Privacy notice
Last updated: 16 September 2026.
Data controller: SHARDANA SOCCORSO SOCIETA' COOPERATIVA SOCIALE A R.L.
Registered office: Piazza Convento 1, 09073 Cuglieri (OR)
Tax code and VAT number 01179390958 · Registro Imprese CCIAA di Oristano · REA 136704
Cooperatives Register C100286 · Regional Social Cooperatives Register 659/A
Application technical manager: Guerra Maurizio
SdI code (Italian electronic invoicing): M5UXCR1
Email: support@atelierx.pro · Certified email (PEC) info@pec.shardanasoccorso.org
Data processed
Account details (name, email, phone, trade, optional tax details, Authenticator secret), your customer records, quotes, jobs, stock, appointments, technical logs and backups. Premium payments are managed by Stripe, an independent controller for card details: we do not store the card PAN.
Purposes and legal bases
- Providing the application: performance of a contract, GDPR Article 6(1)(b).
- Invoicing your AtelierX subscription: legal obligation / contract.
- Security, TOTP and abuse prevention: legitimate interests, Article 6(1)(f).
- Account service emails: contract. No marketing without consent.
Optional public website statistics
Only after you choose “Accept statistics” does the site load Google Analytics 4 (Google Ireland Limited) to measure visits to public pages. It may process online identifiers and information about your browser, device and visited pages. Page views sent explicitly by the site exclude URL parameters and access fragments. The private application is excluded from tracking. After consent, Google's configured enhanced measurement may also record public-page interactions such as scrolling and link clicks. Activation is based on consent, which you can withdraw through . Rejecting does not prevent use of the service. Google Signals and advertising personalisation signals are disabled in the site's code. For processing by Google, see Google's privacy policy. The configuration checked on 16 September 2026 retains event data for 2 months and user data for 14 months, resetting on new activity. These limits do not apply to most aggregated reports. Contact support@atelierx.pro for information about any international transfers.
The public demo uses fictional data in an isolated environment without access to account data and without saving to the application's database.
Roles within the application
AtelierX is the controller for your account data. For records of your customers that you enter, you are the controller; AtelierX acts as processor under GDPR Article 28 and uses those records only to provide the service.
Where data is held
Servers and backups are in the EU (Hetzner, Germany). Stripe may also process payment data outside the EU under Standard Contractual Clauses. If an Authenticator QR code is generated through a third-party service, it contains only the TOTP key. Maps and routes use geocoding services (Nominatim/OSM) with addresses you enter. WhatsApp, if used, is an independent Meta service.
Retention
Until account deletion through Settings, followed by removal within 30 days. Subscription tax records: as required by law. Logs: 12 months. Server backups: up to 30 rotating copies.
Your rights
Access, rectification, erasure, restriction, portability and objection. In the app: export data and delete account. Alternatively contact support@atelierx.pro. Complaints: the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Required information
Email, password and Authenticator are required for an account. You enter your customers' information and must have a legal basis for processing it.
Article 28 agreement
Your customer data is covered by the data processing agreement (DPA).