Privacy policy

This English translation is provided for convenience only. In the event of any discrepancy, the French version prevails.

This policy describes how the personal data of visitors to and customers of the website atelier189.com is collected, used and protected, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the amended loi « Informatique et Libertés » of 6 January 1978 (French Data Protection Act).

1. Data controller

The Atelier 189 brand, operated by Karelle FORESTIER, an entrepreneur supported by the business incubator GEAI (36 allée Vivaldi, 75012 Paris - SIRET 433 545 357 000 33) under a business project support contract (CAPE), is the data controller. Contact: contact@atelier189.com.

2. Data collected

We collect only the data that is necessary:

  • Identity and contact details: surname, first name, postal address, email address, telephone number.
  • Order data: products ordered, amount, order history, personalisation details (initials).
  • Payment data: processed directly by our secure payment providers (Shopify Payments, PayPal). We never have access to your bank card numbers.
  • Browsing data: via cookies (see section 9), pages viewed, device, audience measurement data.

3. Purposes and legal bases

  • Processing and delivering orders and providing customer service: performance of the contract.
  • Sending the newsletter: consent (you may unsubscribe at any time).
  • Complying with accounting and tax obligations: legal obligation.
  • Improving the website and preventing fraud: legitimate interest.

4. Recipients of the data

Your data is intended for Atelier 189 and the GEAI business incubator and is shared, strictly to the extent necessary, with our service providers: Shopify (platform and hosting), the payment providers (Shopify Payments, PayPal), the carriers responsible for delivery and, where applicable, our email-sending tool. These providers use your data solely for the purposes of the services entrusted to them. Your data is never sold.

5. Transfers outside the European Union

Some providers (in particular Shopify) may process data outside the European Union. These transfers are subject to appropriate safeguards within the meaning of the GDPR (standard contractual clauses of the European Commission or equivalent mechanisms), in order to ensure an adequate level of protection.

6. Retention periods

  • Order and billing data: kept for the duration of the business relationship, then archived in accordance with legal obligations (up to 10 years for accounting records).
  • Marketing data (newsletter): kept until consent is withdrawn or for 3 years from the last contact.
  • Cookies: maximum period of 13 months (or in accordance with the preferences you have expressed).

7. Security

Atelier 189 and its service providers implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure (encrypted connections, secure payment, restricted access).

8. Your rights

In accordance with the GDPR, you have the right to access, rectify and erase your data, to object to and restrict its processing, and to data portability, as well as the right to withdraw your consent at any time and to set out instructions regarding what happens to your data after your death.

To exercise these rights, write to contact@atelier189.com. You may also lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority - www.cnil.fr).

9. Cookies

The website uses cookies that are necessary for it to function and, subject to your consent, audience measurement and personalisation cookies. On your first visit, a banner allows you to accept or refuse non-essential cookies; you can change your choices at any time.

10. Contact

For any question about this policy or the processing of your data: contact@atelier189.com.