Privacy Policy

This Privacy Policy is also available in Spanish. The English version is provided for convenience; in the event of any discrepancy, the Spanish version shall prevail.

Last updated: October 30, 2026

1. Data Controller

In compliance with the General Data Protection Regulation (GDPR) and other applicable data protection legislation, you are informed that the controller of the personal data collected through this website is:

Owner: Israel Basurto Montelongo
NIF: Z2580195Z
Address: Calle Roteros 9 I1, 46003 Valencia
Email: info@lodoceramicstudio.com

Hereinafter, the “Controller”.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Data provided directly by the user

• First name and surname.
• Email address.
• Telephone number.
• Postal address.
• Information provided through contact forms.
• Information relating to bookings for courses, workshops, or events.
• Information necessary for managing orders or purchases, where applicable.
• Any other information the user chooses to provide to us voluntarily.

Data collected automatically

When you browse our website, certain technical data may be collected, such as:

• IP address.
• Browser type.
• Operating system.
• Browser language.
• Pages visited.
• Date and time of access.
• Information about the device used.
• Browsing and website usage data.

This data may be collected through cookies and similar technologies, as described in our Cookie Policy.

3. Purposes of Processing and Legal Bases

We process personal data for the following purposes and on the following legal bases:

Purpose	Data processed	Legal basis
Responding to inquiries sent via forms, email, or telephone	Name, email, telephone, and content of the inquiry	Taking steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR) and, where applicable, the Controller’s legitimate interest in responding to communications received (Art. 6.1.f GDPR)
Managing bookings and registrations for courses, workshops, or events	Identification and contact data necessary for the booking	Performance of a contract or taking steps prior to entering into a contract (Art. 6.1.b GDPR)
Managing orders, sales, and provision of services	Identification, contact, billing, and payment data	Performance of a contract (Art. 6.1.b GDPR)
Complying with tax, accounting, and administrative obligations	Billing data and related documentation	Compliance with a legal obligation (Art. 6.1.c GDPR)
Sending commercial communications about activities, courses, exhibitions, or studio news	Name and email	Consent of the data subject (Art. 6.1.a GDPR)
Ensuring website security, preventing misuse, and maintaining proper technical operation	IP address, technical records, and browsing data	The Controller’s legitimate interest in ensuring the security and operation of the website (Art. 6.1.f GDPR)
Obtaining website usage statistics through analytics cookies, where applicable	Browsing and usage data	Consent of the data subject (Art. 6.1.a GDPR)

Where processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.

4. Recipients of the Data

Personal data will not be sold or disclosed to third parties, except where legally required or where necessary for the provision of the services requested.

Certain providers acting as data processors may have access to personal data, including:

• The website’s web hosting provider.
• Maintenance and technical support providers.
• Brevo (Sendinblue SAS), used for managing commercial communications and forms, where applicable.
• Email service providers.
• Payment providers, where online purchases or bookings are made.

All providers acting as data processors are bound by the corresponding data processing agreements in accordance with Article 28 of the GDPR.

The Polylang and WP Super Cache plugins are technical tools used for multilingual management and website performance optimization. Their use does not in itself involve any disclosure of personal data to third parties other than that arising from the website’s hosting and maintenance services.

5. International Data Transfers

Some technology providers used on this website may be located outside the European Economic Area.

Where international data transfers take place, they will be carried out only with the appropriate safeguards provided for by applicable regulations, including:

• European Commission adequacy decisions.
• Standard Contractual Clauses approved by the European Commission.
• Other legally recognized safeguards.

You may request additional information about these safeguards using the contact details provided in this policy.

6. Data Retention

Personal data will be kept only for as long as necessary to fulfill the purpose for which it was collected and to address possible legal liabilities.

In general:

• Inquiries made through contact forms or email will be kept for a maximum of 3 years from the last communication.
• Data relating to bookings, customers, orders, billing, and provision of services will be kept for the duration of the contractual relationship and, thereafter, for 6 years, without prejudice to longer periods required by applicable tax, fiscal, or accounting regulations.
• Data used for sending commercial communications will be kept until the data subject withdraws their consent or requests erasure.
• Data obtained through analytics cookies will be kept in accordance with the periods stated in the Cookie Policy and, in any case, for a maximum of 13 months, unless applicable regulations establish a shorter period.

Once the retention periods have ended, the data will be securely deleted or anonymized.

7. Rights of Data Subjects

Data subjects may exercise the following rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right not to be subject to automated decision-making where applicable.

To exercise these rights, you may send a request to:

Email: info@lodoceramicstudio.com

The Controller will respond to the request within a maximum of one month from receipt, unless applicable regulations allow an extension of that period in cases of particular complexity.

The request must allow the requester’s identity to be reasonably verified.

If you consider that your rights have not been respected, you may lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

8. Commercial Communications

We will only send electronic commercial communications when:

• The user has given their express consent; or
• A prior contractual relationship exists and the communication relates to products or services similar to those previously contracted, in accordance with applicable regulations.

The user may unsubscribe at any time using the link included in the communications or by contacting us.

9. Minors

This website is not directed at children under 14 years of age.

We do not knowingly collect personal data from minors without the corresponding authorization of those holding parental authority or guardianship.

If it is found that data from a minor has been collected without the required authorization, such data will be deleted as soon as possible.

10. Security Measures

The Controller applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in order to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

However, no transmission over the Internet can guarantee absolute security.

11. Social Media

We may maintain profiles on various social media platforms.

Users’ interaction with these profiles will be governed by the privacy policies of each platform, without prejudice to the processing carried out by the Controller within its own responsibilities.

12. Cookie Policy

This website uses cookies and similar technologies.

Detailed information about the cookies used, their purposes, retention periods, and consent management mechanisms is available in our Cookie Policy, managed through the Complianz platform.

13. Changes to This Policy

We reserve the right to modify this Privacy Policy to adapt it to legislative, case law, or technical changes.

The current version will always be the one published on this website, showing the date of the last update.