Privacy policy

This notice explains how Harbour Clay Rooms (controller: Nina Vos, KNSM-laan 151, 1019 LL Amsterdam, Netherlands) processes personal data when you use sbertpeelm.hair or contact us. Processing follows the EU General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG (UAVG).

1. Controller

Nina Vos · Harbour Clay Rooms · KNSM-laan 151 · 1019 LL Amsterdam · Netherlands
Email: [email protected] · Phone: +31 20 555 0933

2. Data we process

• Contact and enquiry details you send (name, email, subject, message, and any course, workshop, or membership preferences).
• Booking and membership administration data needed to run studio access, firings, and payments.
• Technical data needed to deliver the website (e.g. IP address in server logs, browser type) for a limited period.
• Cookie preferences stored locally in your browser under the key sbertpeelm_cookie.

3. Purposes and legal bases

• Responding to enquiries and arranging courses, workshops, membership, or visits — Art. 6(1)(b) GDPR (pre-contractual steps / contract) or Art. 6(1)(f) (legitimate interest in answering messages).
• Operating and securing the website — Art. 6(1)(f) GDPR.
• Optional analytics or marketing cookies — only with your consent, Art. 6(1)(a) GDPR; you may withdraw consent at any time via the cookie banner or by clearing site data.

4. Retention

Enquiry data is kept as long as needed to handle your request and any follow-up booking or membership, then deleted or restricted unless longer storage is required by commercial or tax law (including Dutch fiscal retention rules where applicable). Server logs are rotated on a short cycle. Cookie consent records remain until you clear them or change your choice.

5. Recipients

We do not sell personal data. Hosting, email, and payment providers may process data on our behalf under Art. 28 GDPR contracts. Transfers outside the EEA occur only with appropriate safeguards where applicable.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability, and objection (Arts. 15–21 GDPR), and the right to withdraw consent without affecting prior lawful processing. To exercise these rights, contact us at the address above.

You may lodge a complaint with a supervisory authority. In the Netherlands, the competent authority is the Autoriteit Persoonsgegevens (AP). You may also contact any other EU supervisory authority of your choice.

7. No automated decision-making

We do not use profiling or automated decisions that produce legal or similarly significant effects under Art. 22 GDPR.

8. Updates

We may update this policy when our processes or the law change. The current version is always published on this page.