1. Controller and contact
Photo Planet is responsible for processing data connected with its automated photography service. For privacy questions or requests, email [email protected] or visit the Photo Planet desk at a participating location.
2. Data we may process
We may process the name, email, and contact details provided at purchase; location and visit date; code and NFC wristband identifier; receipt; photos and capture metadata; support requests; and technical information such as device, browser, security logs, and IP address.
We do not request sensitive personal data to operate the experience. Do not include sensitive information in support messages unless strictly necessary and legally justified.
3. Necessary purposes
We use information to register the purchase; link the wristband, code, and photos; display and allow gallery downloads; email photos; handle inquiries or recovery; prevent unauthorized access; maintain cameras, the platform, and infrastructure; and comply with legal duties or authority requests.
4. Photos and NFC wristband
A photo may identify the people pictured. The wristband stores or represents the identifier needed to associate a capture with the gallery; it does not physically store images.
Protect the code and wristband as access methods. Sharing them may allow another person to view the gallery.
5. Minors and groups
When minors participate, a parent, guardian, or responsible adult must authorize and supervise use. The person activating a camera represents that the members of their group authorize linking the photo to the gallery.
6. Retention
Photos remain in the active gallery for five calendar days after purchase. At the end of that period, Photo Planet attempts to email them to the registered address and may then delete them from active storage.
Administrative information, receipts, security logs, and request records may be retained for contractual, tax, security, and legal periods. When no longer needed, they are deleted, blocked, or anonymized as appropriate.
7. Processors and transfers
We may use hosting, database, S3-compatible storage, transactional email, monitoring, and technical support providers. They process data to provide services under instructions and security measures.
Transfers may occur when needed to meet a legal duty, answer an authority, or protect rights. If applicable law requires consent for a transfer, it will be requested first.
8. Security
We apply technical and organizational controls intended to protect information, including access codes, temporary file URLs, availability restrictions, and operational logs. No system eliminates all risk, so you must also protect your code and downloads.
9. Data rights and withdrawal
You may request access, correction, deletion, or objection and withdraw consent where legally available. Email [email protected] with your name, requested right, clear description, location, visit date, and details needed to find the information.
We may request reasonable information to verify identity and avoid disclosing photos or data to an unauthorized person. We will respond within the periods established by applicable law.
10. Analytics, local storage, and performance
The platform uses local storage to remember language, settings, and gallery operation. It also uses Umami, hosted at metrics.inncol.org, to measure visits, journeys, and usage events without sending gallery codes, email addresses, photos, or other data entered by visitors.
Umami may record the page, referrer, language, browser, device, screen size, and performance metrics such as LCP, INP, CLS, FCP, and TTFB. An IP address may be used transiently to estimate country, region, or city and generate an anonymous session, but it is not stored as analytics data. Tracking respects the browser's Do Not Track preference.
11. Changes and authority
Updates will be posted on this page with their date. If a change requires new authorization, it will be requested through an appropriate method.
If you believe your data protection rights were violated, you may contact the competent Mexican data protection authority in addition to contacting Photo Planet for assistance.