FotoSpinBooth

Privacy policy

Last updated:

This policy explains how FotoSpinBooth ("we", "us") handles personal data when you visit fotospinbooth.com, use the FotoSpinBooth booth software, or receive a photo or video from a booth that uses it.

1. Who we are

FotoSpinBooth is operated by [Company legal name], [street address], [postcode and city], Croatia, OIB [OIB number]. Contact: hello@fotospinbooth.com.

2. Data we collect

Website visitors

Our website does not use advertising or tracking cookies. Our hosting provider may process technical data such as IP address and browser type in server logs for security and reliability.

Early access and contact requests

When you submit our form we store your name, email address and, if you provide them, your business name, country, booth type and message. We use this only to reply to you and manage early access. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Booth operators (our customers)

We process account and event information needed to provide the service, such as login details, event names and settings. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Event guests

Photos and videos taken at a booth are stored so guests and event hosts can download them. For this content the booth operator who ran the event is the data controller and FotoSpinBooth acts as their processor. Guest media is kept only for the download period of the operator's plan, after which it is deleted, and operators can delete it earlier at any time. If you appear in a photo or video and want it removed, contact the booth operator or us.

3. How we share data

We do not sell personal data. We use service providers to host the service ([hosting provider], [region]) and to send email ([email provider]). They process data only on our instructions. Where data is transferred outside the EEA we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

4. How long we keep data

  • Early access requests: until early access ends or you ask us to delete them, at most [24] months.
  • Operator accounts: while the account is active, plus any period required by law (e.g. invoices).
  • Guest photos and videos: for the download period of the operator's plan (30 days to 1 year).

5. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise them, email hello@fotospinbooth.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority.

6. Security

Data is transmitted over encrypted connections (HTTPS). Guest download links use long, random identifiers that can't be guessed.

7. Children

The FotoSpinBooth service is intended for businesses. Booth operators are responsible for obtaining any consent needed when photographing children at their events.

8. Changes

We'll post any changes to this policy on this page and update the date above. Material changes will be communicated to account holders by email.