Privacy Policy

Carla Sibylle Beck - THE ATELIER MANAGEMENT[email protected]
Last updated: May 20261. Responsible Party (Art. 13 GDPR)
The responsible party within the meaning of the General Data Protection Regulation (GDPR) is:Carla Sibylle Beck
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Email: [email protected]
Instagram: @atelierforcreators
For any data protection enquiries, please contact the email address above.2. What personal data we process
2.1 Data from content creators (clients)
In the course of the business relationship, the following personal data from creators may be collected and processed:
• Name, address, date of birth
• Email address and phone number
• Bank details (for commission billing)
• Social media profiles and handles (in particular Instagram)
• Social media insights and analytics data (reach, engagement rate, impressions, audience demographics)
• Rate expectations and previous compensation details
• Information on existing brand partnerships and exclusivity agreements
• Communication content (emails, messages in the context of the collaboration)
• Contract documents and correspondence with brands2.2 Data from brands and company contacts
In the context of partnership acquisition, the following data from brand and company representatives may be processed:
• Name and professional contact details (email, phone, position in the company)
• Communication content (pitches, negotiations, briefings)
• Contract-relevant information (fees, scope of services, deadlines)2.3 Data from website and Instagram visitors
When visiting the website theatelier-management.com or the Instagram profile @atelierforcreators, technical data may be automatically recorded:
• IP address (anonymised where possible)
• Date and time of access
• Browser type and operating system
• Referring website (referrer)Note on Instagram: Meta Platforms Ireland Ltd. is responsible for data processing on Instagram. The Atelier Management has no influence on data collection by Instagram. For more information, please refer to Meta's privacy policy at: https://www.facebook.com/privacy/policy/3. Purpose of data processing and legal bases
3.1 Contract performance (Art. 6 para. 1 lit. b GDPR)
The processing of personal data from creators is carried out primarily to fulfil the management contract, in particular for:
• Acquiring and negotiating brand partnerships
• Managing and coordinating brand deals
• Creating and optimising media kits
• Communicating with brands on behalf of the creator
• Commission billing and invoicing3.2 Legitimate interests (Art. 6 para. 1 lit. f GDPR)
Where processing is not necessary for the performance of the contract, it is based on the legitimate interests of The Atelier Management, in particular:
• Maintaining business relationships with brands and corporate partners
• Documentation and archiving of business transactions
• Protection of own trade secrets and negotiation strategies
• Use of anonymised references for marketing purposes3.3 Legal obligation (Art. 6 para. 1 lit. c GDPR)
Certain data is processed due to statutory retention obligations, in particular:
• Invoicing and accounting documents (§ 147 AO: 10-year retention obligation)
• Contract documents (§ 257 HGB: 6-year retention obligation)3.4 Consent (Art. 6 para. 1 lit. a GDPR)
Where processing is based on consent (e.g. use of a creator's name or image as a reference in marketing), this will be obtained separately and in writing. Consent may be withdrawn at any time.4. Sharing personal data with third parties
Personal data will generally not be shared with third parties unless:
• The transfer is necessary for the performance of the contract — in particular the transmission of the media kit and relevant profile data to brands in the context of partnership acquisition. The creator agrees to this transmission upon conclusion of the management contract.
• The data subject has given explicit consent.
• The transfer is required by law or ordered by a public authority.No personal data is shared with third parties for advertising or profiling purposes.Tools and services used: The Atelier Management uses Google Workspace (email, calendar, documents), Canva, Zoom and Calendly for business operations. These services process personal data in accordance with their own privacy policies. Where required, data processing agreements (Art. 28 GDPR) have been concluded.5. Retention periods
Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations:
• Data from active contractual relationships: for the duration of the collaboration plus three (3) years after the end of the contract.
• Invoicing and accounting documents: ten (10) years pursuant to § 147 AO.
• Contract documents and correspondence: six (6) years pursuant to § 257 HGB.
• Data from prospective clients without a concluded contract: up to twelve (12) months after the last contact.
• Data from brand contacts: for the duration of the business relationship plus three (3) years.After expiry of the respective retention period, data will be securely and permanently deleted or anonymised.6. Rights of data subjects (Art. 15–22 GDPR)
6.1 Right of access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data is being processed, and if so, to receive information about this data as well as further details (purpose, categories, recipients, retention period).6.2 Right to rectification (Art. 16 GDPR)
You have the right to request the immediate rectification of inaccurate or the completion of incomplete personal data.6.3 Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data if processing is no longer necessary, consent has been withdrawn, or no other legal basis exists. Statutory retention obligations remain unaffected.6.4 Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if the accuracy of the data is disputed, the processing is unlawful, or you have objected to erasure.6.5 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller.6.6 Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR (legitimate interests).6.7 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for The Atelier Management is:Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
Phone: +49 981 180093-0
Email: [email protected]
Website: www.lda.bayern.deTo exercise your rights, please contact: [email protected]7. Data security
The Atelier Management takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, in particular:
• Use of encrypted email communication (Google Workspace with TLS encryption)
• Password protection and two-factor authentication for all services used
• Access to personal data only by the responsible party herself
• Regular review and updating of security measuresIn the event of a data breach likely to result in a high risk to your rights and freedoms, you will be notified without delay in accordance with Art. 34 GDPR.8. Social media - Instagram @atelierforcreators
The Atelier Management operates an Instagram account under @atelierforcreators. When visiting this profile, data is collected and processed by Meta Platforms Ireland Ltd. The Atelier Management, as a joint controller (Art. 26 GDPR), has concluded an agreement with Meta regarding the processing of insights data.
The Atelier Management receives aggregated, anonymised statistics (insights) on the reach and interactions of published content via Instagram. It is not possible to draw conclusions about individual persons.
If you contact The Atelier Management via Instagram (e.g. by DM), the data transmitted will be used exclusively to respond to your enquiry and will not be shared with third parties.
Further information: Meta privacy policy: https://www.facebook.com/privacy/policy/9. Contact by email
If you contact The Atelier Management by email, the personal data transmitted (name, email address, content of the message) will be stored and used exclusively to process your enquiry. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to enquiries) or Art. 6 para. 1 lit. b GDPR if the contact is aimed at concluding a contract.
The data will be deleted once the enquiry has been fully processed and no statutory retention obligations apply.10. Updates to this privacy policy
The Atelier Management reserves the right to update this privacy policy as necessary, in particular in the event of changes to business activities, tools used, or legal requirements. The current version is available on request at [email protected].
Creators with whom a management contract has been concluded will be informed in writing of any material changes.