Privacy Policy
Last updated: February 2025
This Privacy Policy describes how Photo Booth Ibiza (operated by Miguel Aparicio Ruiz, autónomo / self-employed, with registered address at C/ Calderón de la Barca 18, A05, Albacete, 02002, Spain, NIF: 47080145L) collects, uses, and protects the personal information of visitors to photoboothibiza.co.uk and clients who use our photo booth hire services.
By using our website or booking our services, you agree to the terms of this Privacy Policy. We are committed to complying with the General Data Protection Regulation (GDPR) — EU Regulation 2016/679, the Spanish Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD), and the UK Data Protection Act 2018.
1. Data Controller
The data controller responsible for your personal data is:
2. What Data We Collect
We may collect the following personal data when you interact with our website or services:
- Contact information: Name, email address, phone number, WhatsApp number
- Event details: Event date, type, venue, number of guests, and any additional information you provide in the contact form
- Photographs and videos: Images captured during events using our photo booth equipment
- Technical data: IP address, browser type, device information, pages visited, and cookies (see our Cookie Policy)
- Communication data: Records of correspondence via email, WhatsApp, or phone
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide quotes and manage bookings: Processing your enquiries, preparing quotes, confirming bookings, and managing service delivery (legal basis: performance of a contract, Art. 6.1.b GDPR)
- To deliver our services: Operating photo booths at your event, capturing and processing photographs/videos, providing digital galleries (legal basis: performance of a contract)
- To communicate with you: Responding to enquiries, sending booking confirmations, and providing customer support (legal basis: legitimate interest, Art. 6.1.f GDPR)
- To improve our website: Analysing website usage through cookies and analytics tools (legal basis: consent, Art. 6.1.a GDPR)
- To comply with legal obligations: Tax and accounting requirements under Spanish law (legal basis: legal obligation, Art. 6.1.c GDPR)
4. Photographs & Videos at Events
When we provide our photo booth services at your event, we capture photographs and/or videos of guests who voluntarily use the booth. By stepping into the photo booth, guests consent to having their image captured. The event organiser (our client) is responsible for informing their guests about the presence of the photo booth.
Photographs may be shared via:
- Instant printed copies given directly to guests
- A private online gallery accessible to the client and their guests for a limited time
- Digital sharing options chosen by guests themselves (email, social media)
We will not publish guest photographs on our website or social media without explicit prior consent from the client and/or the individuals depicted.
5. Data Sharing
We do not sell, trade, or rent your personal data to third parties. We may share your data with:
- Service providers: Hosting providers, cloud storage for digital galleries, and analytics services — all operating under appropriate data processing agreements
- Legal authorities: When required by law or regulation
- Professional advisors: Accountants and legal advisors, for tax and legal compliance
6. International Data Transfers
Your data may be processed both in Spain (EU) and the United Kingdom. Transfers between the EU and the UK are covered by the adequacy decision granted by the European Commission. If data is transferred to any other third country, appropriate safeguards (such as Standard Contractual Clauses) will be in place.
7. Data Retention
- Enquiry data: Retained for up to 12 months after your last interaction
- Client and booking data: Retained for the duration of the contract plus 5 years (to comply with Spanish tax obligations)
- Event photographs: Stored in our online gallery for the period agreed in your package (48 hours to permanent), then deleted
- Analytics data: Retained as per the cookie durations outlined in our Cookie Policy
8. Your Rights
Under the GDPR and UK GDPR, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request that we limit how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interest or direct marketing
- Right to withdraw consent: Withdraw your consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our website is not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If we become aware that we have collected data from a child under 16 without appropriate consent, we will take steps to delete that information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
12. Contact
For any questions regarding this Privacy Policy or your personal data, please contact: