Privacy & cookies
Last updated 21 October 2026
This page explains how DAPOTTERY Studio handles personal data when you visit dapotterystudio.com, enquire about a work, book a lesson or pay for a purchase. It follows the EU General Data Protection Regulation (GDPR) and Italian data protection law.
1. Who is responsible
The data controller is DAPOTTERY Studio, a sole-trader business of Daniel Christopher Pontoriero, Via Privata Giovanni Ventura 6, 20134 Milano (MI), Italy. P.IVA [P.IVA — TO FILL]. Email: info@dapotterystudio.com. Phone: +39 351 910 5942. We are a very small studio and do not need a Data Protection Officer. Write to the address above about anything concerning your data.
2. What we collect, why, and for how long
| When | Data | Why and legal basis | How long |
|---|---|---|---|
| You email us to reserve a work, book a lesson or ask about a commission | Name, email, phone (if you give it), your message, any images you send | To reply, confirm availability and prepare a quote. Steps taken at your request before a contract (GDPR art. 6.1.b) | [retention, e.g. 24 months — TO FILL] after the last contact, unless it becomes an order |
| You buy a work, lesson or commission | Name, email, phone, billing and shipping address, what you bought, payment status | To take payment, deliver, give support and keep tax records. Contract (6.1.b) and legal obligation (6.1.c) | Accounting and order records: 10 years (Italian tax and civil law) |
| You pay by Stripe link | Stripe collects your card or wallet details on its own page. We never see or store your full card number. We receive the payment status, card brand, last four digits and country | To take payment and prevent fraud. Contract (6.1.b) and legitimate interest in preventing fraud (6.1.f) | As above |
| You browse the site | Technical data: IP address, browser, pages requested, date and time | To run, secure and fix the website. Legitimate interest (6.1.f) | Hosting provider server logs, [days, per Vercel defaults — TO FILL] |
We do not sell your data, and we do not use it for profiling or automated decisions. We do not run a newsletter or advertising tools on this site.
3. Who we share it with
| Provider | Role | Where / safeguards |
|---|---|---|
| Stripe Payments Europe Ltd. | Payment processing and fraud prevention. Stripe is also an independent controller for its own legal duties | Ireland / EU. Transfers to the US rely on the EU–US Data Privacy Framework or Standard Contractual Clauses |
| Vercel Inc. | Website hosting | USA. Data Privacy Framework / SCCs |
| Google (Gmail) | Receiving and answering studio email | EU / USA. Data Privacy Framework / SCCs |
| Porkbun LLC | Domain registration and forwarding of studio email | USA. SCCs |
| Resend | Sending studio email from the info@ address | EU (Ireland) region |
| Shipping carriers ([carrier — TO FILL]) | Delivering your order | Name, address and phone as needed |
| Our accountant ([accountant — TO FILL]) | Bookkeeping and tax compliance | Italy |
4. Cookies
This site does not set cookies of its own and uses no analytics, advertising or social-media tracking. For that reason there is no cookie banner. If you pay through a Stripe link, Stripe sets technical and fraud-prevention cookies on its own payment page; they are needed to process the payment you asked for. If we ever add tools that need consent, they will load only after you accept, through a banner that lets you refuse as easily as accept.
5. Your rights
Under GDPR articles 15–22 you can ask us for a copy of your data, to correct it, to delete it where we are not legally required to keep it, to limit its use, to receive it in a portable format, and to object where we rely on legitimate interest. You can withdraw consent at any time where we rely on it. Write to info@dapotterystudio.com; we reply within one month.
You may also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority in the EU country where you live.
6. Security and children
The site runs over HTTPS, payments happen on Stripe's certified pages, and access to order data is limited to the studio and protected by strong passwords and two-factor authentication. The shop is not aimed at children under 14. Minors attending lessons must be booked by a parent or guardian.
7. Changes
If we change this page we update the date at the top.