PRIVACY POLICY

1. Introduction
This Privacy Policy describes how Brand Atelier ("we", "us", "our", or "the Studio") collects, uses, stores, and protects the personal data of visitors and clients of our website https://www.brandatelier.studio (the "Website").
We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Greek data protection law (Law 4624/2019).
By using our Website or submitting our contact form, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
Legal name: [Full legal entity name] Trading as: Brand Atelier Registered address: [Street, Postal Code, City, Greece] VAT Number: [VAT] / Tax Office: [Tax Office] Email: hello@brandatelier.studio Phone: 0030 6984461065
For any questions or concerns about how we handle your personal data, please contact us at the email address above.
3. What Data We Collect
3.1 Data you provide through our contact form
When you fill in the form on our Contact page, we may collect:

• Full name

• Email address

• Phone number (if you choose to provide it)

• Business or brand name (if applicable)

• Project information (description, budget, timeline, scope)

• Any additional information you include in the message field

3.2 Data collected automatically
When you browse the Website, we may automatically collect:

• IP address

• Browser type and version

• Operating system and device type

• Pages visited and time spent on each page

• Referring website

This data is collected through cookies and analytics tools (see Section 8).
3.3 Data collected during a project engagement
If we move forward with a working relationship, we may collect additional information necessary to deliver our services and issue invoices, such as VAT number, billing address, and payment details.
4. Purposes and Legal Basis for Processing
PurposeLegal basis
Responding to your enquiry submitted via the contact formSteps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR)
Delivering design services and performing the contractPerformance of a contract (Art. 6(1)(b) GDPR)
Issuing invoices and meeting tax/accounting obligationsCompliance with a legal obligation (Art. 6(1)(c) GDPR)
Improving the Website and analysing trafficOur legitimate interest in operating and improving our business (Art. 6(1)(f) GDPR)
Sending updates, newsletters, or marketing communicationsYour consent (Art. 6(1)(a) GDPR) — only if you have opted in
Showcasing completed work in our portfolioYour consent or our legitimate interest, subject to any confidentiality agreement
5. How We Use Your Data
We use the data we collect to:

• Respond to your enquiry and prepare proposals or quotes

• Communicate with you throughout the project

• Deliver the agreed design services

• Manage invoicing, payments, and accounting records

• Improve our Website, services, and user experience

• Comply with legal and regulatory obligations

• Display selected work in our portfolio (with your prior consent where required)

We do not sell your personal data to third parties under any circumstances.
6. Sharing Your Data with Third Parties
We may share your personal data with carefully selected third-party service providers who help us operate our business. These include:

• Website hosting & form processing (our website platform and form provider)

• Email service providers (for receiving and sending project communications)

• Cloud storage and project management tools (for storing project files and collaboration)

• Accounting and invoicing software / our accountant (for issuing invoices and meeting tax obligations)

• Analytics providers (e.g. Google Analytics or similar)

• Payment processors (for handling payments, where applicable)

All third-party processors are bound by data protection agreements and are required to handle your data in line with the GDPR.
We may also disclose your data when required by law, court order, or to protect our legal rights.
Transfers outside the EU/EEA
Some of our service providers (e.g. cloud or analytics tools) may store data outside the European Economic Area. In such cases, we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, to guarantee an adequate level of protection.