Privacy Policy
Your privacy is important to us. This Privacy Policy describes how eventsguest.com collects, uses, and protects personal data when you use our site and services.
1. What Data We Collect
To process orders and provide services, we collect the following categories of personal data:
- First and last name
- Email address
- Full address (for billing)
- IP, device, browser (for technical and security purposes)
Data is provided directly by the user when placing an order or interacting with the site.
2. Purposes of Processing
Collected data is used for:
- Processing orders and delivering digital services (invitations, RSVP, menus, etc.)
- Issuing tax invoices
- Communicating with customers about order status (confirmations, updates)
- Email marketing (newsletters, offers, discounts) – only with prior consent
- Compliance with legal and accounting obligations
- Improving user experience on the site
3. Legal Bases for Processing
Data processing is based on the following legal grounds under Regulation (EU) 2016/679 (GDPR):
- Performance of a contract – providing ordered services
- Legal obligation – for issuing invoices
- User consent – for marketing communications
4. Email Communications
We may contact you via email in the following cases:
- Order confirmation or other status notifications
- Newsletters and special offers – only if you’ve given explicit consent (you can unsubscribe anytime)
5. Payment Processor
Payments are processed through an external provider. eventsguest.com does not collect or store your card details. The payment processor handles this securely under their own GDPR policies.
6. Who We Share Data With
Your data may be shared with the following recipients, strictly for the purposes described above:
- Payment processor
- Email marketing service providers (e.g., for sending newsletters)
- Hosting and site maintenance providers
- Public authorities, as required by law
Your data is not sold or shared with third parties for commercial purposes without your explicit consent.
7. Data Retention Period
Personal data is retained:
- For the duration necessary to provide services
- As required by law (e.g., tax records – up to 10 years)
- Until consent is withdrawn (for marketing)
- Until the account is deactivated after 1 year without a login (the user is informed 1 month in advance). After deactivation, the data is no longer available to the user and is kept for 10 years, the minimum legal period for historical data, then permanently deleted
After legal periods or consent withdrawal, data is securely deleted or anonymized.
8. Your Rights
As a data subject, you have the following rights:
- Right to access your data
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time (e.g., for marketing)
- Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing – www.dataprotection.ro
To exercise these rights, contact us via the site’s contact form or the email in the contact section.
9. Data Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.
10. Policy Updates
This policy may be updated at any time. The current version is always available on our site. We encourage you to review it periodically.