Privacy Policy

1. Controller

The data controller is Serifos Clay House, Livadi, 84005 Serifos, Greece. Email: [email protected]. Telephone: +30 2281 555 220.

2. Scope

This policy applies to personal data collected through the website rasteinscu.cyou, contact forms, email, telephone, and in-studio enrolment for workshops or studio visits.

3. Data we process

• Identity and contact details (name, email, phone) when you write to us or book a workshop.
• Message content and preferences you choose to share (for example collection interest or workshop type).
• Technical data such as IP address, browser type, and cookie identifiers where permitted (see our Cookie Policy).

4. Purposes and legal bases

• Responding to enquiries — legitimate interests (Art. 6(1)(f) GDPR) or steps prior to a contract (Art. 6(1)(b)).
• Workshop bookings and studio services — performance of a contract (Art. 6(1)(b)).
• Legal obligations — accounting and compliance under Greek and EU law (Art. 6(1)(c)).
• Optional analytics or marketing cookies — consent (Art. 6(1)(a)), which you may withdraw at any time.

5. Retention

We keep enquiry messages for as long as needed to complete the conversation and for a reasonable follow-up period (typically up to 24 months), unless a longer period is required for legal claims or workshop records. Cookie consent choices are stored locally in your browser until you clear them or change preferences.

6. Recipients

Data is handled by the studio. Hosting or email providers may process data as processors under appropriate agreements. We do not sell personal data. Transfers outside the EEA, if any, will rely on an adequacy decision or appropriate safeguards.

7. Your rights

Under the GDPR and Law 4624/2019 you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing.

To exercise rights, contact [email protected]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA / ΑΠΔΠΧ), Kifissias 1-3, 115 23 Athens, Greece — www.dpa.gr.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration, proportionate to the risks of a small studio website and booking records.

9. Updates

We may update this policy to reflect legal or operational changes. The version published on this page is the current one. Last updated: July 2026.