Privacy Policy | The Clarinet Lab

1. Who is responsible
The Clarinet Lab – owner: Bernd Braendli
Krišjāņa Valdemāra iela 149, Office 118, LV-1013 Rīga, Latvia
Email: info@theclarinetlab.eu · Phone/WhatsApp: +371 22303096
If you have any question about your data, just write to us at info@theclarinetlab.eu.

2. What data we collect and why
• Repair inquiries and the Repair Designer: name, email, phone, country, instrument details, the work you choose and any message or photo you send. We use this to answer your inquiry and to prepare a quote (legal basis: steps prior to a contract, Art. 6(1)(b) GDPR).
• Student Plan: name of your university/academy and a photo of your student ID, only to check eligibility. The photo is deleted once it has been checked.
• Repairs and orders: contact and shipping address, instrument and repair details, invoices and payment information. We need this to carry out the repair or order, to ship it and to keep accounting records (Art. 6(1)(b) and (c) GDPR).
• Repair status page: each repair has a private status page with a personal link, so you can follow the progress of your instrument. Only people with the link can see it.
• Service reminders: after a repair we may send you one short, personal email when the next service is due (at most once a year). You can say "no thanks" at any time and we will not write again (legitimate interest, Art. 6(1)(f) GDPR).
• Newsletter: see section 3.

3. Newsletter
If you subscribe to our newsletter, we use your email address only to send you news from the workshop (new TCL barrels, stories from the bench, care tips), about once a month at most. We use the double opt-in procedure: you only receive the newsletter after you have confirmed your address via the link in our confirmation email. We store the time of your subscription and confirmation as proof of your consent (Art. 6(1)(a) GDPR).
The newsletter is sent with MailerLite (MailerLite Limited, Ireland / UAB "MailerLite", Lithuania). MailerLite may record whether an email was opened and which links were clicked, so we can see what readers find useful.
You can unsubscribe at any time with the link at the end of every newsletter or by writing to us. Your address is then removed from the newsletter list.

4. Service providers we use
We only share data with providers that we need to run the workshop, and only as far as necessary:
• Webador (website hosting and email, Netherlands)
• Web3Forms (delivery of website form messages to our email)
• Supabase (database for repairs and the repair status pages, EU region)
• Cloudflare (hosting of the repair status pages)
• Google (Google Calendar for workshop scheduling; Google Fonts for the display of the website)
• Zoho Invoice (invoices, EU data centre)
• bunq (payments, Netherlands)
• MailerLite (newsletter, EU)
• Shipping companies (Latvijas Pasts, DPD, FedEx and others) – only the details needed for delivery
Some of these providers may process data outside the EU (for example in the USA). In that case they use the safeguards required by the GDPR (EU Standard Contractual Clauses or the EU–US Data Privacy Framework).

5. Cookies
Our website shows a cookie banner. Cookies that are not strictly necessary are only used if you click "Accept". You can decline them, and you can change your choice at any time by deleting the cookies in your browser.

6. How long we keep data
• Inquiries without a repair: up to 12 months.
• Repairs, invoices and order data: as long as required by Latvian accounting and tax law (usually 5 years), and for the 12-month warranty period.
• Newsletter: until you unsubscribe.
• Student ID photos: deleted after the check.

7. Your rights
You can ask us at any time for access to your data, for correction or deletion, for restriction of processing, for a copy of your data (data portability), and you can object to processing based on legitimate interest. You can withdraw any consent (for example for the newsletter) at any time with effect for the future.
You also have the right to lodge a complaint with a data protection authority – in Latvia: Datu valsts inspekcija (Data State Inspectorate), www.dvi.gov.lv.

8. Changes
We may update this privacy policy when our services change. The current version is always available on this page.