Processing of Personal Data by Atelier AS
App feature information updated: 14 October 2026
When you utilize services, websites, or the iOS application from Atelier, or interact with us regarding our services, or subscribe to our newsletters, Atelier AS will process your personal data.
Below you will find information on the personal data we collect, the purpose for its collection, and your rights related to the handling of this data. Atelier AS (org no. 917 501 173) is responsible for the processing of your personal data.
For any inquiries about our handling of your personal data, please contact us at hello@atelie.ART.
Why We Collect Personal Data and What We Collect
We collect and use your personal data for several reasons, depending on who you are and how we interact with you. We gather the following personal data for the stated purposes:
Marketing and Communications: To distribute marketing materials, newsletters, and information about our operations, we collect your email address. This collection is based on your consent (GDPR Art. 6(a)). This consent can be withdrawn at any time either through your user profile or via the unsubscribe link in our newsletters.
Promotion of Artists and Their Works: Information about artists and their works is shared on their public profiles and in Atelier's promotions. This includes the artist's name, images of their work, biographical details, and exhibition history and upcoming shows. This processing is necessary due to our contract with the artist (GDPR Art. 6(b)).
Locate and Provide Artist Studio Locations: Location information. This processing is necessary to fulfill our contract with the artist (GDPR Art. 6(b)).
Responding to Inquiries: To address queries, we collect your name, phone number, email, and any other personal data included in your inquiry. This processing aims to enhance our services and provide customer support, serving our legitimate interests (GDPR Art. 6(f)).
Recruitment: For job applications, we collect your name, email, phone number, residential address, and other details from your CV, application, certificates, or references. This processing is required for our potential employment contract with you (GDPR Art. 6(b)).
Like most websites, we use cookies. These small files are stored on your device to optimize our service. This poses no security risk to you. However, you can adjust your browser settings to decline cookies or delete them. Every page request sends information about your browser, version, and IP address to Atelier's servers. These logs are used for aggregated statistics to determine popular pages and user trends. Such processing is based on our legitimate interests (GDPR Art. 6(f)) to refine our services.
App features and your choices
Image search
When you choose a photo, crop it and submit an image search, Atelie processes the selected image to suggest visually similar artworks. We remove embedded image metadata and send a resized copy to Google's image-embedding service in Google Cloud through an EU processing endpoint. Atelie processes the search image and its search representation temporarily, without saving them as an uploaded artwork or retaining them in our application database. We keep account-linked, pseudonymous request identifiers and usage counts to enforce limits and protect the service.
Google processes the image under its Cloud data terms, which can permit limited logging for safety and abuse prevention. The EU image-processing endpoint does not mean that all Atelie data is stored in the EEA. Choosing a photo alone does not submit it; you decide when to send the search.
Personalised For you feed
If you enable the personalised feed, we use your artwork interactions to adapt recommendations. On your device, we retain preferences about artists and techniques. We also send Algolia clicks on artworks opened from the personalised feed and newly confirmed saves to your own collections. These events contain artwork identifiers, relevant search identifiers and a pseudonymous identifier associated with your account and this app installation.
You can turn personalisation off in Settings. This stops new personalised activity signals and use of the personalised ranking on that device. It does not itself delete previously stored preferences or Algolia history. Your choice is stored for the signed-in account on that device. You can use the contact details in this notice to request access to or deletion of personalisation data.
Notifications
When a notification feature is enabled for your account, we process your account and app-installation identifiers, delivery token, notification choices and delivery records. This includes queued delivery tasks linking a notification event to its intended recipient and account version. Google Firebase Cloud Messaging and Apple Push Notification service provide delivery. Notification categories include messages, new artworks and exhibitions from artists you follow, and sales of artworks you have liked or that belong to artists you follow. These notifications use brief notices and links to the relevant content.
You control available categories in Atelie's notification settings and can block notifications in your device settings. In-app notification choices are linked to your account; the operating-system permission applies to each device. Promotional notifications require the relevant choice in addition to the device permission. Disabling notifications stops the relevant delivery; some registration and delivery-security records remain to prevent stale registrations or duplicate messages from becoming active again.
Optional location
If you choose a location-based feature and allow location access, the app uses your foreground location to show nearby content or position the map. Apple provides location services and Google Maps supplies the map. You can choose a city manually and change the location permission in device settings. The introductory location screen requests permission only; it does not itself request coordinates. Atelie's app does not request continuous background location tracking.
Sales and profile connections
For eligible artist accounts, Sales displays existing payment records associated with the signed-in seller. These can include an artwork identifier, artwork title and image, artist name, recorded amount and currency, recorded date, payment status and recorded refund information. Access to this overview does not create a new sale, change a payment or change the purchase terms.
The Following and Followers lists in Settings use existing follow relationships for your signed-in account. They can display names, profile images and available artist-profile information. The sales and connection views do not create a separate server-side sales or relationship history.
DATA STORAGE
Image-search usage records
Account-linked image-search usage records and daily service counters become eligible for cleanup seven days after their latest recorded reservation. Further use can move that date forward. Automatic image-search usage cleanup is currently paused, so these records can remain stored beyond seven days. The overall service-usage counter has no automatic expiry and holds a service total rather than a per-account search history. Search images and search representations are handled temporarily as described under Image search.
Notification records
Notification-event jobs, recipient tasks and delivery-attempt records become eligible for cleanup seven days after they are created or claimed. Cleanup is scheduled daily, but failed or unfinished cleanup can delay removal. Daily account-registration counters become eligible at the start of the second UTC calendar day after the day of their latest update, approximately 24–48 hours later. A later registration can move that date forward.
An app registration that has not been updated for more than 30 days is excluded from managed notification delivery; this does not delete it. Disabling or detaching a registration can leave account identifiers, delivery tokens and revision information in inactive records. There is no automatic expiry for these installation, token-ownership and account-binding records.
Separate records prevent old registration requests, consumed registrations or duplicate notifications from becoming active again. Registration safeguards, revision limits and token-denial records have no automatic expiry. Some direct account identifiers are removed from these safeguards, but the remaining identifiers can still be linkable through other records. First-publication records for public artwork notifications remain until deletion of the corresponding artwork or account version is processed. Exhibition duplicate-prevention records also have no automatic expiry. Publication records from the older limited notification trial become eligible for cleanup ten days after the artwork record was created.
Account deletion and personalisation choices
The account-deletion commitment and exceptions in Part 5 of our Terms and Conditions continue to apply. Automated expiry and disabling a feature are different from an account-deletion request. You can request access to or deletion of your data using the contact details below.
Turning personalisation off stops new signals and personalised ranking on that device; it does not delete local preferences or Algolia history. The Sales and profile-connection views use existing records and do not change the retention rules for the underlying account, relationship or payment records.
Your Rights
According to personal data protection laws, you have several rights:
- Access to your data and a copy of the data we process;
- Correction of inaccurate, incomplete, or misleading data;
- Erasure of personal data (with some limitations);
- Restriction of data processing (with some limitations);
- Objection to data processing, especially if processing is based on our legitimate interests;
- Data portability (transferring your data to another entity) when processing is based on consent or contract;
- Complaint about our data processing.
To exercise any of these rights, contact us at hello@atelie.art. We will respond promptly, at the latest within one month.
Complaint to the Data Protection Authority (Datatilsynet):
If you believe we are processing your personal data against the requirements set by the personal data protection laws, or if we're not respecting your rights, you can lodge a complaint with the Datatilsynet. However, we recommend first addressing your concerns with us, giving us the opportunity to rectify the situation.