Privacy policy

The following privacy policy (hereinafter referred to as "Privacy Policy") presents the policy of PhotoAiD S.A. regarding the processing of your personal data collected at PhotoAID S.A. stationary photo points (hereinafter referred to as the “Points”), collected through the online website service available at https://photoaid.com (hereinafter referred to as the "Website") and through dedicated mobile applications (hereinafter referred to as the "Mobile Applications").

Personal data refers to information about you as an individual, either directly or indirectly (hereinafter referred to as the "Personal Data").

The legal basis for processing your personal data is a contract - Article 6(1)(b) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter referred to as the "GDPR"). The legal basis for processing your personal data also includes the legitimate interest of the data controller - Article 6(1)(f) GDPR, which involves collecting information that allows the data controller to continuously improve the quality of services provided within the Points, the Mobile Applications and the Website (hereinafter referred to as the“Services”) and to tailor their functionalities to the needs of the User, as well as your consent - Article 6(1)(a) GDPR.

Contact

If you have questions regarding your User account on the Mobile Applications or the Website, how the Services operate, or need assistance, please use the email: help@photoaid.com.

For inquiries related to this Privacy Policy or the use of personal data of Users, etc., please contact us at the email address: privacy@photoaid.com.

There may be a need to authenticate the identity of the User seeking assistance before addressing their request, for both their safety and ours.

Data Collection

We collect and store the following data about Users:

Information provided by the User:

• Photo;
• Information necessary to provide the Services;
• Information necessary for issuing an invoice if the User requests one;
• Information received during the complaint process, if the User files a complaint;
• Information received while providing User support in using the Services;
• Information provided by the User, based on the User's explicit consent - for the marketing purposes.

Information from other sources:

Among the entities that can be such a source of data, one can include, for example:

• Payment service providers who provide us with up-to-date information about the payment method based on the relationship they have with the User, as well as data such as first and last name, address details, type and expiration date of the card, part of the card number, tokens for payment processing.

Purpose and Duration of Data Processing

The aforementioned information is used and processed for the purposes of 1) fulfilling the contract/Services, 2) meeting the legal obligations of PhotoAiD S.A., such as issuing or storing invoices, responding to complaints, ensuring warranties, 3) pursuing claims or defending against claims, 4) for analytical and statistical purposes - to continuously improve the quality of the Services provided within the Points, the Mobile Applications and the Website and to tailor their functionalities to the needs of the User, 5) only with the User's prior consent - to carry out marketing activities, which may consist in: (a) displaying marketing content to the User that is relevant to his or her interests (behavioural advertising) or (b) sending the User a newsletter (if such a newsletter has been introduced) or (c) conducting satisfaction surveys, 6) in addition, in the case of personal data in the Mobile Applications, we process the Users' personal data in order to carry out marketing activities, which may consist in: (a) displaying marketing content to the User that is not tailored to the User's preferences (contextual advertising).

This information is stored for no longer than necessary for the purposes for which the data is processed, particularly for the period in which we are obliged to store the data or fulfill other legal obligations, or for the period of limitation of claims.

Disclosure of Data

As a general rule, we do not sell, share, or transfer the collected information to other entities, unless the obligation to disclose arises from universally applicable legal provisions, or when the User's data is needed to provide the Services to Users or to improve the quality of the Services provided within the Points, the Mobile Applications or the Website and to tailor their functionalities to the User's needs, for specific purposes and under the conditions described below:

Service Providers: Entities entrusted with processing your personal data fall into the category of providers of infrastructural solutions, IT, entities collecting user feedback on our products or us, including for the purpose of personalizing and optimizing the Services or improving the Services. These entities may process your personal data in accordance with GDPR, in a third country. They may also use further entities to process your personal data, which will process it in a third country.

Payment Service Providers: PhotoAiD S.A., for the purpose of executing payments through your chosen electronic payment intermediary, will provide them with your personal data to the extent necessary.

Countries Other Than Your Country of Residence: We may also share your data with entities located in countries other than your country of residence. Therefore, your personal data may be subject to different privacy protection regulations than those in your country of residence.

In situations where we transfer your data outside the European Economic Area, we will ensure that the data is transferred in accordance with this Privacy Policy and applicable law. If data is transferred outside the European Economic Area, PhotoAiD S.A. will apply the Data Privacy Framework and Standard Contractual Clauses as safeguards in relation to countries for which the European Commission has not determined an adequate level of data protection.

We may transfer your personal data to public authorities upon their legitimate request.

User Rights and User Information

You have the right to:

• Access your personal data and receive a copy of the personal data being processed;
• Correct any incorrect data;
• Request the deletion of data in circumstances provided for in Article 17 of the GDPR;
• Request the restriction of data processing in cases indicated in Article 18 of the GDPR;
• Object to data processing in cases indicated in Article 21 of the GDPR;
• Transfer the data provided;
• The right to lodge a complaint with the supervisory authority.

Children

The privacy of minors is especially important. For this reason, no part of the Services is intended for persons under the age of 16.

Cookies and Online Advertising

We may collect and analyze non-personal information regarding the type, model of the device, advertising identifier, and all technical information about the User, the operating system (hereinafter referred to as the “System”), and other similar information. We may collect cookies containing the aforementioned information. The information is stored to improve the operation of the System. In accordance with Article 173(1)(2) in conjunction with Article 173(2) of the Polish Telecommunications Law, if you do not want cookies to be stored in your device's memory, you should modify your settings appropriately. A configuration that allows the use of cookies means that you consent to the above.

Changes to the Privacy Policy

PhotoAiD S.A. reserves the right to update this Privacy Policy at any time.In such case, an appropriate notice will be made available in the Points, in the content of the Mobile Applications, or on the Website.

Acceptance of These Terms

By using the Services, you accept this Privacy Policy. If not, please refrain from using the Services. Continued use of the Services following any changes to this Policy will be considered as acceptance of those changes.