Privacy Policy

Klemen Trupej, trading as Klemen Trupej Ceramic Atelier, is responsible for the personal information described in this policy.

Address: Nussdorfer Strasse 80 / Lokal / 5-6, 1090 Vienna, Austria.

Contact: hello@klmnatelier.com.

Contact details: Your email address, first name, middle name, last name and phone number, where provided.

Bookings and purchases: The classes and sessions you book, number of spots, participant names you provide, billing or delivery address, payment status, amounts, VAT, payment references, refunds, discounts, gift-card orders and your acceptance of the booking terms. Your full card number and card security code are handled by Stripe and are not stored in the atelier website database.

Atelier points: Your points balance and the history of points earned, added, redeemed or adjusted, including past bookings imported into your account.

My pieces: Photos you upload, piece names, clay, glaze names, number of coats, notes and the dates pieces are created or updated.

Account and security records: Email verification status, account and upload-access settings, sign-in and verification records, session identifiers and expiry dates, and records of account changes or deletion. We also use hashed email or connection identifiers to limit repeated requests and prevent misuse.

Enquiries: The information and messages you send through our contact or custom-class forms. Information comes from you, from payment updates, or from existing atelier booking records used to prepare a returning student’s account.

We use this information to manage bookings, payments, delivery, refunds and class communications; provide your account and private piece library; keep track of atelier points; answer enquiries; maintain financial records; and protect the website against misuse.

Legal basis: Providing bookings and the account services you request is based on performing our agreement with you or taking steps at your request (Article 6(1)(b) GDPR). Required financial records are kept to meet legal obligations (Article 6(1)(c)). Website security and preventing misuse are based on our legitimate interest in keeping the service safe (Article 6(1)(f)). Optional website statistics and any marketing sent on the basis of consent use Article 6(1)(a); consent can be withdrawn.

An account is not required to purchase a class. We need the contact, billing and booking details requested at checkout to complete your purchase. Optional profile fields and piece uploads can be left blank.

You can create or access an account with your email address and confirm it using an email link or sign-in code. If you request an account during guest checkout, we send a separate confirmation email; your purchase does not depend on activating the account. No account password is required or stored.

For returning students, the atelier may prepare an account using existing student and booking records, including class enrolments, past points and piece-upload access. You verify your email before accessing the account.

Your account lets you view upcoming and past classes, booking and payment details, and atelier points. You can edit your contact details in Your details and change your sign-in email through email confirmation.

Students with an eligible class booking, or returning students whose access has been enabled by the atelier, can save multiple photos of their pieces together with clay, glaze, coat counts and notes.

Your library is private to your account. It is not published on the website or shown to other students. Photos are stored in private Cloudflare storage and are served only after an account and ownership check. Please do not upload other people’s personal information or images without their permission.

You can edit your pieces and remove individual photos or entire pieces from My pieces. Removed photos become inaccessible through the library immediately and are queued for deletion from storage.

You can request deletion yourself at any time from Account → Your details → Delete account. Choose Send deletion link, follow the email link and confirm deletion on the page. The link is valid for 15 minutes. Opening the link alone does not delete the account. If a checkout is still in progress, complete or release it first.

After you confirm, account access is removed and you are signed out on all devices. Your editable profile details, saved pieces, notes and glaze or clay information are removed, photos are made inaccessible and queued for deletion, and your available atelier points are cleared. This cannot be undone.

Deleting an account does not cancel or refund existing bookings. We retain booking contact details, payment and refund records, relevant points transaction history and a record of deletion where needed to provide existing bookings, meet accounting obligations or handle claims. Essential updates about those bookings may still be sent to your booking email.

Account deletion does not remove invitations already delivered to your calendar or emails already received. If you need help with these or another deletion request, contact hello@klmnatelier.com.

Profile details and private library content are kept while your account is active, unless you remove them earlier. Account deletion removes the profile and library information described above; deletion of stored photo files is completed by a background cleanup process.

Sign-in, email-change and deletion links expire after 15 minutes. A student sign-in session lasts up to 90 days without renewed activity and can be renewed during use, with a maximum of one year before a fresh sign-in is required. Sign-out and account deletion revoke the relevant session access. Guest booking access lasts up to seven days. Expired sign-in and verification records are cleaned up automatically.

Accounting records are generally retained for seven years from the end of the relevant calendar year, as required in Austria. Records may need to be kept longer for an ongoing tax or legal proceeding. Other booking, enquiry, email-delivery and security records are retained according to their operational purpose and any applicable legal or claims requirements. You can contact us to ask about the records relating to you. Further information: Austrian accounting retention requirements

Website-statistics retention is described separately below.

We use Cloudflare for hosting, website operation, the account and booking database, and private photo storage; Stripe for payments and refunds, including any payment method you select; Resend for sign-in links, confirmations and booking emails; and Google Calendar for class invitations.

These providers receive the information needed for their service. For example, Stripe receives checkout and payment information, Resend receives your email address and email contents, and Google receives your email address and class schedule for calendar invitations. New calendar invitations use separate recipient copies so they do not contain other students’ contact details. We do not sell your personal information.

Some providers process information outside the European Economic Area. Their applicable transfer safeguards, such as adequacy arrangements or standard contractual clauses, are described in their privacy and data-protection documentation. Contact hello@klmnatelier.com for information about the safeguards applicable to your data.

Provider privacy information: Cloudflare privacy policy · Stripe privacy policy · Resend privacy policy · Google privacy policy

The website uses HTTPS to protect information in transit. Account access uses short-lived email links or codes and protected session cookies. Sign-in and sensitive account actions are rate-limited, and changes to the sign-in email and account deletion require email confirmation.

Account and piece-library requests are checked against the signed-in account. Student photos are kept in private storage rather than a public image folder, and studio-management pages are restricted to the owner account. Payment details are entered through Stripe’s hosted checkout.

Please keep your email account secure, do not share sign-in links or codes, and sign out on shared devices. No online system can guarantee absolute security; if you notice a problem, contact hello@klmnatelier.com.

You can request access to your personal information, correction, deletion, restriction or portability, and object to processing where applicable. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact hello@klmnatelier.com; we may need to verify your identity.

You can update your profile and delete your account yourself as described above. These controls do not remove records that must be retained for legal obligations or other lawful purposes.

You also have the right to complain to the Austrian Data Protection Authority: Austrian Data Protection Authority

Necessary storage keeps account sign-in and checkout working, and remembers your privacy choice. You can use the website and purchase a class without allowing website statistics.

We update this page when the website or our use of personal information changes. Please refer to the version shown here.

Effective Date: This privacy policy is effective from 8 October 2026.

Website statistics added 4 October 2026. With your permission, we record visit times, public pages viewed, classes selected, checkout starts and completed purchases associated with that visit. Cloudflare provides an approximate country and city based on the connection; this can be unavailable or inaccurate, including when using a VPN.

A random first-party visit identifier groups these events. Its cookie lasts up to 30 minutes between page visits, with a maximum of 24 hours. Your choice is remembered on your device. Statistics do not include names, email addresses, IP addresses, precise locations, form content, URL query strings, private account pages or piece-library content. We do not use the identifier for advertising or tracking across other websites.

These records are stored in our Cloudflare database for up to 90 days and are accessible only to the studio owner. Linked visit records are pseudonymous rather than a guarantee of complete anonymity. Choose “Essential only” to decline optional cookies, or use “Cookie settings” in the website footer to change your choice. Withdrawal stops further collection and removes the current identifiable visit, its events and its checkout links when its visit cookie is still available. Previously expired visits cannot be identified from your device and are removed under the 90-day retention limit.

Global Privacy Control and Do Not Track signals prevent visit tracking. Booking and payment records are necessary for providing classes and managing payments; these remain separate from optional visit statistics. Sales totals use these operational records even when a customer declines statistics. Declining or withdrawing does not affect your booking, account, price or payment.