Privacy policy
Last updated: 30 October 2026
In short: we only use your data to make and deliver your order. No tracking cookies, no advertising, and we never sell your data.
Who is responsible
- Photoevents
- Address: Rojales/ES
- VAT / tax number: ESX3567940L
- Email: reply to your order confirmation email
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Name, email, delivery address, country, order notes | To make and ship your order and email you about it | Contract (Art. 6(1)(b)) |
| Your design and the images you upload | To print your buttons | Contract (Art. 6(1)(b)) |
| Payment status and payment reference from Mollie or PayPal. We never see your card or bank details. | To know your order is paid | Contract (Art. 6(1)(b)) |
| Order records | Bookkeeping and tax | Legal obligation (Art. 6(1)(c)) |
| IP address and browser, for a moment | Security (limiting abuse) and visitor statistics without personal data | Legitimate interest (Art. 6(1)(f)) |
Visitor statistics without cookies
We count visits without cookies and without storing anything in your browser. To count unique visitors, your IP address and browser are turned into a code with a key that changes every day. At midnight the codes and the key are deleted, and only the totals for the day remain. Your IP address is not stored.
We also count, as totals only: the country you visit from (looked up on our own server in the free database of IP Geolocation by DB-IP), the website or app you came from, your type of device, your browser and your language.
Cookies
The shop doesn't set cookies for visitors. Mollie and PayPal use their own cookies on their payment pages.
Who receives your data
- Mollie (Mollie B.V., the Netherlands) or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), when you pay. Their own privacy policies apply on their pages.
- bpost, which delivers your parcel: your name and address are on the label.
- Our email provider, which sends the emails about your order.
The shop runs on our own server, including its fonts: your browser doesn't contact Google or other third parties while you design. Backups are kept on our own storage. We don't share your data with anyone for marketing.
How long we keep it
- Orders that are never paid, and their images, are deleted automatically after 7 days, or at the latest after 30 days if a bank transfer is still open.
- Paid orders, with their design and print files, are kept as long as accounting and tax law requires, and as long as needed to handle a reprint or complaint.
- Visitor statistics only contain daily totals, no personal data.
Your rights
You can ask to see, correct or delete your data, to limit or object to its use, and to receive it in a common file format. Contact us at the email address above. We reply within one month.
If you are not satisfied with our answer, you can complain to the Spanish data protection authority (AEPD, www.aepd.es) or to the data protection authority of your own country.