PRIVACY POLICY

PERSONAL ATELIER
Effective Date: 4 March 2026

1. Data Controller

Rosa Bayram
PERSONAL ATELIER
[Address see Imprint]

2. Discretion & Confidentiality Philosophy

PERSONAL ATELIER operates with elevated standards of confidentiality.
All personal data is processed with the utmost care, minimal scope, and strict purpose limitation.

3. Categories of Personal Data

We may process:

Full name
Email address
Telephone number
Billing information
Styling preferences and visual materials
Personal development information voluntarily disclosed
Website usage data (IP address, browser type, device information)

4. Legal Basis (EU Clients – GDPR)

Where applicable, processing is based on:

Art. 6(1)(b) GDPR – Contract performance
Art. 6(1)(a) GDPR – Consent
Art. 6(1)(f) GDPR – Legitimate interest

For Swiss clients, processing is based on the revised Swiss Federal Act on Data Protection (revDSG).

5. Payment Processing

Payments may be processed via PayPal. When selecting PayPal, payment data is transmitted directly to PayPal. PERSONAL ATELIER does not store full payment credentials. Processing is based on contractual necessity.

6. Instagram & Social Media Presence

PERSONAL ATELIER maintains a professional presence on Instagram. Instagram is operated by Meta Platforms.

When you visit our Instagram profile:

Meta may process personal data such as IP address, device data, interaction data, and cookies.
Data processing may occur outside Switzerland and the EU, including the United States.
Data transfers are based on applicable adequacy decisions or standard contractual clauses where required.

We have no full control over data processing activities conducted by Meta. Further information can be found in Instagram’s own privacy documentation.

7. Social Media Interaction

If you contact us via Instagram (e.g., direct messages), your data will be processed solely for communication purposes and potential service inquiries. Such communication may involve cross-border data transfers.

8. International Data Transfers

Due to the international nature of our services, personal data may be processed in countries outside Switzerland and the EU. Where required, appropriate safeguards are implemented to ensure an adequate level of data protection.

9. Data Retention

Personal data is retained only as long as:

necessary for contractual performance
required by law
justified by legitimate interest

10. Your Rights

Under Swiss revDSG and, where applicable, GDPR, you have the right to:

Access your personal data
Rectification
Erasure
Restriction of processing
Data portability (EU clients)
Withdraw consent

Requests may be directed to: info@personalatelier.com

11. Website Cookies

This website may use essential cookies to ensure technical functionality. If analytics or marketing tools (e.g., Meta Pixel, Google Analytics) are implemented in the future, this Privacy Policy will be updated accordingly.