Legal

Privacy Policy

Last updated: 16 July 2026

A. Who is responsible for your data

  • Controller: Nebixu Cesumo Studio, Staudgasse 33, 1180 Wien, Austria
  • Contact: [email protected], +43 800 5566 020
  • This policy applies to data collected through nebixu-cesumo.info and related class administration

B. What we collect and why

  • Contact form submissions: name, email, phone, and message content, used solely to respond to your inquiry
  • Shipping details for enrolled participants: name and delivery address, used to send clay kits and return packaging
  • Technical data: IP address, browser type, and page interactions, collected only where analytics cookies are accepted
  • We do not collect payment card data directly; any payment processing is handled by a separate, compliant payment provider

C. Legal basis for processing

  • Article 6(1)(b) GDPR: processing necessary to respond to inquiries and administer booked classes
  • Article 6(1)(a) GDPR: consent, for optional analytics and marketing cookies
  • Article 6(1)(f) GDPR: legitimate interest in maintaining basic site security and function

D. How long data is kept

  • Contact form inquiries are retained for up to 12 months unless a class booking follows
  • Shipping records tied to a booking are retained for the duration required by Austrian commercial and tax law
  • Cookie-based analytics data is retained according to the retention settings of the tool used, generally no longer than 14 months

E. Who else sees your data

  • Shipping partners, solely to deliver clay kits and collect return packages
  • Hosting and email providers, under data processing agreements where applicable
  • We do not sell personal data to third parties for their own marketing purposes

F. Your rights under the GDPR

  • Right of access, rectification, erasure, and restriction of processing
  • Right to data portability where technically feasible
  • Right to withdraw consent at any time without affecting prior lawful processing
  • Right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Wien

G. Cookies and similar technologies

Details on categories of cookies used, their purposes, and how to manage your preferences are set out separately in our Cookie Policy.