you consent, analytics and marketing cookies collect information about how you use the site (see section 4).
- Messages: anything you send us by email or through our social channels.
3. Why we use it, and our legal basis
- To run the waitlist and send you opening news and course updates — your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link or by email.
- To provide the master-classes or course you buy — performance of a contract (Art. 6(1)(b)).
- To issue invoices and keep accounting records — a legal obligation (Art. 6(1)(c)).
- To keep the site secure and working — our legitimate interest (Art. 6(1)(f)).
- To protect our rights and deal with any disputes or legal claims — our legitimate interest.
- Analytics and marketing cookies — your consent, given through the cookie banner.
4. Cookies
We use three categories of cookies. Essential cookies keep the site working and are always on. Analytics and marketing cookies only run if you turn them on in the cookie banner — they are off by default. You can change your choice at any time through the “Cookie settings” link.
5. Who we share it with
We use a small number of trusted providers who process data on our behalf, under data-processing agreements:
- Brevo (Sendinblue SAS, EU) — storing waitlist contacts and sending emails.
- Google — a spreadsheet backup of sign-ups, and (if you consent) website analytics.
- Cloudflare — website hosting and security.
- Stripe — payment processing.
Some of these providers are based outside the EU. Where that is the case, transfers are covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard. We do not sell your data.
6. How long we keep it
- Waitlist data — until the first master-classes are released and you decide whether to buy, or until you unsubscribe, whichever comes first.
- Order and invoice data — for the period required by Czech accounting and tax law (up to 10 years).
- Cookies — for the lifetime stated for each cookie; consent choices are kept in your browser.
7. Your rights
Under the GDPR you can ask us to: access your data; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent at any time (which does not affect processing done before). To exercise any of these, email kerakultceramics@gmail.com.
You also have the right to lodge a complaint with the Czech data-protection authority, the Úřad pro ochranu osobních údajů (uoou.cz).
We do not use your personal data for automated decision-making or profiling.
8. Security
We take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is completely secure, but we work only with providers that meet recognised security standards.
9. Children
The site is intended for adults. We do not knowingly collect data from children under 15.
10. Changes
We may update this policy from time to time. The current version is always published here, with the date shown at the top.
11. Contact
Questions about your data? Write to kerakultceramics@gmail.com.