Privacy Policy

1. Data controller

Aura Invites ("we", "us") respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR).

Aura Invites — Keizersgracht 123, 1015 CJ Amsterdam, The Netherlands Email: info@aurainvites.nl — Phone: +31 20 123 4567 Chamber of Commerce (KvK) number: 00000000

2. What data do we collect?

• Account data: name, email address, phone number, password (encrypted).
• Order and payment data: chosen package, billing address, transaction details (full card details are processed by our payment provider and not stored by us).
• Invitation content: the couple's names, event date and location, photos, texts and other content you add yourself.
• Guest data: names, email addresses and RSVP responses of guests you invite (you act as data controller for this; we act as processor).
• Technical data: IP address, device and browser type, cookies and similar technologies (see our cookie policy).
• Communication: messages you send us via contact form, email, or WhatsApp.

3. Why do we use this data?

• Creating and managing your account and delivering our services (performance of the contract).
• Processing orders and payments.
• Sending invitations and collecting RSVP responses on your behalf.
• Customer support and answering questions.
• Improving our website using anonymized analytical data (only with consent).
• Complying with legal obligations, such as tax record-keeping requirements.
• Marketing communications, only if you have given consent; you can unsubscribe at any time via the link at the bottom of our emails.

4. Legal basis for processing

We process personal data based on: (a) performance of the contract you enter into with us, (b) your consent (for example for analytics cookies or marketing), (c) a legal obligation (for example accounting record-keeping), and (d) our legitimate interest (such as website security and fraud prevention).

5. Sharing with third parties

We only share data with third parties when necessary, such as:

• Hosting providers that store our website and data;
• Payment providers for processing transactions;
• Email and communication services for sending invitations and notifications;
• Analytics services, only based on your consent and on an anonymized/pseudonymized basis.

We enter into a data processing agreement with every processor. We never sell personal data to third parties.

6. Transfers outside the EEA

Some of our service providers may process data outside the European Economic Area. In that case, we ensure appropriate safeguards, such as the EU Standard Contractual Clauses (SCCs), to guarantee an adequate level of protection.

7. Retention periods

We do not retain personal data longer than necessary for the purposes for which it was collected. We keep account data for as long as you have an active account, and afterwards for a maximum of 2 years unless you request earlier deletion. We keep financial data in accordance with the statutory retention period of 7 years. Guest data (RSVP) is deleted no later than 12 months after the event, unless you request deletion earlier.

8. Your rights

Under the GDPR you have the following rights:

• The right of access to the data we process about you;
• The right to rectification of incorrect or incomplete data;
• The right to erasure ("right to be forgotten");
• The right to restriction of processing;
• The right to data portability;
• The right to object to processing based on legitimate interest or for marketing purposes;
• The right to withdraw previously given consent at any time.

You can exercise these rights by contacting us at info@aurainvites.nl. We respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

9. Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse and unauthorized access, including password encryption, secure connections (HTTPS/TLS) and access restrictions to systems.

10. Cookies

For information about the cookies we use, please see our cookie policy.

11. Language suggestion based on IP address

On your first visit, we may use your IP address to roughly determine which country you are visiting our website from. We use this information solely to suggest a suitable language. The language is only changed if you choose to do so. We do not store the derived location. For this processing we use ipapi.co.

12. Changes

We may update this privacy policy from time to time. The most current version is always available on this page.

Contact

Questions about this privacy policy or how we handle your data? Contact us at info@aurainvites.nl.