Controller
The controller of your personal data is Joone Ateljee, operating from Telliskivi 60a, 10412 Tallinn, Estonia. You can reach us at [email protected] or +372 641 3382. We process data in line with Regulation (EU) 2016/679 (GDPR) and the Estonian Personal Data Protection Act (isikuandmete kaitse seadus).
What we collect
When you enquire about classes or open studio, we may collect your name, email address, phone number if provided, message content, and preferred session times. If you book and pay for tuition, we keep booking records, invoices, and payment references needed for accounting. Website logs may include IP address, browser type, and pages visited for security and basic diagnostics.
We do not ask for special-category data for ordinary bookings. If you voluntarily share health or accessibility notes so we can arrange seating, we use that information only for that purpose and keep it limited.
Purposes and legal bases
We process enquiries to take steps at your request before a contract (GDPR Art. 6(1)(b)). We process booking and invoice data to perform the contract and to meet legal accounting obligations (Art. 6(1)(b) and 6(1)(c)). We may send strictly operational messages about schedule changes based on legitimate interests in running the studio (Art. 6(1)(f)), balanced against your rights. Optional analytics cookies run only with consent (Art. 6(1)(a)).
Retention
Enquiry messages without a booking are normally deleted or anonymised within twelve months. Booking and invoice records are retained for the periods required by Estonian accounting and tax rules. Cookie consent choices are stored in your browser until you clear them or change preferences.
Sharing
We do not sell personal data. We may use processors such as email hosting or accounting tools under written agreements that require GDPR-compliant handling. Data stays in the European Economic Area unless a transfer uses an approved safeguard such as standard contractual clauses.
Your rights
You may request access, rectification, erasure, restriction, or portability where applicable, and you may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing. To exercise rights, email [email protected]. We will respond within one month unless the request is complex.
Complaints
If you believe your data is handled unlawfully, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, website www.aki.ee. We encourage you to contact us first so we can resolve the issue quickly.
Updates
We may update this policy when our practices or legal requirements change. The current version is always published on this page. Last updated: August 2026.