Privacy Policy

Atelier Synål ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and share personal data when you use our website, contact us or visit our atelier in Aarhus. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Danish Data Protection Act (Databeskyttelsesloven, Act No. 502 of 23 May 2018, as amended).

1. Data controller

The data controller responsible for your personal data is:

Atelier Synål
Klostergade 28
8000 Aarhus, Denmark
Email: [email protected]
Phone: +45 86 12 47 53

2. Categories of personal data we collect

Depending on how you interact with us, we may process:

• Identity and contact details (name, email address, telephone number, postal address)
• Appointment and fitting information (garment descriptions, measurements, project notes, event dates)
• Communication records (emails, messages and call notes)
• Payment and invoicing information where applicable
• Technical data from website use (IP address, browser type, pages visited) when cookies are used — see our Cookie Policy

We do not routinely process special categories of personal data as defined in Article 9 GDPR. If such data were ever necessary, we would obtain explicit consent or rely on another valid legal basis.

3. Purposes and legal bases

We process personal data for the following purposes and on the following legal bases under GDPR Article 6:

• Providing alterations, bridal fittings and sewing services — performance of a contract or steps prior to entering a contract (Art. 6(1)(b))
• Responding to enquiries and booking appointments — legitimate interest in operating our business and communicating with clients (Art. 6(1)(f)), or contract (Art. 6(1)(b))
• Invoicing and accounting — legal obligation under Danish bookkeeping and tax rules (Art. 6(1)(c)), including the Danish Bookkeeping Act (Bogføringsloven)
• Website analytics — consent where required (Art. 6(1)(a)); you may withdraw consent at any time via cookie settings
• Legal claims and compliance — legitimate interest or legal obligation (Art. 6(1)(c) and (f))

4. Retention

We keep personal data only as long as necessary for the purposes described above. Enquiry messages are typically retained for up to 24 months. Client and project records related to completed work may be kept for up to 5 years where useful for follow-up fittings. Accounting records are retained for the periods required by Danish law (generally 5 years from the end of the relevant financial year).

5. Sharing and processors

We do not sell your personal data. We may share data with service providers who assist us (for example email hosting or IT support), bound by data processing agreements, and with authorities when required by law. Transfers outside the EU/EEA occur only with appropriate safeguards under GDPR Chapter V.

6. Your rights

Under GDPR you have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent where processing is based on consent. You also have the right not to be subject to solely automated decision-making that produces legal or similarly significant effects; we do not carry out such profiling.

To exercise your rights, contact us at [email protected]. We respond within one month, subject to GDPR timelines.

7. Complaints — Datatilsynet

If you believe we process your personal data unlawfully, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Website: www.datatilsynet.dk
Email: [email protected]
Phone: +45 33 19 32 00

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, taking into account the nature of the data and the risks involved.

9. Changes

We may update this Privacy Policy from time to time. The date at the top of this page indicates the latest revision. Significant changes will be highlighted on this website.