Party Planner – Privacy Policy Effective Date: 2025-06-01 At Party Planner, your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our services, in compliance with the General Data Protection Regulation (GDPR). 1. Who We Are Party Planner is the controller of your personal data. If you have questions or requests, you can contact us at: Email: [jones@jsft.dk] 2. What Data We Collect We collect the following types of personal data: a. When You Use the Service Name Email address Event details (e.g., title, date, location) RSVP status Messages or notes related to the event Uploaded photos or content b. When Guests Interact with an Invitation Name (if entered) RSVP status Email (if invited via email) Uploaded media (if allowed by host) c. Technical Information IP address Browser type Device information Usage data (e.g., page visits) We do not collect sensitive personal data (e.g., health, political views, etc.) and we do not use cookies for advertising. 3. Why We Collect Your Data (Legal Basis) We process your data only when we have a valid legal basis: Purpose Legal Basis To provide our services Contractual necessity To send invitations & track RSVPs Legitimate interest To enable photo sharing Consent (provided by uploaders) To ensure security and integrity Legitimate interest / Legal obligation To respond to inquiries Legitimate interest You may withdraw consent at any time for data collected based on consent. 4. How We Use Your Data We use your personal data to: Manage invitations and guest lists Track and display RSVPs Facilitate communication between hosts and guests Allow uploads and access to photo galleries Improve our service and maintain security 5. How Long We Store Your Data We retain data only as long as necessary: Event and user data: deleted or anonymized after [12 months] of inactivity Uploaded photos: retained until the event host deletes them or account is closed Legal/transactional records: retained as required by law You can request deletion at any time (see Section 8). 6. Who We Share Data With We do not sell your data. We only share it with: Service providers (e.g., cloud hosting, analytics) Legal authorities (only if required by law) All providers are bound by confidentiality and data protection agreements. 7. International Transfers If data is transferred outside the EU/EEA (e.g., for hosting), we ensure: The recipient country has adequate data protection, or We use Standard Contractual Clauses approved by the EU 8. Your Rights Under GDPR You have the right to: Access your personal data Rectify incorrect or incomplete data Erase your data (“right to be forgotten”) Restrict or object to processing Port your data to another provider Withdraw consent at any time To exercise your rights, contact us at [privacy@yourdomain.com]. You also have the right to lodge a complaint with your local data protection authority. 9. Security We implement appropriate technical and organizational measures to protect your data, including: Encryption Access controls Regular security reviews However, no system is 100% secure, so please use strong passwords and protect your login information. 10. Children’s Privacy Party Planner is not intended for children under 13. We do not knowingly collect personal data from children. 11. Changes to This Policy We may update this Privacy Policy. Material changes will be communicated via email or prominently on the site. Continued use of the Service after updates means you accept the new policy. 12. Contact For questions, concerns, or data requests, contact: Email: [jones@jsft.dk]