Privacy Policy

1. Controller

The controller is Eterna Atelier, Switzerland. For privacy questions or to exercise your rights, contact info@eterna-atelier.com.

2. Data we collect

We may process the following categories of personal data:

• information you submit in the commission form, including your name, email address, optional phone number, project type, project location, and project details;
• the content and metadata of emails or other correspondence you send us;
• basic technical and security logs generated when the website is requested, such as IP address, timestamp, requested page, user agent, and diagnostic information.

We do not use this website to collect special-category data and ask that you do not include such information in a commission request.

3. Purposes and legal bases

• Commission requests and correspondence: to respond, assess feasibility, prepare a proposal, and take steps at your request before entering into a contract.
• Website delivery and security: to operate, protect, troubleshoot, and prevent abuse of the website, based on our legitimate interests in providing a secure service.
• Legal and administrative obligations: to retain or disclose information when required by applicable law.

Where the EU or UK GDPR applies, the corresponding legal bases are Article 6(1)(b), Article 6(1)(f), and Article 6(1)(c). We do not use commission data for automated decision-making or profiling.

4. Service providers and recipients

The website is hosted by Vercel. Commission requests may be delivered through Resend when the email service is configured, and then handled through our email provider. These providers process data on our behalf to provide hosting, security, and email delivery. We may also disclose data to professional advisers or authorities where legally required.

The WhatsApp link is optional. If you follow it, you leave this website and WhatsApp/Meta processes your information under its own privacy terms. No data is sent to WhatsApp merely because you visit this website.

5. International transfers

Some service providers may process data outside Switzerland or the European Economic Area. Where required, transfers are protected by an adequacy decision, recognised standard contractual clauses, or another lawful safeguard. Information about a specific transfer can be requested using the contact address above.

6. Retention

Commission enquiries are normally retained for up to 24 months after the last substantive contact, unless the enquiry leads to a contract or a longer period is required for legal, accounting, or dispute-resolution purposes. Operational logs are retained according to the hosting provider’s security and diagnostic retention settings. Data is deleted or anonymised when it is no longer needed.

7. Your rights

Depending on the law applicable to you, you may request access, correction, deletion, restriction, objection, or data portability. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, the supervisory authority in your country. We may ask for information needed to verify your identity before acting on a request.

8. Security

We use proportionate technical and organisational measures designed to protect personal data. No internet transmission or storage system can be guaranteed to be completely secure.

9. Changes to this notice

We may update this notice when our services or legal obligations change. The latest version and revision date will always be published on this page.