Privacy Policy

1. Who we are (data controller)

Photo Community (legal entity, KvK number, registered address — to be completed) is the controller for personal data processed through this platform. Contact: privacy@… (to be completed).

2. What data we process

Account data (name, email, role), photographer profile data, uploaded photographs (which may show identifiable people), album and order metadata, and technical data (IP, device, log data). Payment data is handled by our payment processor (Stripe) and not stored by us.

3. Purposes & legal bases (GDPR/AVG art. 6)

Providing the service and account (performance of a contract); processing payments and unlocks (contract); securing the platform and preventing abuse (legitimate interest); sending service emails (contract/legitimate interest); marketing only with consent. Publishing photos of identifiable people relies on the photographer/organiser obtaining the appropriate consent (portrait rights) — managed via the platform's consent flow.

4. Photographs & portrait rights

Photographers and organisers are responsible for having the right to upload and publish images of the people depicted. The platform provides a consent mechanism; final responsibility rests with the uploader. To be expanded by lawyer.

5. Sharing & processors

We use processors including Supabase (hosting/database/storage) and Stripe (payments). Data may be processed within the EU/EEA; transfer safeguards to be completed.

6. Retention

Albums and their files are retained per the platform's retention policy (currently up to one year after unlock, then purged) and account data for as long as the account exists. Exact periods to be confirmed.

7. Your rights

You have the right to access, rectify, erase, restrict, object, and to data portability, and to lodge a complaint with the Autoriteit Persoonsgegevens. Requests via the contact above.

8. Cookies

We use strictly necessary cookies for authentication. Any analytics/marketing cookies require consent. Cookie banner and list to be added.

Last updated: draft — not published.