Privacy policy

1. Data controller

The controller of your personal data is Bianca Mandiuc Dinu, a self-employed professional with Spanish tax ID (NIF) 60660430T and an address at Calle de Pelayo 9, 46007 Valencia, Spain, operating under the trade name ETERNAMENTE through the website eternamente.si. For any data protection matter, you can write to legal@eternamente.si.

2. Data we collect

• Account data: name, email address and, if you give it to us, a mobile phone number. Access is managed via magic link or verification code sent by email. The phone number is optional: we use it to send the preview of your invitation to your phone when you ask for it, and to contact you about your invitation or your account. If you change it, we also keep the previous numbers.
• Communication preferences: if you have an account, you may enable or disable certain optional reminders in Communications. Emails required for the account, payment, or service expiry cannot be turned off.
• Usage data: pages visited, features used, session duration, and technical errors, for analytics and to prevent fraudulent or abusive use of the service.
• Technical security data: IP address, browser, language and device type you use the service with, to prevent fraudulent or abusive use of the service.
• Payment data: processed entirely by our payment provider. ETERNAMENTE does not store card data.
• Guest data: names and emails you enter to manage your guest list. You are the controller of that data; ETERNAMENTE acts as processor (see Terms, section 8). By entering it, you warrant that you are entitled to provide it and that you will inform those individuals of this processing.
• If your wedding planner sets up your invitation: when a wedding planner pays for your invitation under our professional programme, their business name appears in the invitation footer and they can edit it and manage your guest list, just like our support team. You will always see this in your dashboard, on the Invitation tab, with the date their access started, and you can withdraw it whenever you want from there. Everything they change is recorded in your invitation log under their name. They cannot pay or renew on your behalf.
• Promotional gift data: if you play the wedding-gift scratch card without an account, we store the names, email address and approximate wedding date you give us, with your express consent, to send you the code and occasional communications. You can unsubscribe from any of those emails, without signing in.
• Cookies and similar technologies: see our Cookie Policy.

3. Purposes and legal bases

4. Retention

• Account and invitation data: while you have an active account. If you do not renew, your invitation remains accessible in your private dashboard until you request deletion.
• Usage and analytics data: up to 26 months from collection, or until you withdraw analytics cookie consent where applicable.
• Technical security data: 12 months from collection.
• Payment records (provider): 5 years for tax obligations.
• Promotional gift data: kept for as long as it may still be useful; we stop sending communications after 24 months without activity, and we delete it on request even if you have no account.
• Full erasure: contact legal@eternamente.si or use the contact form. We will respond within 30 days.

5. Processors and international transfers

We use the following processors. Transfers outside the EEA rely on appropriate safeguards (Data Privacy Framework or EU Standard Contractual Clauses):

You may request a copy of the safeguards applied to these transfers by emailing legal@eternamente.si.

6. Your rights

Under the GDPR, you may exercise the following rights by emailing legal@eternamente.si:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”).
• Restriction of processing.
• Data portability in a structured format.
• Objection to processing based on legitimate interests.
• Withdraw consent at any time, without affecting prior lawful processing.

You may also lodge a complaint with a supervisory authority in your country of residence or in Spain (aepd.es).

7. Security

We apply appropriate technical and organisational measures: TLS in transit, encryption at rest, access controls, and periodic security reviews.

8. Minors

The service is intended solely for adults. We do not knowingly collect data from children under 14; under Article 7 of the Spanish LOPDGDD, processing the data of children under that age requires the consent of the holders of parental authority or guardianship. If we detect a minor’s data without such consent, we will delete it.

9. Automated decisions and profiling

To prevent fraud and abuse of the service, we review accounts using automated systems that assess whether their use and data correspond to preparing a real wedding, without taking special categories of data into account. If they detect signs of a breach of the Terms, they may provisionally restrict access to the account until a person reviews it. Suspending or closing an account is always decided by a person.

You can ask for human intervention, express your point of view, contest the decision and ask us to explain how it was made by writing to legal@eternamente.si.

Personalised advertising (Google, Meta) is only enabled with your prior cookie consent, which you can withdraw at any time.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or a prominent notice on the platform.