Privacy Policy

1. Who is responsible for your data

Especia Fuel S.L., trading as Atelier Numen, is the data controller for the personal data described in this policy.

• Tax ID (CIF): B16402000
• Registered address: C/ Aguamarina, nº44, 28224 Pozuelo de Alarcón, Madrid, Spain
• Contact for privacy matters: studio@atelier-numen.com

2. What is collected, and when

• Visiting the site. The site is served by Cloudflare, which processes the connection data every request carries (IP address, browser, time) to deliver the pages and to protect the forms from abuse. The number of submissions from one connection is counted for one hour and then deleted.
• Visit counts without cookies. Cloudflare Web Analytics counts visits, pages, countries, devices and the site that sent you, for every visitor. It stores nothing in your browser, keeps no IP address and builds no profile, so it runs without asking; it only tells the Company how many people read what.
• Analytics. With your permission — and outside the European Economic Area, the United Kingdom and Switzerland, unless you decline — the site measures how it is read using Mixpanel, on servers in the European Union: pages viewed, scrolling and clicks, device type, approximate location, the campaign that brought you, and session recordings in which whatever is typed into a form field is masked. Declining, or never answering, means none of this is collected.
• Community links. If you arrive through a short link we posted in a group or forum (atelier-numen.com/g/…), that link’s code travels in the address of the pages you visit and the server records, without storing anything in your browser, which steps you take (arrival, reading, a piece’s page, a commission or a subscription), with the country, device type and a daily fingerprint derived from the connection. The IP address is not kept and the fingerprint’s key is destroyed the next day, so it cannot be linked to you or across days. It is used only to learn which communities find what we post useful.
• The Arrivals. Subscribing stores your email address, the date, the page it came from and the campaign, if any. If you accepted analytics, the subscription is linked to that measurement.
• A commission. The commission form stores your name, email, country, optional phone number, the measure, the inscription, the name for the passport and, for a gift, the message for the card. The postal address is asked for later, when the commission is confirmed. The acknowledgement and the follow-up are sent by email.
• A withdrawal. The withdrawal form stores your name, email, the commission or piece concerned, the date of receipt and any note you add.
• Correspondence. Whatever you choose to write to studio@atelier-numen.com.

The site has no customer accounts, and no payment data is ever entered on it: payment is made through a link issued for each commission, or by bank transfer.

3. Purpose and legal basis

• Commissions, purchases and withdrawals — taking steps at your request before a contract and performing it (Art. 6.1.b GDPR), and meeting legal obligations such as invoicing and the antiques register (Art. 6.1.c GDPR).
• The Arrivals — your consent (Art. 6.1.a GDPR), which you can withdraw at any time from any letter or by writing to us.
• Analytics — your consent (Art. 6.1.a GDPR and Art. 22.2 of Spain’s LSSI-CE). Outside Europe, the legitimate interest in understanding how the catalogue is used (Art. 6.1.f GDPR), to which you can object by declining.
• Protecting the forms from abuse — legitimate interest (Art. 6.1.f GDPR).
• Measuring community links — legitimate interest in knowing which posts are useful (Art. 6.1.f GDPR), with data pseudonymised for one day and no access to your device. You can object by writing to us.

4. How long data is kept

• Commissions that go ahead: for the life of the contract and then for six years, as Spain’s Commercial Code requires, and for as long as the antiques register requires the record of the piece.
• Commissions that do not go ahead: deleted within twelve months.
• The Arrivals: until you unsubscribe.
• Analytics: session recordings for thirty days; other measurement for as long as it is useful, and never beyond twenty-four months.
• Counters that protect the forms: one hour.
• Community links: the daily fingerprint’s key, one day; the recorded steps, twenty-four months.

5. Who else processes it

These providers process data on the Company’s behalf, under a data processing agreement, and only for the purpose described:

• Cloudflare, Inc. — hosting of the site and storage of submissions.
• Supabase, Inc. — the working list of commissions, hosted in Frankfurt (EU).
• Resend (Plus Five Five, Inc.) — sending the acknowledgements and letters.
• Mixpanel, Inc. — analytics, with data stored in the EU, only as described above.
• Google LLC — Google Fonts, which receives the IP address of the browser that loads the typefaces.

Some of these companies are based in the United States. Where data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses. No data is sold or shared for advertising.

6. What the site stores in your browser

• an-consent — your analytics choice, so the question is not asked again.
• an-attr-first — the campaign that first brought you, kept only once analytics is accepted and sent with a subscription or a commission.
• an-internal — set only on the Company’s own browsers, to leave them out of the figures.
• Mixpanel keys (mp_…) — only once analytics is accepted.

You can change your analytics choice at any time by clearing this site’s data in your browser; the question appears again on your next visit.

7. Your rights

You can ask the Company, at any time, to access, correct, delete, restrict, or hand over a copy of your data, and you can object to how it is used. Write to studio@atelier-numen.com. If you believe your data has not been handled properly, you can complain to Spain’s data protection authority, the Agencia Española de Protección de Datos.

The site is not directed at anyone under eighteen.