Privacy Policy
Last updated: 27 September 2026
This policy explains what personal data Keramiko collects when you book a class, buy from our shop, become a member or visit keramiko.dk, why we collect it, who we share it with and what rights you have. We only collect what we need to run the studio.
1. Who is responsible for your data
Keramiko is the data controller.
Keramiko
CVR: 46237528
Sølvgade 14a, 1307 København K, Denmark
Email: info@keramiko.dk
Phone: +45 31 73 45 31
If you have any questions about this policy or your data, write to info@keramiko.dk.
2. What we collect and why
Bookings, gift cards and shop orders
When you book a class, workshop or Paint Your Own Pottery session, buy a gift card or order from our shop, we collect your name, email address, phone number, billing address, what you booked or bought, the date and time, and the payment status. For shop deliveries we also collect your delivery address. We use this to confirm and run your booking, deliver your order, send you practical messages (confirmations, reminders, cancellations and the “your piece is ready” email), and keep our accounts.
Legal basis: to fulfil our agreement with you (GDPR article 6(1)(b)) and to meet our bookkeeping obligations (article 6(1)(c)).
Payments
Payments are handled by Vipps MobilePay and by WooPayments (card, Apple Pay and Google Pay, processed by Stripe). We never see or store your full card details. We receive a confirmation that the payment went through, the amount, and the last digits and type of card where the provider shares them.
Customer account and login
If you create an account, we store your name, email address, password (encrypted) and your booking and order history, so you can see and manage your bookings. You can choose to log in with Google or Vipps, in which case that provider shares your name and email address with us.
Legal basis: our agreement with you (article 6(1)(b)).
Studio membership
For members we also keep your membership plan, the studio hours you have bought, booked and used, and your booked time slots.
Legal basis: our agreement with you (article 6(1)(b)).
Pickup, glazing and your pieces
We keep track of which pieces are ready, when you book a pickup or glazing slot, and whether a piece has been collected, so we can tell you when your work is ready and keep the studio shelves organised.
Legal basis: our agreement with you (article 6(1)(b)).
Ratings and feedback
Our “your piece is ready” email lets you rate your experience. If you click a rating, we store it with your email address and the workshop it relates to, and link it to your customer account and recent orders, so we can follow up and resolve any problem. If you write feedback, we store the text with the same details and it is sent to our studio inbox so we can reply. We never publish your rating or feedback without asking you first. Leaving a public review on Google is optional and is handled by Google under its own terms.
Legal basis: our legitimate interest in following up on your experience and improving our classes and service (article 6(1)(f)). You can object at any time by writing to info@keramiko.dk, and we will delete your rating and feedback.
When you contact us
If you email, call or message us (for example about a private event), we use what you send us to answer you and to plan the event.
Legal basis: our legitimate interest in answering you, or steps before an agreement (article 6(1)(f) and (b)).
Website visits and cookies
Our website uses cookies that are necessary for it to work, such as your basket, login and language choice. With your consent we also use Google Analytics to understand how the site is used, and Google Ads to measure our advertising. You choose in the cookie banner, and you can change your choice at any time using the “Manage consent” button. Read more in our Cookie Policy.
Legal basis: consent for statistics and marketing cookies (article 6(1)(a)); necessary cookies rely on our legitimate interest in a working website (article 6(1)(f)).
3. Who we share your data with
We do not sell your data. We share it only with companies that help us run the studio and website, which process it on our behalf and under a data processing agreement:
- Hostinger: hosting of our website, booking system and email (EU).
- Vipps MobilePay: MobilePay payments (Norway and the EU).
- WooPayments (Automattic) and Stripe: card, Apple Pay and Google Pay payments.
- Shipmondo and the carrier you choose: delivery of shop orders.
- Oracle Cloud: the server that runs our booking and membership email automation.
- Google: Google login if you choose it, and Google Analytics and Google Ads only if you consent.
Our booking system (Amelia) and shop (WooCommerce) run on our own website, so your booking data is stored on our Hostinger server and not with those software makers. We may also share data if the law requires it, for example with the tax authorities.
4. Transfers outside the EU
Some of the providers above (Oracle, Stripe, Automattic and Google) may process data in the United States. These companies are certified under the EU-US Data Privacy Framework, which the European Commission has approved as providing adequate protection. Where that does not apply, we rely on the European Commission’s standard contractual clauses.
5. How long we keep your data
- Orders, invoices and payment records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act (bogføringsloven).
- Bookings and participant details: up to 3 years after your last booking, so we can handle questions, gift cards and pieces waiting for pickup.
- Customer accounts and membership data: while your account or membership is active, and up to 3 years after your last activity. You can ask us to delete your account at any time.
- Ratings and feedback: up to 2 years.
- Copies of emails we send you: up to 12 months.
- Emails and messages you send us: as long as needed to handle your request, and no longer than 2 years.
- Cookies: see our Cookie Policy.
6. Your rights
Under the GDPR you have the right to:
- get access to the data we hold about you,
- have incorrect data corrected,
- have your data deleted, unless we must keep it by law,
- restrict our processing of your data,
- receive your data in a structured, machine-readable format (data portability),
- object to processing based on our legitimate interest,
- withdraw your consent at any time, without affecting processing that happened before.
To use any of these rights, write to info@keramiko.dk. We reply within one month.
If you are unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk, dt@datatilsynet.dk.
7. Security
Our website uses an encrypted connection (HTTPS), payment details are handled only by our payment providers, and access to booking and customer data is limited to the people who need it to run the studio.
8. Changes to this policy
We update this policy when the way we handle data changes. The date at the top shows when it was last updated.