Privacy statement

1. In short

• Your photos sit on servers in the EU, in private storage. Every link to a file is signed and expires on its own; nothing is left open on the internet.
• We do not sell anything on, we do not advertise with it and we do not train models on it.
• Guests do not need an account. We do not ask them for their name and not for their email address.
• Deleting is really deleting. A deleted event or account after fourteen days, a lapsed free trial after three weeks.

2. Who is responsible for what

For your account, your order and your visit to eventsnap.nl we are the data controller: Tactyx B.V. i.o., operated for now by Yanoli Consultancy B.V., Chamber of Commerce number 90540867.

For the photos, videos and captions on an event, the organiser of that event is the controller and we are the processor. We only do what is needed to deliver the service and what the organiser instructs us to do.

Are you in a photo and would you like it gone? Ask the organiser of the party; they can delete any photo. If you cannot work it out, mail hi@eventsnap.nl and we will help.

We have no data protection officer; a service of this size is not required to appoint one. Your privacy questions reach us at hi@eventsnap.nl.

3. What we keep about organisers

• your email address and the name you enter;
• your password, only as an encrypted fingerprint (bcrypt), never as readable text, and we cannot reverse it;
• your language choice;
• your billing details: name, street, postal code, city, country and optionally your VAT number;
• your orders: plan, amount, VAT, any discount code, status, invoice number and the customer number Stripe assigns to it;
• what you set on your event: name, date, web address, colours, text, cover photo and albums.
• whether you have confirmed your email address, and when;
• that this account has had its free trial, and when it started. We keep that after the trial event is gone as well, or "one trial per account" would mean nothing;
• for a trial event: the end date, and when we sent you the mails about the end and about a full album.

4. What we keep about guests

We do not ask for your name and not for your email address. What you put in a caption yourself, we do of course keep.

Note: photos often carry data of their own, such as where and when they were taken and with which device. We do not read it and use it for nothing, but we also do not strip it out of the original file. So whoever downloads the original gets it too.

• the photos and videos you upload, with file name, file type, size and time;
• your caption, if you write one;
• a random number we place in your browser's storage, so that we know your uploads are yours and you can edit or remove them yourself;
• alongside that number we keep your IP address and your browser details; that is needed to recognise abuse and spam;
• which photos you gave a heart.

5. What we keep about every visitor

• technical server logs: IP address, requested page and time, needed to see failures and abuse;
• a line in our audit log for actions around money, deletion and access: who, what, when and from which IP address. That log exists to account for what happened afterwards, and nothing else reads from it.
• if you ask for the checklist on our home page, we keep that email address, the language you asked in, and when. That one mail goes out on it and nothing else: it is not a mailing list, and nothing stops you asking for it again.

6. What we use it for, and on what basis

• Delivering your event, meaning storing, showing and making photos downloadable: performance of the contract.
• Signing in, sessions and sign-in links: performance of the contract.
• Handling and invoicing your order: performance of the contract and a legal obligation.
• Mail about your event, your order and the photo guarantee: performance of the contract.
• Preventing abuse, enforcing limits and fixing failures: our legitimate interest in a service that keeps working.
• The audit log around money, deletion and access: our legitimate interest in accountability.
• Visitor statistics on eventsnap.nl: your consent.
• The checklist you request on our home page: your consent, given by putting your address in that box. We send you nothing after it.
• Storing and showing guests' photos: on the organiser's instructions, who has their own basis for it.
• Confirming your email address with a code or a link: performance of the agreement.
• Mail about your free trial, such as the end coming closer or an album nearly full: performance of the agreement.
• Remembering that this account has had its free trial: our legitimate interest, so that one trial really is one trial.

7. How long we keep it

• Photos and videos: as long as the event exists. If you delete something, it stays in the bin for fourteen days and after that it is gone.
• A deleted event or account: fourteen days, then permanently erased, including the photos and the archive.
• A guest device's random number, with IP address and browser details: 180 days after it was last seen.
• Invoices and payment records: seven years, because tax law requires it.
• The audit log around money, deletion and access: kept indefinitely for now, but when an account is deleted we make the email address in those lines untraceable.
• Technical server logs: briefly, only as long as they are needed to investigate a failure.
• The email address you asked for the checklist with: one year, after which we delete it automatically.
• A free trial nobody converted: the event stays locked for a week and then enters the ordinary deletion path, so after another fourteen days the photos are really gone.
• An account somebody asked a trial for and never used the code on: seven days, after that we delete it automatically.
• That an account has had its free trial: as long as the account exists. Delete your account and it goes with it.

8. Where it sits, and who else sees it

Our servers and your photo storage are with Hetzner Online GmbH in Germany, so inside the EU. The storage is private: files are never public and every link is signed and expires automatically. Nothing goes outside the European Economic Area, except where stated below.

• Hetzner Online GmbH (Germany): servers and storage.
• Stripe (Ireland, with processing in the United States): payments and invoices. Stripe processes your payment details; we only see the amount, the status and your billing details.
• Mailgun (EU region): the mail we send you, such as sign-in links, invoices and messages about your event.
• Google Ireland Limited: Google Analytics 4 for visitor statistics on our own marketing pages. It does not run on your event page and not on the guest page.
• tawk.to (United States): the chat on our help page. What you type in that conversation goes through tawk and is kept there; all processing happens in the United States. The chat does not run on your event page and not on the guest page.

With Stripe, Google and tawk.to, processing may take place outside the EEA; that happens under the European Commission's standard contractual clauses. Beyond this we give nothing to third parties, unless the law obliges us to.

[To be filled in: the data processing agreement with tawk.to and the basis for the transfer to the United States still have to be settled and named here.]

9. Cookies and things like them

We set no cookies of our own. What we need, we keep in your own browser's storage: your sign-in details as an organiser, your guest session, the random number your uploads hang on, and the photos you gave a heart. That stays on your device and disappears when you clear your browser data.

Google Analytics 4 runs on our marketing pages. That does place cookies and measures which pages are visited. It is on eventsnap.nl itself only: it does not run on an event page, a guest page or an invite link.

The tawk.to chat loads on the help page. It sets cookies too and recognises you the next time you open the chat. It is on that one page only: it does not run on an event page, a guest page or an invite link.

[To be filled in: the consent choice for these statistics still has to appear on the site. Until it does, no statistics should be running either.]

10. How we secure it

• All traffic runs over https.
• Passwords are stored only as a bcrypt fingerprint; sign-in and reset codes are stored only as a hash and work once.
• Every link to a photo is signed and expires; a tampered or expired link returns nothing.
• A guest session lasts 24 hours and only gives access to the one event it was issued for.
• A closed album returns no file to guests, not even if someone tries to guess a photo's address.
• Access to the production environment is limited to those who need it.

11. Your rights

You have the right to see your data, to have it corrected or deleted, to have processing restricted, to object, and to receive your data in a portable format. Consent you have given, you may withdraw at any time.

As an organiser you can do most of it yourself: change your details in settings, download your whole event under Exports, and delete your event or your account. For the rest, and for guests: mail hi@eventsnap.nl. We answer within one month.

If you think we are not handling your data properly, you can complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

12. Children

EventSnap is meant for adults. Whoever creates an event must be sixteen or older.

If children appear in the photos of a party, it is the organiser who needs the consent of their parents or guardians.

13. Changes

We can amend this statement. The date at the top says when that last happened. If something material changes about what we do with your data, we mail you.

14. Contact

Questions about this statement or about your data: hi@eventsnap.nl.