Privacy Policy
Statement of Personal Data Protection on the BORN2PARTY website
The protection of personal data and information is of utmost priority for the BORN2PARTY website and the basis for the trust relationship we seek to establish with visitors to the website and users of our services.
Definitions
- A "Visitor" is defined as a person who visits the borntoparty.app website and/or the application without being a "User" thereof.
- A "Registered User/User" is defined as a person who has registered on the website and/or the BORN2PARTY application by entering the required information and has access to all the functionalities of the website and/or the BORN2PARTY application.
- A "Host" is a Registered User who creates an invitation for an occasion of their own and shares its link with the people they are inviting.
- A "Guest" is a person who opens an invitation from the link a Host shared with them and responds to it. A Guest does not need to be a Registered User.
- A "Personalized Page" is the section of the website and/or the application created exclusively by Registered Users for sharing an event.
- An "Event Creator" is the creator of the event.
- An "Attendee of the Event" is a person included in the Attendee List of the Event and who has expressed their intention to participate in the event.
- An "Attendee List of the Event" is the section of the website and/or the application created exclusively by the Registered User and includes the personal information of third parties who will attend an Event.
- An "Account Profile" is the section of the website and/or the application accessible exclusively by the Registered User.
- A "Search" is the section of the website and/or the application where all active Events are displayed.
- An "Event Addition" is defined as the section of the website and/or the application where the Registered User can submit an upcoming Event.
- "Filters" refer to the section of the website and/or the application where the registered User configures the search criteria for Events.
- An "Event Management" is the section of the website and/or the application where the Registered User has access to the Events they have shown interest in.
- A "Donation" is the section of the website and/or the application where the Registered User has the option to make a donation to the website and/or the application.
- A "Feedback" is the section of the website and/or the application where the registered User can provide feedback on the website and/or the application.
- A "Link" is an electronic address of a website located outside the borntoparty.app website.
- "Website" or "Site" or "BORN2PARTY website" or "BORN2PARTY site" refers to the website: borntoparty.app
- "Application" refers to the BORN2PARTY application.
Data Controller and Processor
The website and/or the BORN2PARTY application hereinafter referred to as "BORN2PARTY" or "we" or "data processor" or "owner" or "data controller" or "responsible for personal data processing", is the administrator and responsible for the use of user data collected during their visit to the website borntoparty.app in accordance with Law 4624/2019 as amended by Law 5043/2023, EU Directive on Data Protection (95/46/EC), and Regulation (EU) 2016/679.
The BORN2PARTY website is interested in privacy issues and wants you to know how we collect, use, and disclose information.
This Privacy Policy describes our practices regarding the information we collect through the website operated and controlled by us and to which you have access to this Privacy Policy. By visiting our website, providing personal information to us, or using it in any way, such as by registering for our services, you unreservedly accept the practices described in this Privacy Policy, which is an integral part and whole with our Terms of Use, with which it should be read and interpreted. Owner's email address: [email protected].
2.1. What is the processing of personal data?
It is any act or series of acts carried out with or without the use of automated means, on personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
2.2. Personal data we process
Personal data is any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Collection of Personal Data from the BORN2PARTY Website
3.1. Registration – Account Creation
To create an invitation you register an account. You may register with an email address and a password, in which case we send a message to that address to confirm it belongs to you, or you may register using your Google account, in which case Google passes us your name, your email address and your profile picture.
A profile may optionally carry a display name, a photograph, a short biography, a telephone number and an address. None of these are required, and none are required to create or send an invitation. In particular, the website sends no SMS and makes no telephone calls, so a telephone number entered here is stored and not used.
Responding to an invitation does not require an account. See 3.3.
3.2. Creating an Invitation
An invitation holds what the Host puts into it: the names of the hosts, the title, date, time and place of the occasion, any text addressed to the guests, any questions the Host wants answered, and any photograph the Host uploads. A Host who enters a third party's details into an invitation, for example the name of a venue or of another host, is responsible for doing so lawfully.
3.3. Responding to an Invitation
A Guest does not need an account. When a Guest responds we record the name they give, whether they are coming, their answers to any questions the Host asked, and which of any offered dates suit them. Where a Guest asks to be emailed a code in order to respond, or to be sent a copy of their answer, we also record the email address they give for that purpose.
That information is collected on behalf of the Host, who is the person the Guest is answering, and it is shown to that Host. It is not used to advertise to the Guest and does not by itself create an account for them. A Guest who wants their response removed should ask the Host who invited them, or write to [email protected].
3.4. Cookies
The BORN2PARTY website uses cookies to recognize visitors/users on certain services and pages of the BORN2PARTY website. Only the cookies that are strictly necessary for the website to work are set without your consent. Analytics and advertising cookies, including our own, remain switched off until you choose to turn them on, and you can change that choice at any time. For more information, please refer to section 14 of this privacy statement.
3.5. Links to Third-Party Websites ("Links")
The BORN2PARTY website includes links ("links") to other websites that are not controlled by the same but by third parties (natural or legal persons). Under no circumstances is the BORN2PARTY website responsible for the Privacy Policies followed by these third parties.
3.6. Third-Party Service Providers
Service providers may vary over time, but may include the following:
- Data analytics service providers for analyzing the browsing behavior of visitors and users on the BORN2PARTY website to better serve them.
- Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc ("Google"). Google uses the data collected to track and examine the use of this application, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network. Personal Data collected: Cookies and Usage Data. Google Analytics only stores data on your device, and only builds any profile of you, if you have consented to analytics cookies. If you have not consented, or you refuse, its tag runs in a restricted mode in which it stores nothing and cannot identify you. See section 14 for exactly what that means. For more information on Google's privacy policy, click here: https://policies.google.com/privacy?hl=en
- Microsoft Clarity (Microsoft Corporation)
Microsoft Clarity is a session-recording and heatmap service provided by Microsoft Corporation ("Microsoft"). It replays how a visitor moved through a page, letting us see where people get stuck in the invitation editor. Personal Data collected: Cookies and Usage Data. It only runs, and only sets a cookie, if you have consented to analytics cookies; if you have not consented, or you refuse, it is not requested at all. For more information on Microsoft's privacy policy, click here: https://privacy.microsoft.com/en-us/privacystatement
- Service providers that help us determine your location based on your address
- Widely available data sources, such as free government databases or other freely available data.
3.7. We Do Not Collect:
- Sensitive information: we request that you do not send us or disclose sensitive personal data (such as social security numbers, information about race or ethnic origin, political opinions, religion or other beliefs, health, criminal background, or your participation in trade unions) through the services of the website or by any other means.
- Personal data from children under 16 years of age.
Purpose of Processing Personal Data
We process your personal data for the following purposes:
a) To provide, maintain, and improve our services, including our website and application; b) To process transactions and send you related information; c) To send you technical notices, updates, security alerts, and support and administrative messages; d) To respond to your comments, questions, and requests; e) To monitor and analyze trends, usage, and activities in connection with our services; f) To personalize and improve the services; g) To comply with legal obligations.
Legal Basis for Processing
We process your personal data on the following legal bases:
a) Consent: Where you have given us your consent to process your personal data for one or more specific purposes.
b) Contract: Where the processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract.
c) Legal obligation: Where the processing is necessary for compliance with a legal obligation to which we are subject.
d) Legitimate interests: Where the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your fundamental rights and freedoms.
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your personal data, we will securely delete or anonymize it.
Your Rights
Under applicable data protection law, you have the following rights:
a) Right of access: You have the right to request a copy of the personal data we hold about you.
b) Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
c) Right to erasure: You have the right to request that we delete your personal data in certain circumstances.
d) Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
e) Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
f) Right to object: You have the right to object to the processing of your personal data in certain circumstances.
To exercise any of these rights, please contact us at [email protected].
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
International Data Transfers
Your personal data may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We will ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable law.
Third-Party Services
Our website and/or application may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any personal information.
Children's Privacy
Our website and/or application is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.
Google Login
Our website and/or application uses Google OAuth for authentication. When you log in with Google, we receive your name, email address, and profile picture from Google. We use this information solely for the purpose of creating and managing your account on our platform. We do not share this information with third parties except as described in this Privacy Policy. For more information on Google's privacy practices, please visit https://policies.google.com/privacy.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Cookies Policy
We use cookies and similar technologies to operate our website and/or application, to remember your settings, and, where you allow it, to understand how the site is used and to measure our advertising. Cookies are files with a small amount of data which may include an anonymous unique identifier. They are sent to your browser from a website and stored on your device.
Your choice comes first. On your first visit we set only the cookies that are strictly necessary for the website to function. Analytics and marketing cookies are switched off until you choose to turn them on, and nothing that is not strictly necessary is loaded before you have made a choice. Refusing is as straightforward as accepting: both options are offered together, with equal prominence.
We group cookies into two categories, because that is how many kinds we actually use: a) Necessary: sign-in, security, and remembering your language. The website cannot work without these, so they are always active and are not subject to consent. b) Analytics and advertising: which pages and invitation templates people open, measuring which advertisements bring people to Born To Party, offering the Google sign-in prompt, and session recordings that help us see where people get stuck. This is the only optional category, and it is off unless you turn it on.
The analytics and advertising category covers both our own measurement and Google's. Our own consists of two first-party cookies: browserID, a random identifier that lasts one year, and sessionID, which lasts thirty minutes. They let us count how often an event listing is seen and opened. They contain no name, email, or other detail about you, and neither is set unless you have consented. If you withdraw consent, both are deleted.
Where we use Google services (Google Analytics, and conversion measurement for Google Ads), we apply Google Consent Mode. Your choice is communicated to Google before any of its tags may read from or store anything on your device.
To be precise about what happens if you refuse: the Google tag is still loaded, but with every consent signal set to denied before it runs. In that state it writes no cookie and stores no identifier on your device, so nothing links this visit to any other visit you make.
It does still send Google signals about what happens on the site. That includes pages being viewed, and also named actions such as signing in, registering, starting an invitation, moving through the invitation editor, and creating an invitation. Those signals carry details of the action, for example which invitation template was used, and they necessarily carry your IP address and browser details together with a random value that exists only for the current page and is never saved. They do not carry your name, your email address, or any identifier that persists between visits. Google uses them to estimate overall totals. No cookie is stored, and no advertising profile is built, unless you consent.
We also use Microsoft Clarity to record how visitors move through the invitation editor, so we can see where people get stuck and fix it. Unlike the Google tag above, Clarity has no restricted or cookieless mode: it is either not requested at all, or it runs and records. It is therefore only loaded after you have consented, never before, and never for a visitor who refuses or has not yet answered.
For completeness: your theme preference (light or dark) is stored in your browser's local storage rather than in a cookie, is never sent to us, and exists only because you chose it. It is not covered by the categories above and is not used to track you.
Changing or withdrawing your choice. You can review, change, or withdraw your consent at any time by selecting "Cookie preferences" in the footer of any page. Withdrawing is as easy as giving consent, and takes effect immediately. You can also instruct your browser to refuse all cookies or to tell you when one is being sent, although if you refuse the necessary cookies you may not be able to use some parts of our website and/or application.
If we change the cookies we use, or the purposes we use them for, we will ask you again rather than rely on a choice you made about something else.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: [email protected]