Privacy POlicy

Last updated: 12 August 2026

1. Who controls your personal data

The data controller is Ewa Walkowska, trading as Artive Workshop, P. IVA 13322350011, Via Valperga Caluso 1d, San Salvario, Turin, Italy.

Email: info@artiveworkshop.com
Telephone/WhatsApp: +39 352 044 6801

No Data Protection Officer has been appointed because Artive is not currently required to appoint one.

2. Who this policy applies to

This policy explains how Artive processes personal data relating to website visitors, people making enquiries, students, workshop or event participants, newsletter subscribers, parents or guardians, and children or teenagers whose details are supplied by a parent or guardian.

Parents and guardians should submit information on behalf of minors. Children should not independently submit booking, contact or newsletter forms.

3. Data Artive may collect

Depending on how you interact with Artive, the following data may be processed:

• name, email address, telephone number and WhatsApp number;

• age or age group, and a parent’s or guardian’s details where the participant is a minor;

• the class, workshop, schedule or project in which you are interested;

• booking date and time, attendance, cancellations, rescheduling and package/payment status;

• information you choose to provide about artistic experience, interests, preferences or accessibility needs;

• messages sent through the website, email, WhatsApp or social media;

• billing and transaction information required for payments, invoices, accounting and tax obligations;

• newsletter subscription status and consent records;

• photography or video only where separate permission has been obtained;

• technical data such as IP address, browser, device, operating system, page viewed, referring page, approximate location, consent status and security logs;

• analytics and advertising measurement data where the required consent has been given.

Please do not submit health information or other sensitive personal data unless it is genuinely necessary to participate safely. If such information is necessary, Artive will limit its use and may request explicit consent where required.

4. Why Artive processes data and the legal basis

Purpose -> Legal basis

• Answer enquiries, discuss availability and take steps before enrolment -> Steps requested before entering a contract, Art. 6(1)(b) GDPR

• Register participants, manage bookings, attendance, packages, cancellations and provide classes -> Performance of a contract, Art. 6(1)(b) GDPR

• Process invoices, accounts and tax records -> Legal obligation, Art. 6(1)(c) GDPR

• Operate and secure the website, prevent abuse, maintain records and establish or defend legal claims -> Artive’s legitimate interests, Art. 6(1)(f) GDPR

• Send newsletters or non-essential promotional communications -> Consent, Art. 6(1)(a) GDPR

• Use optional analytics and advertising technologies -> Consent, Art. 6(1)(a) GDPR

• Publish identifiable photographs or videos -> Separate consent, Art. 6(1)(a) GDPR

• Protect a participant’s vital interests in a genuine emergency -> Art. 6(1)(d) GDPR, where applicable

Providing the data required for a booking or payment is necessary to deliver the requested service. If it is not provided, Artive may be unable to confirm the booking. Newsletter, photography, analytics and advertising consent is optional and may be withdrawn without affecting the lawfulness of earlier processing.

5. Website forms, Cal.com and the embedded booking calendar

The website uses forms for enquiries or interest lists and an embedded Cal.com calendar for trial-class bookings. The Cal.com embed is retained on the website and loads when a visitor reaches the booking area of the page.

When the embed loads, Cal.com and its infrastructure may receive technical information such as the visitor’s IP address, browser/device details, requested page, date and time, timezone and security information. The service may use functional cookies or browser storage needed for security, session handling, timezone/display preferences and the booking process. In the configuration tested on 12 August 2026, these functional Cal.com technologies loaded even after optional analytics and marketing consent was rejected.

If a visitor completes a booking, Cal.com processes the information entered in the form, which may include name, email address, telephone/WhatsApp number, SMS notification number, selected appointment, artistic experience or preferences and booking changes. Artive uses this information to administer the requested appointment and related communications.

Cal.com’s privacy information is available at cal.com/privacy.

6. Payments

Artive may provide payment links hosted by Stripe. Payment-card information is entered directly into Stripe’s environment and is not stored by Artive. Artive receives transaction details needed to confirm payment, manage bookings, issue invoices and keep accounting records. Stripe’s privacy information is available at stripe.com/privacy.

7. Maps, fonts, analytics and advertising measurement

The website embeds Google Maps and may load Google-hosted fonts. When these resources load, Google may receive technical request data such as IP address, browser information, requested resource, referring page and date/time. The rejection test performed on 12 August 2026 did not show Google cookies or Google local storage after optional cookies were rejected, but network requests to Google services still occurred.

The website also uses Google Analytics and Google Ads measurement through Google Consent Mode. When analytics or advertising storage is denied, consent-aware Google tags may send limited cookieless signals rather than writing analytics or advertising cookies. If the visitor consents, Google may use cookies and fuller measurement data for analytics, campaign measurement and attribution.

Google’s privacy information is available at policies.google.com/privacy and information about data from partner sites at policies.google.com/technologies/partner-sites.

More information about these technologies and how to change consent is provided in the Cookie Policy.

8. Communications, CRM and newsletter

Artive may communicate through Zoho Mail, telephone, WhatsApp Business, website forms and social-media messaging. If you choose WhatsApp or a social-media service, that provider also processes data under its own privacy terms.

Artive may record enquiries, follow-ups, class preferences, booking history and student administration information in Notion or another internal organisational system. Access is limited to Ewa and authorised people such as an intern or teacher who needs the information for their work and is required to keep it confidential.

Newsletters are sent only to people who have subscribed or otherwise given valid consent. The current newsletter provider is Hostinger Reach. Add its privacy-policy link here: https://www.hostinger.com/it/legal/politica-sulla-privacy. Every marketing email must include an unsubscribe method.

Provider policies: Zoho Privacy, WhatsApp Privacy, and Notion Privacy.

9. Who may receive the data

Personal data may be disclosed, only where necessary, to:

• website hosting, website-builder, security and technical-support providers, including Hostinger and Cloudflare infrastructure;

• Cal.com for booking and scheduling;

• Stripe and banking/payment providers;

• Zoho Mail, WhatsApp/Meta and other communication providers chosen by the user;

• Notion or another authorised CRM/administration provider;

• [[CONFIRMED NEWSLETTER PROVIDER]] for email subscriptions;

• Google for Maps, hosted resources, analytics and advertising measurement according to the visitor’s consent and the configuration described above;

• authorised interns, teachers, contractors and professional advisers, including the commercialista;

• public authorities, regulators or courts where required by law.

Artive does not sell personal data.

10. International data transfers

Some service providers may process data outside the European Economic Area, including in the United States. Where required, transfers are based on an adequacy decision, Standard Contractual Clauses or another safeguard recognised by the GDPR. Visitors should consult the linked provider policies for current transfer arrangements.

11. How long data is kept

• enquiries and interest-list records that do not lead to a booking: up to 12 months after the last meaningful contact;

• ordinary booking, attendance and client communications: for the active relationship and ordinarily up to 24 months afterwards, unless needed for a claim or legal obligation;

• contracts, invoices, payment and accounting records: generally 10 years or the longer period required by law or an ongoing dispute;

• newsletter data: until consent is withdrawn or the service ends, with limited records retained where necessary to document consent or an unsubscribe request;

• photography/video: until consent is withdrawn or the material is no longer needed, with periodic review;

• cookie and technical data: for the periods described in the Cookie Policy or set by the relevant provider;

• data needed for legal claims: until the applicable limitation period and any dispute have ended.

12. Your rights

Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time. You may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, at garanteprivacy.it.

To exercise your rights, write to info@artiveworkshop.com. Artive may need to verify your identity before completing a request.

13. Security

Artive uses reasonable organisational and technical measures appropriate to a small studio, including access controls, password protection, limited staff access and reputable service providers. No online system can be guaranteed to be completely secure.

14. Changes to this policy

This policy may be updated when Artive changes its services, providers or legal obligations. The current version and date will be published on this page. Material changes may also be communicated through the website or directly where appropriate.