← Back to homepage

Privacy Policy (GDPR)

Grain of Design | Martina Kunstovná

1. Data Controller

The data controller pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is:

2. Categories of Personal Data Processed

We process only personal data necessary for providing our services, organising workshops and operating the website. This includes in particular:

• Identification data: first name and surname.
• Contact data: e-mail address and telephone number.
• Billing data: address, company registration number, VAT number (where an invoice is requested).
• Workshop participation data: selected date, reservation details and any voluntarily provided information necessary for organising the workshop (e.g. dietary requirements).
• Photographs and short video recordings taken during workshops capturing the event and its atmosphere.
• Communications: content of messages sent via e-mail or the contact form.
• Technical data: IP address, cookies and analytical data about website visits.

3. Purpose and Legal Basis for Processing

We process your personal data on the following legal bases:

Performance of a contract

• processing registrations,
• organising workshops,
• providing services,
• communicating with participants.

Legitimate interests

• order records,
• website security,
• taking documentary photographs at workshops for promotional purposes of the Grain of Design brand,
• sending news to existing customers.

Legal obligation

• bookkeeping,
• tax records.

Consent

• sending newsletters to individuals who are not our customers,
• use of analytical and marketing cookies.

4. Data Processors

To operate the studio, we use the services of verified partners who have access to personal data only to the extent necessary and who comply with GDPR requirements. These include in particular:

• Hosting and infrastructure: Replit, Inc.
• Analytics: Google LLC (Google Analytics).
• E-mail marketing: Ecomail.cz, s.r.o.
• Payment services: Stripe, Inc. (the controller has no access to payment card data).
• E-mail services: FORPSI (INTERNET CZ, a.s.).
• Accounting: external accountant or accounting software provider.

Some providers (such as Stripe, Google or Replit) are based or have servers outside the European Union. The transfer of personal data takes place in accordance with applicable law, in particular on the basis of the European Commission's adequacy decisions (EU–U.S. Data Privacy Framework) or standard contractual clauses.

5. Retention Periods

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected.

• Tax and accounting documents: 10 years.
• Contractual communications and project documentation: 3 years from the end of the collaboration.
• Communications related to workshop organisation: 3 years from the date of the workshop.
• Marketing data and newsletter subscriptions: until consent is withdrawn or an objection is raised, but no longer than 5 years from the last interaction.
• Analytical data and cookies: as configured by individual tools (typically 14–26 months).

6. Your Rights

In relation to the processing of your personal data, you have the right to:

• request access to your personal data,
• request correction of inaccurate or outdated data,
• request erasure of personal data where the reason for processing no longer applies,
• request restriction of processing,
• receive your data in a portable format,
• object to processing based on legitimate interests (e.g. to receiving marketing communications or to processing of photographs of yourself for marketing purposes),
• lodge a complaint with the supervisory authority.

Grain of Design does not carry out automated decision-making or profiling.

7. Photography at Workshops

During workshops, documentary photographs and short video recordings capturing the course and atmosphere of the event may be taken on the basis of legitimate interests. These materials are used solely for promotional purposes of the Grain of Design brand on its website, social media or printed promotional materials.

If a participant does not wish to be photographed or filmed, they simply need to inform the instructor upon arrival at the workshop. Their wishes will be fully respected.

8. Cookies

The website uses cookies to ensure its basic functionality and to analyse visitor traffic. Analytical cookies (Google Analytics) are activated exclusively on the basis of your voluntary consent given via the cookie banner.

You can change your cookie settings at any time in the website footer or directly in your internet browser.

9. Contact

If you have any questions or wish to exercise your rights regarding the protection of personal data, you can contact us at:

We will respond to your requests without undue delay, and within the time limits set by applicable law.

10. Final Provisions

Grain of Design reserves the right to update this Privacy Policy from time to time, in particular in response to changes in legislation or the technical services used. The current version is always published on the website www.grainofdesign.cz.

This Privacy Policy is valid and effective from 20 July 2025.
Last updated: 5 July 2026.