Last Updated: 28 August 2025

​

This Privacy Policy explains how Atelier Boanta (“we,” “our,” “us”) collects, uses, stores, and protects the personal data of individuals participating in the Atelier Boanta Affiliate Program (“Affiliates”). It applies solely to Affiliates and supplements the general Privacy Policy available on our website.

​

1. Data Controller

The data controller responsible for processing Affiliate data under this Policy is:

Atelier Boanta
contact@atelier-boanta.ch
 

2. Data Collected

We collect and process the following categories of personal data when you enroll and participate in the Affiliate Program:

• Identification Data: name, date of birth, gender (optional).

• Contact Data: email address, phone number, residential address.

• Account Data: affiliate ID, referral links, login credentials (GoAffPro platform).

• Financial Data: bank account details (for SEPA transfers) or store credit details (for payouts).

• Performance Data: number of referrals, sales generated, commission amounts, payout history.

• Technical Data: IP address, device/browser information, cookies and tracking data generated via the GoAffPro platform.

• Verification Data (where necessary): limited checks or documents to confirm legal age/identity or payout eligibility.

We do not collect special-category data (e.g., health, religion) and do not ask Affiliates to disclose such information.

​

2A. Eligibility (No Minors)

Participation in the Program is restricted to individuals who are 18 years or older (or the local age of majority). We may request limited verification to confirm eligibility. Applications from minors are not accepted, and any related data will be deleted upon discovery.

​

2B. Data Sources & Mandatory Fields

We obtain personal data:

• Directly from you (application, profile, communications),

• Automatically via GoAffPro tracking for referral attribution,

• From banks/payment providers (payout reconciliation).

Certain fields are mandatory (e.g., name, email, address, date of birth, payout method). Without these, we cannot create or maintain your Affiliate account or process payouts.

​

3. Purpose of Processing

We process Affiliate data exclusively for the following purposes:

• To administer and operate the Affiliate Program.

• To verify legal eligibility to participate.

• To track referrals and calculate provisional and validated commissions.

• To process payouts via SEPA transfer or store credit.

• To comply with legal, tax, and regulatory obligations.

• To communicate with Affiliates about their accounts, performance, and Program updates.

• To prevent fraud, abuse, or misuse of the Program.

We do not use Affiliate data for unrelated marketing purposes unless you have explicitly consented.

​

4. Legal Basis for Processing

Processing is based on:

• Performance of Contract: managing Affiliate participation (Art. 6(1)(b) GDPR).

• Legal Obligation: accounting, tax, regulatory compliance (Art. 6(1)(c) GDPR).

• Legitimate Interests: fraud prevention, system security, Program integrity (Art. 6(1)(f) GDPR).

• Consent: optional data (e.g., gender).

You may withdraw consent at any time (for optional data) without affecting prior lawful processing. Withdrawal does not impact data required to perform the Program contract.

​

5. Data Sharing

We share data only with trusted processors under written agreements:

• GoAffPro (affiliate tracking and attribution),

• Hosting and cloud storage providers,

• Email/CRM and support tools (Program communications),

• Banks and payment service providers (payout execution),

• Accounting, audit, and legal advisors,

• Authorities where legally required.

We do not sell Affiliate data. An up-to-date list of processors is available upon request.

​

6. International Transfers

Where data is transferred outside Switzerland or the EU/EFTA, we implement appropriate safeguards, such as EU Standard Contractual Clauses with Swiss Addendum or equivalent legal mechanisms. Copies or descriptions of safeguards can be provided on request (subject to confidentiality).

​

7. Data Retention

We retain Affiliate data only as long as necessary for the purposes in Section 3 or as required by law:

• Account, Identification, Contact Data: for the duration of Affiliate participation + up to 24 months after closure.

• Financial & Payout Records: 10 years (Swiss accounting/tax law).

• Performance/Attribution Logs: up to 24 months after account closure.

• Security/Access Logs: up to 12 months, unless needed longer for investigations.

After expiry, data is securely deleted or anonymized.

​

8. Data Security

We use technical and organizational measures to safeguard Affiliate data against unauthorized access, loss, misuse, or disclosure. This includes secure storage, encryption, and strict access restrictions. Where required by law, we will notify affected individuals and the supervisory authority of any data breach.

​

9. Affiliate Rights

Affiliates have the following rights under GDPR and Swiss data protection law:

• Right to access your personal data.

• Right to rectification of inaccuracies.

• Right to erasure (subject to legal retention).

• Right to restrict processing.

• Right to data portability.

• Right to object to processing based on legitimate interests.

• Right to withdraw consent for optional data (e.g., gender).

• Right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if in the EU/EEA, your local supervisory authority.

To exercise rights, contact us (Section 12). We may request reasonable identity verification. We will respond within one month, extendable where legally permitted.

​

10. Cookies and Tracking

Affiliate activity is tracked via GoAffPro cookies and referral identifiers that are strictly necessary for attribution of referrals and commission calculation. Participation in the Program is not possible without these cookies.

These cookies typically store:

• affiliate ID,

• timestamp,

• referral code.

Default validity is 30 days, unless cleared earlier by the user.

For general website cookies, see our main Website Privacy & Cookies Policy.

​

11. Automated Decision-Making

We do not make decisions solely by automated means that produce legal or similarly significant effects on Affiliates. Automated fraud-detection flags may be used but are always subject to manual review.

​

12. Updates to This Policy

We may update this Privacy Policy to reflect legal changes or Program operations. Significant updates will be communicated via email or the Affiliate Program platform.

​

13. Contact

For questions or to exercise your rights under this Policy, please contact:

Atelier Boanta
Email: contact@atelier-boanta.ch