Privacy policy

SnapMyTour is a service of CONNECTPHONE S.A. A photographer, guide or driver takes photos on a tour, and travellers view and buy them from their own phone. This page explains, in plain words, what data we keep, why, and what your rights are.

1. Who is responsible
CONNECTPHONE S.A., 14 Lenorman Street, 104 36 Athens, Greece
Phone: +30 210 362 8993
Email: kotsogiannidis@connectphone.gr

2. What data we collect
From customers (travellers):
- Name, email and mobile number, when you give them to receive your photos.
- The photos you appear in and the code of your card.
- Orders, receipts, refunds and ratings.
- The consent choices you make (e.g. for promotional messages or the use of photos in advertising).
Your card details are handled only by Stripe. We never see or store them.

From partners (agencies, photographers, guides, drivers):
- Name, email, mobile number and agency details.
- The photos they upload.
- A device identifier for mobile notifications.
- Sales, commissions and settlements (for payouts, also the IBAN).

Technical data: IP address, device type and logs, for the security of the service. We only use the cookies needed for sign-in and the cart.

3. The mobile app
The SnapMyTour Photographer app asks for access to the camera (to take photos and scan cards) and to the photo library (to import photos from a professional camera). It does not track your location and does not use data for advertising tracking.

4. Why we use data and on what legal basis
- To show you, sell you and deliver your photos (performance of a contract).
- For payments, receipts and tax records (legal obligation).
- To pay our partners (performance of a contract).
- For promotional messages and for using photos in advertising, only with your consent. You can withdraw it at any time.
- For the security of the service and fraud prevention (legitimate interest).

5. Who we share data with
Only with those needed to run the service:
- The agency or photographer of your tour.
- Stripe (payments), Cloudflare (photo storage), Resend (email), Twilio (SMS), Expo (mobile notifications), Primer (receipts) and our server hosting provider.
- Public authorities, when required by law.
We do not sell your data. Some providers are located outside the EU (e.g. the USA); such transfers rely on GDPR safeguards (Standard Contractual Clauses or the EU-US Data Privacy Framework).

6. How long we keep data
- Photos: as long as needed for you to view, buy and download them. You can ask us to delete them at any time.
- Orders and receipts: as long as tax law requires.
- Contact details for promotional messages: until you withdraw your consent.
- Partner accounts: for as long as the partnership lasts, and afterwards as long as the law requires.

7. Your rights
You can ask for access, correction, deletion, restriction or portability of your data, or object to its processing. You can also withdraw your consent. Email us at kotsogiannidis@connectphone.gr and we will reply within 30 days. Partners can ask for their account to be deleted the same way.
If you believe your rights have been breached, you can file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Children
Photos of minors are sold only to the parent or guardian who buys them. The service is not intended for children under 15 without parental consent.

9. Security
Photos are stored in private storage and open only through temporary links. All communication is encrypted (HTTPS).

10. Changes
If this policy changes, we will publish the new version on this page with a new date.