Needlework Atelier Stacked (“we”, “us”), located at Oudegracht 158, 3511 AZ Utrecht, Netherlands, is the controller of personal data collected through atelierstacked.run and in the studio. We process data in line with the General Data Protection Regulation (GDPR / AVG) and the Dutch Uitvoeringswet AVG. Questions may be sent to [email protected] or by post to the address above. You may also contact the Dutch supervisory authority, the Autoriteit Persoonsgegevens (AP), at autoriteitpersoonsgegevens.nl.
What we collect
We collect information you provide when booking classes, workshops, commissions, finishing services, or when using the contact form: name, email address, telephone number if given, message content, and preferred dates. In the studio we may keep paper or digital notes about project preferences and payment status. Technical data such as cookie preferences stored in your browser may be recorded when you use our cookie controls.
Purposes and legal bases
We use your data to respond to enquiries, schedule sessions, fulfil commissions, issue invoices, and meet bookkeeping duties. Legal bases include performance of a contract (or steps prior to a contract), our legitimate interest in operating a small atelier and improving quiet site usability, and legal obligations for tax records. Where we rely on consent — for optional analytics cookies — you may withdraw it at any time via the cookie settings or by writing to us.
Retention and sharing
Enquiry messages are kept up to twenty-four months unless a longer relationship continues. Invoices and booking records are retained for the periods required under Dutch tax law. We do not sell personal data. Service providers who host email or process payments act as processors under agreements that require confidentiality and GDPR-compliant handling. Transfers outside the European Economic Area occur only with appropriate safeguards.
Your rights
You have the right to access, rectify, erase, restrict, or object to certain processing, and the right to data portability where applicable. You may lodge a complaint with the Autoriteit Persoonsgegevens. To exercise rights, email [email protected] with enough detail for us to verify your request. We respond within one month, or explain if an extension is needed under the GDPR.
Last updated: August 2026.