Privacy Policy

1. Data Controller Identification

The data controller responsible for the processing of personal data on pelleatelier.com is:

2. Scope & Legal Basis for Processing

We process your personal data strictly in accordance with GDPR provisions under the following legal bases:

• Contract Performance (Art. 6(1)(b) GDPR): When you order a jacket, we collect your name, email, delivery address, and phone number to fulfill and deliver your purchase.
• Consent (Art. 6(1)(a) GDPR): For optional marketing communications, newsletters, and non-essential analytical cookies accepted via our cookie consent banner.
• Legal Obligation (Art. 6(1)(c) GDPR): Retention of invoices and transaction records for statutory commercial and tax compliance under European VAT regulations.

3. Trusted Data Processors

We share data only with certified service providers bound by strict Data Processing Agreements (DPA):

• Stripe Payments Europe, Ltd. — Secure, encrypted payment execution. We do not store credit card numbers on our servers.
• DHL Express / DPD Europe — Transport and logistics for order delivery.
• Supabase Inc. — Encrypted database infrastructure and order record storage with EU data residency options.
• Resend, Inc. — Transactional dispatch of order confirmation and shipping notification emails.

4. Your Rights Under GDPR

As an EU data subject, you have the following rights at any time without cost:

• Right to access your stored personal data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (“Right to be Forgotten”) (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to lodge a complaint with a supervisory data protection authority (Art. 77 GDPR)

To exercise any of these rights, email our data protection officer at [email protected].

5. Cookies & Tracking

For information about the specific cookies we use and how to manage your consent, please review our Dedicated Cookie Policy.