Privacy Policy

PRIVACY STATEMENT

This page explains what personal data PartyClic processes, why, on what legal basis, for how long, who else has access to it, and what rights you can exercise. It is written in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi “Informatique et Libertés”).

ARTICLE 1 – WHO IS RESPONSIBLE FOR YOUR DATA

The data controller is the company that publishes the site, whose full identity appears in the legal notice. For any question or request regarding your data, write to contact@partyclic.fr

ARTICLE 2 – THE DATA WE PROCESS

Your account: your email address, and your password, which we never store in plain text. If you are an organizer, the information about your events and your guests that you enter yourself.

Your photos: the photo you send us, and the image that artificial intelligence produces from it. A photo of a face is personal data; we use it only to create the image you request.

The PartyClic team may view generated images for moderation and support purposes.

Your browsing: your device’s IP address, the dates of your visits, your browser and device type, as well as the cookies described in our cookie policy.

Your payments: the amount, date, payment method and status of the transaction. We never see your card number, which is entered with our payment provider and does not pass through our servers.

ARTICLE 3 – WHY, AND ON WHAT LEGAL BASIS

Providing the service — your account, your photos, your events, support: performance of the contract between us.

Transforming your photo using artificial intelligence: your consent, given before you send it, which you may withdraw at any time by writing to contact@partyclic.fr.

Processing a purchase or a subscription and issuing the corresponding invoice: performance of the contract, followed by a legal obligation to retain accounting records.

Measuring site traffic and the effectiveness of our campaigns: our legitimate interest in knowing how the site is used and improving our pages; you may object at any time, as explained in Article 5.

Sending you marketing communications: your consent, requested separately and never pre-checked; every message includes an unsubscribe link.

Ensuring the security of the service and preventing fraud and abuse: our legitimate interest in ensuring that the service is not misused.

ARTICLE 4 – WHERE YOUR DATA IS STORED

Your account, your photos and our database are hosted in the European Union.

The server that runs the application is located in Frankfurt, Germany, with IONOS.

The emails we send you are delivered through an email delivery provider.

Certain technical processing — including the transformation of your image by artificial intelligence — is carried out by specialized providers that may be located outside the European Union. These transfers are subject to the safeguards required by the GDPR. Only the photo needed for the processing is sent to them, and only for the duration of that processing.

ARTICLE 5 – WHO ELSE HAS ACCESS TO IT

We do not sell or rent your data, and we do not transfer it to anyone for advertising purposes. It is shared only with the providers that enable us to operate the service, each bound by contract and only to the extent necessary for its role.

Payments are processed by Stripe, a payment provider compliant with the Payment Card Industry Data Security Standard (PCI-DSS). Your card details are entered on its platform and encrypted; we do not store any of them.

We use Google’s audience measurement tools: Google Tag Manager, and Google Analytics through it. They are active as soon as you arrive on the site, without a prior banner, and place cookies on your device to measure site traffic and the effectiveness of our campaigns. These cookies are kept for up to 400 days (slightly more than 13 months). You may object at any time using the “Manage cookies” button at the bottom of each page, through your browser settings, by installing the Google Analytics opt-out browser add-on, or by writing to contact@partyclic.fr.

Finally, we may be required to disclose data to a judicial or administrative authority that requests it in the manner provided by law.

ARTICLE 6 – HOW LONG WE KEEP IT

Your account and the photos linked to it are kept for as long as your account exists. You can delete it yourself from your account area: deletion erases your photos.

A trial photo that is not linked to any account is automatically deleted 7 days after it is created.

Photos taken during an event are kept in that event’s gallery: no automatic deletion applies to them. They remain for as long as the event exists, until the organizer removes them from the gallery or deletes the event. A guest may request their deletion at the address given in Article 7.

The photo a guest sends during an event remains stored with that event’s photos, with no automatic deletion: it is kept for as long as the event exists, or until a deletion request is made. The guest’s browser remembers it for 2 hours by default (a platform setting) so the guest can choose another scene without sending it again; after that period, the guest must send it again, but the file itself is not deleted.

When you open a photo, your browser may keep a copy of it for up to 7 days, on your device only. The site’s public images — scenes, backgrounds, logos — may remain there for up to one year.

Contact details left by guests are kept for 3 years from the last contact, then deleted.

Invoices and accounting records are kept for 10 years, as required by law.

Technical security logs are kept for 12 months. Cookies have a maximum lifespan of 400 days (slightly more than 13 months).

ARTICLE 7 – YOUR RIGHTS

You have the right to access, rectify and erase your data, to restrict its processing, to object to its processing, and to data portability. You may also set instructions regarding what happens to your data after your death.

Where processing is based on your consent, you may withdraw that consent at any time, without affecting the processing carried out before the withdrawal: write to contact@partyclic.fr.

To exercise these rights, write to contact@partyclic.fr We respond within one month. If you are not satisfied with our response, you may lodge a complaint with the CNIL, the French data protection authority.

ARTICLE 8 – SECURITY

Communications with the site are encrypted (HTTPS). Access to our databases is restricted to the people who need it, passwords are stored in hashed form and never in plain text, and backups remain in the European Union. No transmission over the Internet is one hundred percent secure, but we take technical and organizational measures appropriate to the risk.

ARTICLE 9 – MINORS

The service is not intended for children under 15. By using it, you represent that you are at least 15 years old or that you have the permission of the holder of parental authority.

ARTICLE 10 – LINKS

You may leave our site by clicking certain links on it. We accept no responsibility for the privacy practices of those other sites and recommend that you read their privacy policies carefully.

ARTICLE 11 – CHANGES TO THIS PRIVACY POLICY

We may amend this policy, in particular if the service evolves or regulations change. The version in force is always the one published on this page; changes take effect upon publication. If we make a significant change, we will inform you.

QUESTIONS AND CONTACT INFORMATION

To access, correct or delete your data, file a complaint, or simply ask a question, write to contact@partyclic.fr