Privacy policy

This notice explains how Canal Wheel Ceramics (controller: Marie Lin, Prinsengracht 412, 1016 JC Amsterdam, Netherlands) processes personal data when you use thermscram.digital or contact us. Processing follows the EU General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG (UAVG).

1. Controller

Marie Lin · Canal Wheel Ceramics · Prinsengracht 412 · 1016 JC Amsterdam · Netherlands
Email: [email protected] · Phone: +31 20 555 0184

2. Data we process

• Contact and enquiry details you send (name, email, subject, message, and any workshop or commission preferences).
• Technical data needed to deliver the website (e.g. IP address in server logs, browser type) for a limited period.
• Cookie preferences stored locally in your browser under the key thermscram_cookie.

3. Purposes and legal bases

• Responding to enquiries, commissions, and workshop bookings — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest in answering messages).
• Operating and securing the website — Art. 6(1)(f) GDPR.
• Optional analytics or marketing cookies — only with your consent, Art. 6(1)(a) GDPR; you may withdraw consent at any time via the cookie banner or by clearing site data.

4. Retention

Enquiry data is kept as long as needed to handle your request and any follow-up order or workshop, then deleted or restricted unless longer storage is required by commercial or tax law (including Dutch fiscal retention rules where applicable). Server logs are rotated on a short cycle. Cookie consent records remain until you clear them or change your choice.

5. Recipients

We do not sell personal data. Hosting and email providers may process data on our behalf under Art. 28 GDPR contracts. Transfers outside the EEA occur only with appropriate safeguards where applicable.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability, and objection (Arts. 15–21 GDPR), and the right to withdraw consent without affecting prior lawful processing. To exercise these rights, contact us at the address above.

You may lodge a complaint with a supervisory authority. In the Netherlands, the competent authority is the Autoriteit Persoonsgegevens (AP). You may also contact any other EU supervisory authority of your choice.

7. No automated decision-making

We do not use profiling or automated decisions that produce legal or similarly significant effects under Art. 22 GDPR.

8. Updates

We may update this policy when our processes or the law change. The current version is always published on this page.