Privacy Policy

1. Data Controller

The data controller for data processing on this website is: [PLACEHOLDER: Full Name] [PLACEHOLDER: Address] [PLACEHOLDER: Email Address]

2. Data Collected

We collect and process the following personal data:

• Passkey credentials (WebAuthn) for secure authentication
• Names of the couple and guests
• Email addresses (if provided)
• RSVP responses and guest information
• Payment information (processed via Stripe)
• Uploaded images (gallery)

3. Legal Basis

Your data is processed based on: • Art. 6(1)(a) GDPR (Consent) • Art. 6(1)(b) GDPR (Performance of a contract) • Art. 6(1)(f) GDPR (Legitimate interest)

4. Storage Duration

• Temporary accounts: Data is automatically deleted after 24 hours • Permanent accounts: Data is stored until account deletion • Payment data: In accordance with statutory retention periods

5. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

6. Cookies

We use the following cookies: • Session cookies: For authentication and session management • Wedding auth cookies: For access to wedding pages These cookies are technically necessary and cannot be disabled.

7. Third-Party Services

We use the following third-party services:

• Stripe – Payment processing (https://stripe.com/privacy)
• Vercel – Hosting and Blob Storage (https://vercel.com/legal/privacy-policy)
• Google – Maps and Fonts (https://policies.google.com/privacy)
• AI translation services – For automatic translations

8. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority.