Privacy Policy

The data controller is:

ATELIA, a French simplified single-shareholder joint-stock company (SAS) with share capital of €1,000.
Registered office: 15 rue Saint-Exupéry, 44350 Guérande, France.
RCS Saint-Nazaire No. [to be completed after registration].
Represented by its Chairman, Mr. Martin Latté.
Contact e-mail address: ateliadesign.contact@gmail.com.

(Hereinafter "ATELIA", "we", "us", or "our").

This policy applies to any person (creator, brand, textile industry company, factory or industrial partner, or any other user) using:

• our website [website address to be completed];
• our digital platform and our tools for generating designs, 3D visuals, technical sheets, and tech packs;
• our B2B matchmaking services between creators, brands, and manufacturing factories;
• our complementary services (subscriptions, consulting, support, training, customer support).

Depending on your use of our services, we may collect the following categories of data:

a) Identification and account data
Last name, first name, e-mail address, password (encrypted), job title, company or brand name, phone number.

b) Professional data
Information about your company (company name, SIREN/SIRET number, industry), information relating to your projects, designs, technical sheets, tech packs, and other content you import or generate on the platform.

c) Billing data
Billing address, purchase and subscription history. Banking data itself is processed directly by our payment provider (see section 6).

d) Connection and usage data
IP address, browser type, pages viewed, dates and times of connection, browsing data collected via cookies and trackers (see section 8).

e) Communications
Messages exchanged via our matchmaking messaging system, correspondence with our customer support.

f) Data generated by artificial intelligence
Visuals, designs, or technical documents generated from your requests, as well as the metadata associated with these generations.

Your data is retained:

• Account data: for the entire duration of the contractual relationship, then archived for the period necessary to comply with our legal obligations (in particular accounting and tax obligations, generally 10 years);
• Billing data: 10 years in accordance with accounting obligations;
• Prospecting data: 3 years from the last contact, unless you object;
• Cookies and trackers: 13 months maximum;
• AI-generated data (designs, tech packs): for the duration of your account, or for the period you choose in your settings, unless a longer legal retention obligation applies.

These periods are indicative and must be validated according to our actual practice and our industry obligations.

Your data may be shared, to the extent necessary, with the following categories of recipients:

• ATELIA's authorized personnel;
• other users of the platform, strictly within the scope of the B2B matchmaking you initiate or accept (e.g. sharing tech packs with a partner factory that you select);
• our technical subcontractors, in particular:
  • Hosting, authentication, database, and storage: Lovable / Supabase;
  • Payment provider: Stripe;
  • E-mailing and customer support tools: [to be completed];
  • Audience analytics tools: [to be completed];
  • Artificial intelligence model provider(s) used for design generation: [to be completed];
• administrative or judicial authorities, when required by law.

Each of these subcontractors is contractually required to comply with applicable data protection regulations.

Some of our providers (hosting, AI tools, support tools) may be located outside the European Union, notably in the United States. In such cases, we ensure that these transfers are governed by appropriate safeguards, such as:

• the European Commission's standard contractual clauses;
• a European Commission adequacy decision (where applicable, e.g. the EU-US Data Privacy Framework);
• or any other mechanism recognized by the GDPR.

Our website and platform use cookies and similar technologies to:

• ensure the technical operation of the site (strictly necessary cookies, no consent required);
• measure audience and improve our services (subject to your consent);
• where applicable, for advertising or personalization purposes (subject to your consent).

On your first visit, a banner lets you accept, refuse, or configure non-essential cookies. You can change your choices at any time via the cookie management link [to be completed] or via your browser settings.

ATELIA implements appropriate technical and organizational measures to protect your data against any unauthorized access, loss, alteration, or disclosure, including: password encryption, access control, secure hosting, and regular backups.

In the event of a data breach likely to result in a risk to your rights and freedoms, we undertake to notify the CNIL and, where applicable, the individuals concerned, in accordance with Articles 33 and 34 of the GDPR.

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access: obtain confirmation that your data is being processed and obtain a copy of it;
• Right to rectification: correct inaccurate or incomplete data;
• Right to erasure: request the deletion of your data, in the cases provided for by law;
• Right to restriction of processing;
• Right to portability: receive your data in a structured, commonly used format;
• Right to object, notably to commercial prospecting;
• Right to withdraw your consent at any time, where processing is based on it;
• Right to define directives regarding the fate of your data after your death;
• Right to lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés — CNIL) — www.cnil.fr.

To exercise these rights, you may contact us at the following address: ateliadesign.contact@gmail.com, providing proof of your identity. We undertake to respond within a maximum period of one month.

ATELIA has not appointed a Data Protection Officer (DPO). For any question regarding the protection of your data, you may contact us at ateliadesign.contact@gmail.com.

ATELIA reserves the right to modify this policy at any time, in particular to comply with any legal, regulatory, or technical developments. The version in force is the one published on our website, together with its last update date.

For any question regarding this privacy policy or the processing of your personal data:

ATELIA
15 rue Saint-Exupéry, 44350 Guérande, France
E-mail: ateliadesign.contact@gmail.com

If you wish to delete your Atelia account and all associated personal data, you may request this by sending an email to ateliadesign.contact@gmail.com. Please include "Account Deletion Request" in the subject line of your email. We will process your request and permanently delete your data within 30 days of receiving your email.