Privacy policy

1. Who is responsible for what

We are responsible for the data about you as a customer: your account, your acceptances and the data belonging to the operation of the service. For the pictures at your event you are the data controller and we process them on your behalf. If the event was sold by a partner, they process the pictures on your behalf and we are a sub-processor — who is who for your particular event is stated on the event's package page.

2. What we keep about you

• Name and email address, so the account can be reached and signed in to.
• Which version of the terms and the privacy policy you accepted, and when.
• What you confirmed when you ordered a package, and whether you asked for delivery to begin immediately — with a timestamp, because that is what the right of withdrawal turns on.
• Your events: name, date, periods, chosen package and storage region.
• What has been done with your event's files — uploaded, fetched, deleted — with a timestamp.

3. What we do not do

We use no third-party tracking. No analytics scripts, no embedded social widgets, no external fonts or maps. The guests' pages load nothing from anybody else's server. We do not sell data on.

We do not train machine learning models on your material and we do not hand it to anyone who does. Nor do we use it to market the service or to develop the product. That is an undertaking in clause three of the terms and not a setting that can be switched.

4. Where the data is

Processing and storage take place within the EU and the EEA. The pictures sit on our own storage nodes, never with a third party we cannot answer for, and always in the region the event is set to. Which sub-processors we engage, what they do and in which region is stated in the list of sub-processors, linked in the footer of every page.

5. For how long

The event's material is kept for the viewing period you chose, within the limits of your package. Account data is kept for as long as the account exists.

6. Accounting data

When a package is activated, an accounting record is written: reference, amount, VAT, the package's name, the event's name and your name and email address. The record is a copy and not a view — it stays unchanged even if the event, the package or your account is deleted later, because the Bookkeeping Act requires it to be kept.

The retention period is seven years from the end of the calendar year the record belongs to. After that it is deleted automatically. It is the only data about you we keep after an account is deleted, and you can request an extract of it at any time.

7. Your rights

You can download everything we hold about you as a file at any time, straight from the account page, and you can delete the account yourself. The deletion happens after a grace period and can be cancelled throughout it. The pictures you fetch as an archive per event, in the original.

8. Guests

A guest needs no account and is never identified by us. A necessary cookie keeps track of the guest's own upload session, so that they can name themselves voluntarily and delete their own picture — it carries no identity outside the event and disappears with it. Every guest can ask for a picture they appear in to be removed, without an account.

9. Incidents

If we discover a personal data breach we report it within 72 hours and inform you as a customer if it concerns your event.