Data Privacy

Casstle of Clay values your privacy. This document outlines how your personal data is collected, used, and protected in accordance with the General Data Protection Regulation (GDPR) and German data protection laws (Bundesdatenschutzgesetz – BDSG, Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).

 

1. Data Controller

The data controller for this website is:

Casstle of Clay

Ziegrastr. 11, 12057 Berlin, Germany

Email: casstleofclay@gmail.com

 

2. Data Collected

Personal Data:

- Name and email address, provided when you contact us or subscribe to our newsletter.

- Booking and order data (e.g. name, address, selected products or classes). Payment data is processed by our payment providers.

 

Website Usage Data (server log files):

When you visit our website, technical data transmitted by your browser (such as browser type, operating system, date and time of the request and IP address) is processed by our hosting provider Wix.com. Details are described in the section "Server Log Files" below.

 

3. Purpose of Data Collection

Your data is collected to:

- Process orders or bookings.

- Respond to inquiries.

- Send our newsletter, if you have subscribed.

- Improve website functionality and user experience.

 

4. Data Minimization

In accordance with Art. 5(1)(c) GDPR, we only collect and process the personal data that is necessary to provide the services you request (e.g. processing orders and bookings or answering inquiries). We do not collect more data than required for these purposes. Your data is deleted once it is no longer needed, unless statutory retention obligations apply.

 

5. Legal Basis for Processing

The legal bases for processing your personal data include:

- Article 6(1)(a) GDPR: Your consent (e.g. newsletter, Google Maps, website statistics).

- Article 6(1)(b) GDPR: To fulfill contracts or pre-contractual obligations.

- Article 6(1)(c) GDPR: Compliance with legal obligations.

- Article 6(1)(f) GDPR: Our legitimate interest in the secure and stable operation of our website.

 

6. Server Log Files

When you visit our website, technical access data (such as browser type and version, operating system, referrer URL, date and time of the request and IP address) is processed automatically by our hosting provider Wix.com Ltd. in server data and log files. This processing is necessary to ensure the secure and stable operation of the website and to protect it against attacks and misuse. The legal basis is our legitimate interest in the technical security and functionality of the website (Art. 6(1)(f) GDPR).

 

We have no direct access to these log files. How Wix processes and stores this data, including IP addresses, is described in Wix's privacy policy: https://de.wix.com/about/privacy

 

7. Data Sharing and Service Providers

Your data will only be shared when necessary:

- With service providers (see below).

- With legal authorities if required by law.

 

Hosting: This website is hosted by Wix.com Ltd. (and its affiliated companies, "Wix"). Wix provides the server infrastructure and storage space for this website, and your data is transmitted to and stored on Wix's systems when you visit the site, contact us, place an order or make a booking. The legal basis is our legitimate interest in the secure and efficient provision of our website (Art. 6(1)(f) GDPR) and, where applicable, the performance of a contract (Art. 6(1)(b) GDPR). A data processing agreement pursuant to Art. 28 GDPR applies between us and Wix as part of Wix's terms of use. It is available here: https://en.wix.com/about/privacy-dpa-users

For more information, please see Wix's privacy policy: https://de.wix.com/about/privacy

 

Payments: Payments are processed by PayPal. Further information is available in PayPal's privacy statement: https://www.paypal.com/de/legalhub/privacy-full

 

8. Google Maps

This website uses the map service Google Maps (dynamic version). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

 

To use the functions of Google Maps, it is necessary to process your IP address. When the map is loaded, your browser connects to Google's servers, and information about your use of this website (such as your IP address and browser data) may be transmitted to Google and stored there, including on servers in the USA. We have no influence on this data processing.

 

The map is only loaded if you have given your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future. Data transfers to the USA are based on the EU-US Data Privacy Framework or on standard contractual clauses of the European Commission.

 

The purpose of using Google Maps is to show you our location and make it easier to find us.

 

For more information on how Google handles user data, please see Google's privacy policy: https://policies.google.com/privacy

 

9. Website Statistics

We use the analytics tools provided by our website host, Wix.com Ltd., to analyze how our website is used and to improve its functionality and user experience. In this context, cookies may be set and technical data (such as IP address, browser type, device information and the pages visited) may be processed. Where required, this only happens if you have given your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); otherwise the processing is based on our legitimate interest in the optimization of our website (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with effect for the future via our cookie settings.

 

We have no direct access to the raw data. For more information on how Wix processes this data, please see Wix's privacy policy: https://de.wix.com/about/privacy

 

10. Newsletter

If you subscribe to our newsletter, we process your email address in order to send you information about classes, exhibitions and new products. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, with effect for the future, by using the unsubscribe link in each newsletter or by contacting us at casstleofclay@gmail.com. Your email address is stored until you unsubscribe. The newsletter is sent using Wix.com.

 

11. Data Retention

Your data will be retained only for as long as necessary:

- Customer and order data: Stored for up to 10 years to comply with legal requirements.

- Communication data: Deleted six months after your inquiry is resolved.

- Newsletter data: Until you unsubscribe.

 

12. Your Rights

You have the following rights under GDPR:

- Access: Request a copy of your data.

- Correction: Rectify inaccuracies.

- Deletion: Request deletion of your data, unless retention is required by law.

- Restriction: Limit the processing of your data.

- Data portability: Receive your data in a structured, commonly used format.

- Objection: Object to processing based on legitimate interests (Art. 6(1)(f) GDPR).

- Withdrawal of consent: Withdraw any consent given at any time with effect for the future.

- Complaint: Lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

To exercise your rights, contact us at casstleofclay@gmail.com.

 

13. Data Security and SSL/TLS Encryption

Pursuant to Art. 32 GDPR, we implement appropriate technical and organizational measures to protect your personal data.

 

For security reasons and to protect the transmission of personal data and other confidential content (such as orders, bookings and inquiries sent via contact forms), this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" at the beginning of the address line of your browser and by the security indicator (e.g. a lock symbol) displayed by your browser.

 

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties. The encryption is provided by our website host, Wix.com (TLS 1.2 or higher). Data stored on Wix's servers is also encrypted.

 

Please note that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

 

14. Updates to This Policy

This privacy policy may be updated. Please check this page regularly for any changes.

 

Contact Information:

If you have questions about this policy, please contact:

Casstle of Clay

Ziegrastr. 11, 12057 Berlin, Germany

Email: casstleofclay@gmail.com

 

Effective Date: 06.10.2026