Privacy Policy

01   INTRODUCTION

Casper Smits is a design studio creating wooden sculptures and sculptural objects, including the Organic Pressure collection. This Privacy Policy explains how the studio (“we”, “us”, “our”) handles personal data when you visit caspersmits.com, contact us, subscribe to updates or purchase or commission a piece.

We are responsible for the processing described in this policy. For privacy questions or requests, contact info@caspersmits.com.

02   PERSONAL DATA

Depending on your interaction with the studio, we may process:

• Your name, email address and telephone number.

• Information you share in correspondence, enquiries and commission requests.

• Billing and delivery details, order information and payment status.

• Newsletter subscription details and communication preferences.

• Technical information needed to operate and protect the website, such as IP addresses, browser information and error logs.

• Website usage information collected through any enabled analytics or marketing tools, subject to applicable consent requirements.

We collect information relevant to the purpose concerned. Information needed to fulfil an order must be provided for us to complete it. Subscribing to studio updates is optional and is separate from making a purchase.

03   PURPOSES AND LEGAL GROUNDS

We use personal data to:

• Discuss enquiries and prepare quotations: to take steps at your request before entering into a contract, or, for general correspondence, on the basis of our legitimate interest in responding to people who contact the studio.

• Manage purchases, commissions, payments, delivery and related service: to perform our agreement with you.

• Keep invoices and business records: to meet legal obligations.

• Protect the website and investigate technical problems: on the basis of our legitimate interest in secure and reliable services.

• Send newsletters following your subscription: with your consent.

• Use analytics or marketing technologies requiring consent: with your consent.

Where we rely on legitimate interests, we assess necessity and balance our interests against your rights and reasonable expectations. We do not reuse your data for an incompatible purpose without an appropriate legal basis.

04   SERVICE PROVIDERS AND DISCLOSURE

Where necessary, we share relevant information with providers supporting website hosting, forms, email, payment processing, accounting, delivery and newsletter distribution.

Providers acting on our behalf must follow appropriate instructions and contractual safeguards. Some recipients, including payment providers, may also process certain information as independent controllers for their own legal obligations.

We do not sell personal data. Information may also be disclosed where legally required or where necessary to establish, exercise or defend legal claims.

05   INTERNATIONAL TRANSFERS

Some service providers may process data outside the European Economic Area. Such transfers require a valid legal mechanism, such as an applicable adequacy decision or appropriate safeguards, including the European Commission’s Standard Contractual Clauses and additional measures where needed.

You can contact info@caspersmits.com for information about transfers relevant to your data and to request a copy or explanation of the applicable safeguards.

06   RETENTION

We retain personal data for the period needed for its purpose:

• Enquiries that do not result in an order: up to twelve months after the last substantive contact, unless an ongoing matter requires longer retention.

• Orders and commissions: for fulfilment and aftercare, followed by retention of only the information needed for legal obligations or relevant claims within applicable limitation periods.

• Tax and accounting records: generally seven years, or a longer period where specifically required, such as ten years for certain VAT One Stop Shop records.

• Newsletter information: until you unsubscribe. Afterwards, we retain only information needed to respect your opt-out and, where necessary, demonstrate earlier consent.

• Technical logs: up to thirty days, unless relevant records are needed to investigate or resolve a particular security incident.

• Cookies and related data: for the individual periods stated in the website’s cookie information.

Where an ongoing dispute justifies longer retention, we limit it to the relevant information and delete it when that need ends.

10   AUTOMATED DECISIONS AND UPDATES

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

We may update this policy to reflect changes in our activities or legal requirements. The current version is available on this page. We provide further notice of material changes where required. An updated policy does not itself constitute your consent to new processing.