Privacy Policy

1. Data controller

• Controller: Pedro Llaneras Moya
• Location: Murcia
• Email: llanerasp@hotmail.com
• Website: https://customyourevent.es

2. Purposes of processing

At CustomYourEvent we process personal data for the following purposes:

• User account management: registration, login and profile maintenance.
• Payment processing: management of deposits and final payments through Stripe.
• Guest and RSVP management: storage of guest data (name, confirmation, menus and allergies).
• Collaborative photo album: temporary storage of photos uploaded during the event.
• Communications: sending information about our services with prior consent.
• Customer support: management of enquiries and incidents.

3. Legal basis

The legal basis for processing your data is:

• Consent of the data subject (Art. 6.1.a GDPR).
• Performance of a contract (Art. 6.1.b GDPR).
• Legitimate interest of the controller (Art. 6.1.f GDPR).

4. Data recipients

Your data may be shared with:

• Stripe, Inc. (USA): secure payment processing, PCI DSS certified.
• Hetzner Online GmbH (Germany): hosting with servers in the EU.

We do not sell, rent or share your personal data with third parties for commercial purposes.

5. Data retention

• Account and event data: for the duration of the contractual relationship plus 5 additional years.
• Guest data (RSVP): while the event is active.
• Album photographs: 14 days after the event date.
• Billing data: 4 years according to tax regulations.

6. Data subject rights

You have the right to:

• Access: know whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data.
• Restriction: request restriction of processing.
• Portability: receive your data in a structured format.
• Objection: object to processing in certain circumstances.

To exercise these rights, contact llanerasp@hotmail.com. Maximum response time: 30 days.

You may also file a complaint with the Spanish Data Protection Agency (AEPD).

7. Cookies

We use necessary technical cookies. We do not use advertising cookies. Please see our Cookie Policy.

8. Security measures

We have implemented technical and organizational measures:

• HTTPS/TLS encryption on all communications.
• Passwords protected with bcrypt hashing.
• Secure authentication via httpOnly JWT tokens.
• Role-based access control.
• Servers in the EU (Hetzner, Germany).

9. Modifications

We reserve the right to modify this policy. In case of significant changes, we will notify you.

10. Contact

For questions about this policy, contact:

• Email: llanerasp@hotmail.com
• Web: https://customyourevent.es