LEGAL

Privacy policy

How we collect, use and protect your personal data under the General Data Protection Regulation (EU) 2016/679.

  • LAST UPDATED 13/9/2026
  • SECTIONS 8
  • READING TIME 2 min
  • We never sell data

    Your details are used only to reply to you and organise your event.

  • Analytics only with consent

    No statistics cookie without your “yes”.

  • Private gallery

    Each client sees only their own event, with a one-time code.

01

Data controller

NAME
Vaios Vitos
TRADING AS
GoPhotoBooth
TAX ID
112777075
GEMI NO.
042561106000
REGISTERED ADDRESS
89 Th. Charisi St, 54453 Thessaloniki, Greece
02

What data we collect

  • Contact form: name, e-mail, phone, event date, location and type, number of guests and your message.
  • Client portal: the e-mail used to receive your sign-in code, billing details (business name, tax ID, tax office, address), venue details, creative details, and your acceptance of the agreement with date, time and IP address.
  • Photos and videos: the material created at your event, made available only to you through the locked gallery.
  • Visit statistics: only if you allow it in the cookie banner (Google Analytics).
03

Why, and on what legal basis

  • To answer your request and perform the contract (Art. 6(1)(b) GDPR).
  • To issue invoices as required by tax law (Art. 6(1)(c)).
  • For visit statistics, only with your consent (Art. 6(1)(a)).
  • For site security and abuse prevention, as a legitimate interest (Art. 6(1)(f)).
04

How long we keep it

  • Contact requests: as long as needed to reply and complete the booking.
  • Photos and videos: available in the gallery for 15 days and then deleted.
  • Billing details: for as long as tax law requires.
05

Who we share it with

We never sell or rent data. It is processed on our behalf only by: our hosting provider, our e-mail delivery service, our accountant for invoicing, Cloudflare (Turnstile) to protect our forms from spam, Google (Analytics) only with consent, and — when the material is large — a file-transfer service for delivery.

Where data is transferred outside the European Economic Area, this happens with the appropriate safeguards required by the GDPR.

06

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time. For any of these, e-mail us at the address above.

You can also lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr

07

Security

Your connection to the site is encrypted. Portal sign-in uses a one-time code that expires in 15 minutes, and each client sees only their own event.

08

Cookies

For the cookies we use, see the Cookie policy.

Anything unclear?

Write to us and we will reply right away.