Privacy Policy

Frankford's IT-Solutions GmbH

Fallmerayerstraße 14, 6020 Innsbruck, Austria

VAT identification number: ATU79476149 | Commercial register: FN 604296x (Handelsgericht Innsbruck)

Email: support@wedding-companion.com

For all privacy-related enquiries or to exercise your rights, please contact us at the email address above.

Account data. When you register we collect your email address and name. This information is required to create and manage your account.

Wedding and event data. You may enter wedding dates, venue information, event schedules, menu options, and other details to build your wedding website.

Guest data. You can add names, email addresses, dietary preferences, and attendee responses for your guests. You are the data controller for your guests' personal data; we process it on your behalf as a data processor (see Section 8).

Photos and media. You and your guests may upload photos and other files to the gallery. You are responsible for ensuring you have the right to share any content you upload.

Technical data. Our servers automatically record IP addresses, browser type, operating system, and request timestamps for security and operational purposes.

Payment data. Payments are processed directly by Stripe, Inc. We receive only your subscription plan type and payment status. We do not store card numbers or bank account details.

We process your personal data for the following purposes and on the following legal bases under Art. 6 GDPR:

Providing the Wedding Companion service — Art. 6(1)(b) (performance of contract).

Sending transactional emails (account confirmations, attendee notifications) — Art. 6(1)(b) (performance of contract).

Ensuring platform security and preventing fraud — Art. 6(1)(f) (legitimate interest).

Complying with tax and accounting obligations — Art. 6(1)(c) (legal obligation).

We do not use your personal data for direct marketing without your explicit consent.

We share your data only with trusted service providers strictly necessary to operate the platform. Each processor has entered into a Data Processing Agreement with us.

Supabase Inc. (San Francisco, USA) — database and file storage. Your data is stored in the EU (Frankfurt region). Transfers to the US are covered by Standard Contractual Clauses (SCCs) under Art. 46(2)(c) GDPR.

Stripe, Inc. (San Francisco, USA) — payment processing. Stripe is an independent data controller for payment data. Transfers are covered by SCCs.

Transactional emails (confirmations, attendee notifications) are delivered directly from our own servers hosted in Germany. No third-party email provider is used.

Google LLC (Mountain View, USA) — embedded maps. Public wedding pages display the venue location through an embedded Google Maps frame. When a guest opens such a page, their browser establishes a direct connection to Google and transmits technical data (IP address, browser/device information, referrer URL). Google may use this data in accordance with its own privacy policy (https://policies.google.com/privacy). Transfers to the US are covered by Standard Contractual Clauses. See Section 9 for details on how this is configured.

We do not sell, rent, or share your personal data with any third party for their own marketing purposes.

The processors listed above are US-based companies. Where personal data is transferred to the United States, the transfer is protected by Standard Contractual Clauses (EU Commission Implementing Decision 2021/914).

You can request a copy of the applicable safeguards by contacting us at support@wedding-companion.com.

Account and service data: retained for the duration of your active subscription plus six months after expiry to allow reactivation. After this period, account data is permanently deleted.

Wedding content and memories: retained as described in your plan. You may request full deletion at any time; we will complete deletion within 30 days of your request.

Payment records: retained for 7 years in compliance with Austrian tax law (§ 132 BAO — Bundesabgabenordnung).

Server logs: automatically deleted after 30 days.

Under Articles 15–22 of the GDPR you have the following rights:

Right of access (Art. 15): you can request a copy of the personal data we hold about you.

Right to rectification (Art. 16): you can ask us to correct inaccurate or incomplete data.

Right to erasure (Art. 17): you can request that we delete your personal data.

Right to restriction of processing (Art. 18): you can ask us to limit how we use your data in certain circumstances.

Right to data portability (Art. 20): you can receive your data in a structured, machine-readable format.

Right to object (Art. 21): you can object to processing based on our legitimate interests.

To exercise any of these rights, email support@wedding-companion.com. We will respond within 30 days.

When you upload or collect personal data about your wedding guests through our platform, you act as an independent data controller for that data. You are responsible for having a valid legal basis under Art. 6 GDPR (for example, your guests' consent or a legitimate interest) before collecting and processing their information.

We act as your data processor for guest data under a Data Processing Agreement incorporated into our Terms of Service. We process guest data solely on your documented instructions.

Public wedding pages can display an interactive Google Maps frame so guests can see the venue location. To protect your privacy, the map is NOT loaded automatically. Instead, a placeholder with a "Show map" button is shown by default. No connection to Google is established until you explicitly click that button.

When (and only when) you click "Show map", the map is loaded directly from Google's servers (google.com / maps.google.com). Your browser then sends technical data to Google, including your IP address, browser type, device information, and the URL of the page you are viewing. Google may also set its own cookies on its domains as part of this connection.

Legal basis. By clicking the button you give your consent under Art. 6(1)(a) GDPR for this transfer of data to Google for the purpose of displaying the map.

We do not have access to or control over the data Google collects once the map is loaded. Google acts as an independent data controller for that processing. For details on how Google handles your data, see Google's privacy policy at https://policies.google.com/privacy. Transfers to the US are covered by Standard Contractual Clauses.

If you do not want to share data with Google, simply do not click the button — the venue address is still shown in plain text next to the placeholder.

We use only essential session cookies required for authentication and security on our own domain. We do not use tracking, analytics, or advertising cookies of our own.

Third-party services embedded on the platform (in particular Google Maps — see Section 9) may set their own cookies when loaded. These are managed entirely by the respective third party.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Austrian supervisory authority:

Österreichische Datenschutzbehörde (DSB)

Barichgasse 40-42, 1030 Vienna, Austria

dsb@dsb.gv.at — www.dsb.gv.at

As an EU resident, you may also contact the supervisory authority of your country of habitual residence or the Member State where the alleged infringement occurred.

We may update this Privacy Policy from time to time. Registered users will be notified by email of any material changes at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

The current version is always available at this URL.