1. Controller and contact
The controller for account, purchase, contact and service-operation data is the operator trading under the ChwileWeselne brand. Privacy enquiries can be sent to kontakt@chwileweselne.pl.
For guest data added by a Couple, the Couple generally acts as controller by deciding the purpose of invitations, RSVPs or galleries. The ChwileWeselne operator processes such data to provide the service.
2. Data we process
- account data: couple name, email, user ID, securely processed authentication data and session information;
- project data: wedding date, website content, schedule, venues, gift preferences, settings, guest list, seating plan, budget and checklist;
- guest data: names, invitations, RSVP responses, companions, meal preferences, allergies and information supplied to the Couple;
- gallery content: photos, file metadata, upload and moderation information;
- payment data: Plan, amount, status and Stripe transaction identifiers; we do not store full card numbers;
- contact data: name, email, subject, message and technical anti-abuse information;
- technical data: IP address, device and browser type, security logs and — after consent — page-view and performance data.
3. Purposes and legal bases
- accounts and service features — contract performance or pre-contract steps;
- payments and access — contract performance and accounting or tax obligations;
- messages and complaints — contract, requested steps or legitimate interests in communication and legal claims;
- security and abuse prevention — legitimate interests in protecting the Service and users;
- analytics and performance — consent, withdrawable at any time in cookie settings;
- legal compliance — including accounting, consumer and data-protection duties.
4. Recipients and providers
Only providers necessary for the Service receive data under contracts and safeguards. They may include:
- Vercel — hosting, technical logs and optional analytics and performance measurement;
- Neon — PostgreSQL database;
- Cloudflare R2 — private gallery storage;
- Stripe — payments;
- Resend — transactional and contact email;
- authorised advisers and public authorities where legally required.
5. Transfers outside the EEA
Some providers may process data outside the EEA. Transfers rely on an adequacy decision, Standard Contractual Clauses or another GDPR mechanism. Details of a specific safeguard are available on request.
6. Retention
- account and project data — while the Service is used and then for backup deletion and legal claims;
- billing data — for statutory tax and accounting periods;
- messages and complaints — for handling and applicable limitation periods;
- security and abuse-prevention logs — for a short period proportionate to the protective purpose;
- analytics data — under Vercel settings and retention periods, no longer than needed for analysis.
7. Your rights
Depending on the legal basis, you may request access, correction, deletion, restriction, portability, object to processing and withdraw consent without affecting earlier processing.
- Send requests to kontakt@chwileweselne.pl. We may request information needed to verify identity.
- For guest data controlled by a Couple, we may forward the request or assist that Couple.
- You may complain to the Polish data protection authority or your local supervisory authority.
8. Providing data and automated decisions
Providing data is voluntary, but some data is required for an account, payment, message response or RSVP. Without it, the requested action may not be available.
We do not make decisions producing legal effects solely by automated means. Analytics are not used for individual advertising profiles.
9. Security and wedding-page privacy
We use access controls, private photo storage, encrypted connections and abuse limits. No system can guarantee zero risk.
Public wedding pages are excluded from indexing by default. Couples should share codes and links only with intended people and avoid unnecessary personal data.
10. Cookies and policy changes
The Cookie Policy explains cookies, browser storage and optional analytics. Consent can be changed through “Cookie settings” in the footer.
This policy may change with functionality or law. Material changes will be communicated and the effective date updated.