Politique de confidentialité

• Controller: Jose Maria Marquez Torres
• Tax ID: 47893570A
• Address: Carrer Envelat 10, 4º, 43830 Torredembarra, Tarragona
• Contact email: info@picvin.app

For any privacy question, write to that email or use the contact page.

Go to contact

• Organizers: the email you sign in with, the name and date of the events you create, the plan you bought and your payment history. We never see your card details.
• Guests: the photos and videos they upload and the information they contain, such as the image of the people in them. Guests never need an account or an email.
• Technical data: IP address and browser data, used temporarily to keep the service secure and to limit abuse.
• Contact form: your name, your email and your message.

• Providing the service (account, events, galleries, uploads and downloads): performance of a contract (Art. 6(1)(b) GDPR).
• Charging for plans and maintenance and meeting tax obligations: performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR).
• Sending emails the service needs, such as the sign-in link, expiry reminders and payment notices: performance of a contract (Art. 6(1)(b) GDPR).
• Protecting the service against abuse and spam, with usage limits and bot checks: legitimate interest (Art. 6(1)(f) GDPR).
• Answering your contact messages: your consent when you send the form (Art. 6(1)(a) GDPR).

We don't sell your data, we don't run personalised advertising and we don't make automated decisions with legal effects on you.

The organizer decides which event to create and who gets the QR code or link. For the photos and videos uploaded to their event, the organizer acts as controller and PICVIN processes them on the organizer's behalf, as processor, only to store them, show them in the gallery and let them be downloaded.

If you appear in a photo and want it removed, ask the event organizer or write to us and we'll handle it with them.

• Photos and videos: while the event is active. When the event expires and the grace period ends, they are permanently deleted together with their thumbnails. Permanent plan events are kept while the organizer keeps their account or until they delete them.
• Organizer account: for as long as you keep it. You can ask us to delete it at any time.
• Payment and billing data: for the periods required by tax and commercial law.
• Contact messages: as long as needed to reply and at most 12 months.
• Technical security data: only as long as needed to limit abuse.

• Cloudflare: application hosting, database, photo and video storage and bot checks (Turnstile).
• Stripe: processing of payments and the maintenance subscription. Stripe handles your card details directly.
• Resend: delivery of the service's emails.

Some of these providers may process data outside the European Economic Area. In that case, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

You can exercise these rights at any time:

• Access: know which of your data we process.
• Rectification: correct inaccurate data.
• Erasure: ask us to delete your data.
• Restriction: ask us to stop using it while a complaint is resolved.
• Portability: receive your data in a commonly used format.
• Objection: object to processing based on legitimate interest.

Write to info@picvin.app stating the right you want to exercise. We'll reply within one month. You can also withdraw your consent at any time. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

We only use technical cookies the service needs to work, such as the session cookie that keeps you signed in. Cloudflare's bot check may use technical storage strictly necessary for security.

We don't use analytics or advertising cookies, so we don't ask for cookie consent.

We use encrypted connections (HTTPS), temporary sign-in links and access controls so that only the organizer can manage their event.

If we change this policy in a meaningful way, we'll say so on this page and, if it affects your account, we'll email you.