Privacy Policy

This is an English translation of the Bulgarian text. If the two differ, the Bulgarian version applies.

Last updated: 15 October 2026

This policy explains what personal data we process when you browse photopoint.bg, send us a request or work with us, and what your rights are.

1. Who processes your data

The controller of your personal data is Keep Sake Ltd. („Кийп Сейк“ ООД), UIC 207446402, which operates the PhotoPoint brand.

Correspondence address: 3 Profesor Ivan Shishmanov St, 4017 Plovdiv, Bulgaria
E-mail: info@photopoint.bg
Telephone: +359 88 781 0226 (also Viber), +359 89 455 5519

2. What data we collect and why

When you send a request through the form

Contact details: first name, surname, e-mail, telephone and preferred way of contact (telephone, e-mail, Viber or WhatsApp); for companies, also the company name.
Event details: occasion, date, start time, city or venue, number of guests, approximate budget (for companies) and the description you have written.
Purpose: to reply to your request and send you a quote.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).

Offers for your next occasions

If you ticked ‘I want to receive offers from PhotoPoint by e-mail for future events’ in the form, we write to you with offers. Legal basis: your consent (Article 6(1)(a)).
If you have already been our client, we may e-mail you about similar services of ours – for example, a photo booth for your next occasion – unless you have opted out. Legal basis: legitimate interest (Article 6(1)(f)) and the exception for similar products and services in the rules on commercial communications.
Every e-mail includes a way to opt out, and you can also write to us at info@photopoint.bg. Once you opt out, we do not write to you again.

When you download a free guide

Data: e-mail, your name (optional), which guide you downloaded, when and from which page, and the text of the consent you ticked.
Purpose: to give you the guide and to e-mail you useful tips and offers for events. Legal basis: your consent (Article 6(1)(a)).
This is not a request. Your e-mail address is saved in our database and the team receives a notification in its Discord channel. It is not sent to our request management system.
Every e-mail includes a way to opt out, and you can also write to us at info@photopoint.bg.

When we enter into a contract

Invoicing details (name or company, UIC / VAT number, address), details of the event and of the payments.
Purpose: performance of the contract and accounting. Legal basis: contract and legal obligation (Article 6(1)(b) and (c)).

Correspondence

When you write to us or call us, we keep the correspondence in order to fulfil your request. If you have chosen to be contacted via Viber or WhatsApp, the communication goes through that service.

How you found us

If you came from an ad, we remember the ad parameters (for example utm_source, utm_campaign, gclid, fbclid) and attach them to your request, so that we know which ads bring in requests. We do this only if you have accepted marketing cookies – see the Cookie Policy.

When you browse the website

The server logs technical data (IP address, browser, time of the request) so that the website runs securely and to stop spam. Legal basis: legitimate interest (Article 6(1)(f)).
When you reach the last step of the request form, Cloudflare Turnstile checks that the form is being filled in by a person and not by a bot. For this purpose, Cloudflare receives technical data from your browser (for example, your IP address). Legal basis: legitimate interest – protection against spam.
Analytics and advertising cookies (Google Analytics, Google Ads, Meta, Microsoft Clarity) and our own visit statistics (an anonymous visitor number, pp_vid) are loaded only with your consent – see the Cookie Policy.
If you write in the website’s chat, your messages are sent to Anthropic, which generates the AI assistant’s reply. We do not keep the conversations on our server; in your browser they remain only while the tab is open. Do not enter personal data in the chat – for a quote, use the request form. Legal basis: your request to use the chat.
On the ‘Try for free’ page, the photo you take or upload is processed only in the browser of your phone or computer – that is where the photo frame and the background are added. We do not send it to our server or to anyone else, we do not keep it and we do not see it. The same applies to any logo you upload.
The Google reviews on the website are loaded from our server; the photos of their authors are shown directly from Google’s servers, which receive your IP address.
Some of the videos in the gallery are shown from Vimeo. They load only when you press ‘Play’, with the ‘do not track’ setting; Vimeo then receives your IP address.

Photos and videos from events

At events, the photo booth and the 360° video booth capture the guests who choose to step in front of the camera. The photos and videos are printed, shared by QR code, AirDrop or e-mail, and uploaded to the event’s online gallery. If a guest enters their e-mail address to receive their photo, we use it only for that purpose.
We use photos from events for our portfolio (website, social media) only with the organiser’s express consent.

We do not take decisions based solely on automated processing, and we do not sell personal data.

Only with providers without whom we cannot do the work, and only as much as they need:

Hosting of the website and of the server that receives requests – jethost.bg.
E-mail – Zoho Mail (Zoho Corporation), through which we receive and send e-mails.
Team notifications – Discord (Discord Inc.): every new request and every download of a free guide is sent to a private team channel so that we can reply quickly.
Spam protection – Cloudflare (Cloudflare, Inc.), the Turnstile check in the request form.
Analytics and advertising – Google, Meta and Microsoft, only if you have accepted the relevant cookies.
Video – Vimeo, only when you play a video that is still hosted there.
Chat assistant – Anthropic (Anthropic PBC), only when you write in the chat.
Public authorities – where the law requires it.

Requests are also kept in our own request and client management system, which only the staff who work with them can access.

4. Transfers outside the European Union

Some of the providers above (for example Discord, Google, Meta, Microsoft, Vimeo and Anthropic) are based in the USA or process data there. Such transfers take place under the safeguards of Chapter V of the GDPR – a European Commission adequacy decision (the EU–US Data Privacy Framework) for certified companies, or standard contractual clauses.

5. How long we keep data

Requests that did not lead to a contract and with no consent to receive offers: 2 years from our last contact.
Client data for offers of similar services: up to 5 years after your last event with us, unless you opt out earlier.
Contracts, invoices and accounting documents: for the periods required by the Accountancy Act and tax legislation.
Online gallery with the photos from the event: 30 days after the event, unless agreed otherwise.
Consent to receive offers by e-mail (from the request form or from a free guide): until you withdraw it.
After you opt out, we keep only your e-mail address on a ‘do not contact’ list, so that we do not write to you again by mistake.
Cookies: as set out in the Cookie Policy.

6. How we protect data

The website works only over a secure connection (HTTPS). Every request is also saved in a backup copy on our server, so that it is not lost if one of the systems is unavailable. Only the staff who handle requests and events have access to the data.

7. Your rights

You have the right to request:

access to your data and a copy of it;
correction of inaccurate data;
erasure, where there is no basis for keeping the data;
restriction of processing;
to receive your data in a machine-readable format (portability);
to object to processing based on legitimate interest;
to withdraw your consent at any time – without affecting the processing carried out before the withdrawal.

Write to us at info@photopoint.bg. We will reply within 3 working days.

If you believe your rights have been infringed, you can lodge a complaint with the Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, www.cpdp.bg.

8. Changes

When we change this policy, we will update the date at the top of the page. If the changes are significant, we will also point this out on the website.