Privacy notice

The data controller for this service is Pixavo (KvK 87989700), Klaproos 21, 7483 AR Haaksbergen, Netherlands, reachable at support@pixavo.io. For the content guests place in an album, the organiser who created the album is the controller; we process that content on their behalf, as a processor. For the album email (see below) we are responsible ourselves: we send that email in our own name, on behalf of the organiser. The organiser does not see guests' email addresses.

• Organiser's account: your email address, to sign in via a login link and to keep you informed about your album.
• Payment: your payment is handled via Stripe. We do not receive full payment details; Stripe processes these as an independent party.
• Album content: the photos, videos and any audio messages that guests upload, plus an optional display name that a guest enters themselves. Images may show people and are therefore personal data.
• Technical: an anonymous count of how often an album has been opened (per day, without IP address or profile) and the usual server logs for security and troubleshooting.
• Guests who request the album email: the email address a guest enters when asked whether they would like to receive the album by email after the party, an optional name, the language of the screen, the time of the request and the wording they agreed to, and afterwards the delivery status (sent, delivered, undeliverable or unsubscribed). We use that address only for one email with the album link; we do not add it to a newsletter and do not share it with the organiser or anyone else.

We process this data to provide the service (performance of the contract), to keep the service secure and working (legitimate interest), and on the basis of consent when a guest chooses to upload images. A guest decides for themselves what they share. We send the album email on the basis of consent: the guest asks for it and can withdraw that consent at any time, straight after requesting it in the album or via the unsubscribe link in the email. Like our other emails, the album email contains a small image that shows whether it was opened, and we count whether someone opens the album via its button. We only use this as totals, to improve the email.

The album can be viewed online for the duration of the chosen package (6 months to 3 years after the date of the event). The organiser can download the images in full quality to keep, and receives a reminder by email about a month before the storage period ends. After that period we permanently delete the album and all its images, at the latest within 90 days — the same term as in our terms and conditions. A guest can delete their own upload at any time; the organiser can delete items or the whole album. After deletion we remove the files concerned from our storage. The email address of a guest who requested the album email is deleted together with the album. After an unsubscribe we only keep the fact that it happened, so no further email is sent, until the album is deleted as well.

Your photos, videos and album data are held within the European Union. We work with a fixed number of processors (sub-processors), each for one component:

• Supabase: database and storage of photos and album data, in the EU region (Frankfurt).
• Cloudflare: processing and delivery of video.
• Stripe: the payment. Stripe processes payment details as an independent party.
• Resend: sending email (login links, order emails and the album email), via servers in the EU (Ireland). Resend is based in the United States; for any transfer outside the EU the European Commission's standard contractual clauses apply.
• Amazon Web Services: automatic assessment of photos for the photo book preselection (sharpness, open eyes, whether faces are present), in the EU region (Frankfurt). Nobody is identified.
• Google Cloud: automatic classification of photos for the photo book (for example the couple, a group or a detail), in the EU region.
• fal: an automatic image check for the cover and the preselection of the photo book, and sharpening a photo when you ask for it. This happens in the United States; fal only receives the photo it checks or sharpens.
• Printer: printing and shipping an ordered photo book. The printer receives the print file and the delivery details for this.

Data processing agreements are in place with these parties.

Every album is reachable only via its own unguessable link and is technically fully separated from other albums: data from one album cannot end up in another. Photos and videos are stored privately and are shown only via secure, temporary links, so they are not publicly findable. We use no facial recognition or other biometric data: for the photo book we only check whether a photo shows faces and whether eyes are open, never who it is. No online service can be secured 100%; should something nevertheless go wrong, we act in line with the data breach notification duty — we report a breach to the Dutch Data Protection Authority within 72 hours where required and inform the people concerned when the breach poses a high risk to them. Also bear in mind that anyone with the album code or share link can view the album: you decide who you share it with.

You have the right to access, correct and delete your data, and you can object to processing. A guest deletes their own upload via the button next to the upload; for other requests, contact us at support@pixavo.io. You can also lodge a complaint with the Dutch Data Protection Authority. A guest who requested the album email can unsubscribe via the link in the email and ask for the address to be deleted via support@pixavo.io.

Questions about your data? Email support@pixavo.io.