Legal
Privacy Policy
Data controller
Aurum Atelier IKE, Skoufa 47, Kolonaki, 10673 Athens (AFM EL094218413), is the controller of the personal data described here. Questions may be sent to [email protected].
We collect as little as we can, keep it only as long as we must, and never sell it. This page explains what we hold and why.
What we collect & why
Orders & bespoke commissions — name, contact and delivery details, order and commission records, and stone-notebook references. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.
Valuation records — the independent valuations issued with each piece, kept so we can re-value and re-issue documents. Art. 6(1)(b).
Newsletter — your email address, on consent, Art. 6(1)(a). You can unsubscribe from any letter.
Analytics — GA4 with IP anonymisation, on consent, Art. 6(1)(a).
High-value transactions — identification for orders above €5,000, to meet our legal obligations as a dealer in high-value goods, Art. 6(1)(c).
How long we keep it
Order records: 10 years. Bespoke-commission records: 20 years — clients commonly return for adjustments and resizing across decades. Newsletter data: until you unsubscribe. Analytics: 14 months.
Who we share it with
Only the processors we need to run the atelier: our payment provider (Stripe), a secure high-value courier, Google Ireland (Analytics), and our independent insurance valuer. Each is bound by a data-processing agreement. We do not sell or rent personal data to anyone.
Your rights
You have the standard GDPR rights: access, rectification, erasure, restriction, portability, and objection. Write to [email protected] and we will respond within one month. You may also lodge a complaint with the Hellenic Data Protection Authority at dpa.gr.