1. Introduction

This Privacy Policy describes how JM Atelier, operated by Joanna Markowska, located at Lille Øvregaten 6, Bergen, Norway, (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you visit our website https://jmatelier.art/, use our online store, subscribe to our newsletter, or participate in our workshops.

We process personal data in accordance with the Norwegian Personal Data Act (Personopplysningsloven) and the EU General Data Protection Regulation (GDPR).

If you have any questions about this Policy or wish to exercise your data protection rights, please contact us at:
Email: hello@jmatelier.art
Phone: +47 909 444 86

2. Data We Collect

2.1. Data You Provide

a) Newsletter Subscription

Name [optional]
Email address

b) Contact Form / Direct Emails

Name
Email address
Message content
Any additional information voluntarily provided by you

c) Online Store (WooCommerce)
For order processing and customer account setup:

Name and surname
Billing address
Shipping address
Email address
Phone number
Order details
Payment information (handled by third-party providers; we do NOT store card details)

d) Workshop Registration

Name
Email address
Phone number
Payment details (processed externally)
Any additional information necessary for participation (e.g., accessibility needs)

2.2. Data Collected Automatically

When you browse our website, we automatically collect certain technical information, including:

IP address
Browser type and version
Operating system
Pages viewed and time spent
Referring website
Device type

This data is collected via cookies and analytics tools.

2.3. Cookies and Tracking Technologies

We use cookies to ensure website functionality, improve user experience, and analyze traffic through Google Analytics.

For details, see our Cookie Policy:

You may manage or disable cookies in your browser settings at any time.

3. How We Use Your Data

We use your personal data for the following purposes:

3.1. Contract Performance

To process purchases, payments, deliveries, refunds, and workshop registrations.

3.2. Newsletter and Marketing

To send updates, promotions, workshop announcements, and other information related to JM Atelier.
You can unsubscribe at any time by clicking the unsubscribe link in emails.

3.3. Customer Support

To answer inquiries, provide assistance, and manage customer accounts.

3.4. Analytics and Website Improvement

To understand how visitors use the website and improve user experience.

3.5. Legal Obligations

To comply with Norwegian tax, accounting, and regulatory requirements.

4. Legal Bases for Processing

We process your data on the following legal grounds:

Contract performance (GDPR Art. 6(1)(b)): for purchases and workshop registrations
Consent (Art. 6(1)(a)): for newsletter and non-essential cookies
Legitimate interest (Art. 6(1)(f)): website analytics, fraud prevention
Legal obligation (Art. 6(1)(c)): tax and accounting purposes

5. Data Sharing and Third-Party Services

We do not sell your data.
However, we may share it with trusted partners necessary for running JM Atelier:

5.1. WooCommerce Plugins and Integrations

Payment providers (Stripe, PayPal)
Shipping services (Nordpost)

5.2. Newsletter Platform

Provider name: Stefano Lissa & The Newsletter Team

5.3. Google Analytics

Google Ireland Ltd. processes website usage data for analytics.
IP anonymization is enabled.

5.4. Hosting Provider

Your data may be stored on servers operated by our hosting provider:
Provider name: LH.pl Sp. z o.o., ul. ks. Jakuba Wujka 7/26, 61-581 Poznań, Poland

All third-party processors comply with GDPR requirements.

6. Data Storage and Retention

We store your personal data only for as long as necessary:

Customer orders: 5–7 years (required by Norwegian accounting regulations)
Newsletter data: until you withdraw consent
Workshop registration data: up to 12 months after the event
Contact form messages: up to 12 months
Analytics data: as defined by Google Analytics (up to 26 months unless shortened)

7. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, alteration, or disclosure, including:

SSL encryption
Secure passwords and access control
Limited access to customer data
Secure third-party payment processors

8. Your Rights Under GDPR

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing (including marketing)
Withdraw consent at any time
Request data portability

To exercise your rights, contact us at:
Email: hello@jmatelier.art

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):
https://www.datatilsynet.no/

9. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure it is protected by GDPR-approved mechanisms such as:

Standard Contractual Clauses (SCCs)
Adequacy decisions

Google and other providers may process data outside the EEA.

10. Links to External Websites

Our website may contain links to external websites. We are not responsible for their privacy practices. Please review their policies separately.

11. Changes to This Privacy Policy

We may update this Privacy Policy occasionally. Updated versions will be posted on this page with a revised “Last updated” date.

12. Contact Information

If you have questions about this Privacy Policy, please contact:

JM Atelier – Joanna Markowska
Address: Lille Øvregaten 6, Bergen, Norwzay
Email: hello@jmatelier.art
Phone: +47 909 444 86
Website: https://jmatelier.art/