Privacy · Atelier Lume

Who we are

Atelier Lume is an independent studio that makes watch faces for Garmin watches. It is run by Artem Payvin, based in Portugal, the controller of the personal data this page describes, in the words of the EU's General Data Protection Regulation (GDPR). Write to hello@atelierlume.watch about anything on this page.

We are not part of Garmin. Anything you give our faces or this site comes to us, not to Garmin, and Garmin has no responsibility or liability for it.

On your watch

Both faces read what they show from the watch itself. The Lite reads your heart rate, steps, the date and the battery. The full face reads whichever of these its subdials show: heart rate, Body Battery, stress, recovery time and training status, intensity minutes, calories, steps, distance, floors climbed and your goals for them, the battery, the weather the Garmin Connect app passes to the watch, sunrise and sunset, altitude, barometric pressure, and when your next calendar event starts.

The faces read these to draw the dial and for nothing else. Your readings never leave the watch, we never receive them, and the faces keep no record of your health or activity.

The full face keeps a few things on the watch, so that the dial is right after a restart:

your settings: the three subdials and the surf spot;
the last weather reading and wave forecast;
a rough latitude, which it works out from the length of the day, for the sun compass.

They stay on the watch and go when you uninstall the face. Neither face reads your watch's GPS position, and neither asks for the permission it would need to.

If you change the full face's settings on your phone, Garmin's app carries them to the watch, as part of Garmin's own service. If a face crashes, the watch may report it to Garmin, which shows us, for 30 days, where in our code it failed.

The waves request

This is the one thing that leaves your watch, and only the full face sends it. It does so only while both of these are true:

one of the subdials shows the waves;
you have chosen a surf spot, from the face's list or by typing in a point.

Out of the box no spot is set, so the face sends nothing until you choose one. Then, about once an hour (or 15 minutes after a request that failed), it asks Open-Meteo's marine forecast for the waves at that spot. This is the whole request, here for Nazaré:

GET https://marine-api.open-meteo.com/v1/marine
    latitude   39.605
    longitude  -9.100
    current    wave_height,
               wave_direction,
               wave_period

It carries the spot's coordinates and nothing else: not your position, not your readings, nothing that names you or your watch. Open-Meteo answers with the height, direction and period of the waves there, and the face keeps that on the watch.

The request goes out through the Garmin Connect app on your phone, or over the watch's own connection where it has one. So, as with any website you open, Open-Meteo sees the IP address of that internet connection. Open-Meteo says it may keep IP addresses in its server logs for technical reasons, deletes those logs after 90 days and shares them with no one (its terms and privacy). OpenMeteo GmbH is in Switzerland, which the European Commission recognises as protecting personal data adequately.

If you type in your own point, choose one out at sea rather than your home: the coordinates are the only part of the request that says where anything is.

Buying a face

Garmin's Connect IQ Store sells the full face. Garmin takes the payment, sends the receipt and handles refunds, under Garmin's privacy policy. We never see your card or payment details. Garmin tells us about sales so that it can pay us, and we use what it tells us only to keep our accounts and pay tax.

This site

Hosting

Cloudflare, Inc. hosts atelierlume.watch and runs the small program behind the waitlist and the visit counts. Like any web host, it receives your IP address and what your browser sends with each request (the page asked for, the browser's name and version, the page you came from) to deliver the site and protect it from attacks. Cloudflare does this for us under its data processing addendum. It is in the United States and relies on the EU–US Data Privacy Framework, which the European Commission recognises as adequate, with the EU's standard contractual clauses as a fallback.

Nothing from elsewhere, and no cookies

Everything the site shows, its typefaces included, comes from atelierlume.watch itself. It loads nothing from a font service, an analytics company or an ad network, so opening a page involves no one but our host. The site sets no cookies and stores nothing in your browser. Cloudflare may set a strictly necessary security cookie if it has to challenge a visit it suspects is an attack.

Counting visits

When the home page opens, it tells our server that it was viewed, with the campaign tag of the link you followed (the utm_ part of a link in one of our posts) and the page you came from. When you tap a store button, our server counts the tap and sends you on to the store. We keep only daily totals: views and taps per campaign tag, referring site and country. We never store your IP address or anything else that tells one visitor from another, so we can't recognise you on a later visit.

The waitlist

If you join, we keep your email address, when you joined, what you agreed to and which face you asked about. We use them to send you one email when that face is in the Connect IQ Store, and for nothing else. Cloudflare stores the list, in the EU, until then; we send the email through our email provider and then delete the list. If the face you asked about isn't out within 12 months, we delete your address anyway. To come off the list sooner, write to hello@atelierlume.watch.

Writing to us

Cloudflare forwards email sent to hello@atelierlume.watch to our mailbox at Gmail, Google's email service. We use your message and address only to answer you, and delete them within 12 months of your last message, unless the law requires us to keep them longer.

Instagram

We are @atelierlume.watch on Instagram. This site only links there; it loads nothing from Meta. If you follow or message us there, Instagram's own privacy policy applies, and we use what you send us only to reply.

Why, and for how long

What we handle, why, the legal basis for it under the EU's General Data Protection Regulation, and how long it is kept.

The waves request: the surf spot's coordinates, and the IP address Open-Meteo sees

Why: To show the waves you asked for
Legal basis: Our contract with you: the waves are part of the face you bought (Art. 6(1)(b))
How long: We keep nothing. Open-Meteo deletes its logs after 90 days.

Delivering the site: your IP address and request, which Cloudflare handles

Why: To serve the pages and protect the site from attacks
Legal basis: Our legitimate interest in a site that works and is safe (Art. 6(1)(f))
How long: We keep none of it.

Visit counts: campaign tag, referring site and country

Why: To learn which posts and links bring people to the faces
Legal basis: Our legitimate interest in knowing what works (Art. 6(1)(f))
How long: Kept only as daily totals, which identify no one.

The waitlist: your email address, when you joined, what you agreed to and which face

Why: To send you one email when that face is out
Legal basis: Your consent (Art. 6(1)(a)), which you can withdraw at any time
How long: Until that email is sent, and 12 months at most.

Your emails to us

Why: To answer you
Legal basis: Our legitimate interest in answering you (Art. 6(1)(f)), or our contract if it's about a face you bought (Art. 6(1)(b))
How long: Up to 12 months after your last message.

Sales records from Garmin

Why: To keep our accounts and pay tax
Legal basis: Our legal obligations (Art. 6(1)(c))
How long: As long as tax law requires.

Your rights

You can ask us to show you the personal data we hold about you, to correct it, to delete it, to limit what we do with it, or to give it to you, or to someone you name, in a common format. In practice that means the waitlist and your emails to us, since the faces send us nothing. You can object to anything we do on the basis of our legitimate interests, and withdraw your consent to the waitlist at any time, which doesn't affect what we did before. Write to hello@atelierlume.watch: it costs nothing, and we answer within a month.

You don't have to give us anything. Without an email address we can't tell you about the launch, and without a surf spot the waves subdial stays empty. Nothing here makes automated decisions about you or builds a profile of you: we don't sell data or show ads.

If you think we have got something wrong, tell us. You can also complain to a data protection authority, in particular in the EU country where you live, where you work or where you think the problem happened.

Changes

If what the faces or this site do with data changes, we update this page before the change ships and put the new date at the top. The page stays at atelierlume.watch/privacy.