Privacy & Policy

Effective Date: [21/11/2025]

  1. Introduction

Welcome to moments.3sixtyeye.com, owned and operated by SP 3SIXTY EYE DIGITAL MEDIA LIMITED (“we”, “us”, “our”).
We respect your privacy and are committed to processing your personal data transparently, lawfully, and securely, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Cyprus national data protection legislation.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

  1. Data Controller

The Data Controller responsible for your personal data is:

SP 3SIXTY EYE DIGITAL MEDIA LIMITED
Legal representative: Savvas Spetsiotis
Registered address: Nicosia
Email: [email protected]
Phone: +357 95741431

If you have any questions about how we process your data, you may contact us using the above details.

  1. Types of Personal Data We Collect

We collect and process the following categories of information:

A. Information you provide voluntarily

  • Full name
  • Email address
  • Phone number
  • Event details (wedding, christening, dates, locations, preferences)
  • User-submitted photos/videos for editing or production
  • Billing information (where applicable)
  • Consent forms (for photo usage)

B. Automatically collected information

  • IP address
  • Browser type & device information
  • Cookies & analytics data
  • Browsing behavior on our website

C. Visual material

  • Photos and videos captured during our services
  • Metadata included in images (location, time, camera information)

 

  1. How We Use Your Information

We use your data to:

  • Provide, personalize, and improve services (digital marketing, content production, photography & videography).
  • Communicate with clients about bookings, events, and services.
  • Process payments and invoices securely.
  • Send newsletters, updates, or promotional materials (with explicit consent).
  • Maintain records for legal obligations and legitimate business interests.
  • Enhance website performance, monitor usage, and perform analytics.
  • Use photos/videos in portfolio, social media, or marketing only with explicit consent.
  1. Legal Basis for Processing

We process personal data based on the following legal grounds as required by GDPR:

  • Contract performance (Art. 6(1)(b))
    To provide photography/videography services, deliver galleries, communicate about the event, and issue invoices.
  • Consent (Art. 6(1)(a))
    For marketing emails, newsletter subscription, and use of photos or videos for portfolio, website, or social media.
    You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c))
    For accounting, tax records, and regulatory compliance.
  • Legitimate interest (Art. 6(1)(f))
    To ensure website security, prevent fraud, and improve user experience.
  1. How We Use Your Information
  • We do not sell, trade, or rent your personal data.
  • Shared only with trusted service providers under GDPR-compliant agreements (hosting, cloud storage, printing labs, payment processors, external editors).
  • We may disclose data if legally required or to protect rights, property, or safety.

We use personal data for the following purposes:

  • To deliver photography and videography services
  • To communicate with you about bookings, scheduling, and event details
  • To deliver final image galleries and videos
  • To provide customer support
  • To create invoices and manage payments
  • To maintain business records as required by law
  • To improve our website and services
  • To send promotional content (only with your explicit consent)
  • To showcase visual material in our portfolio (only with your explicit consent)
  1. Use of Photos and Videos for Portfolio & Marketing

We never use your photos or videos for any promotional or marketing purpose unless you have given explicit written consent.

Your consent may be revoked at any time by emailing:
[email protected]

  1. Data Sharing with Third Parties

We do not sell or trade your personal data.

However, we may share your data with trusted third-party service providers, strictly under GDPR-compliant Data Processing Agreements (DPAs):

  • Website hosting provider
  • Cloud storage services (e.g. for client galleries)
  • Payment processors
  • Album printing companies
  • External editors (only if you consent)
  • IT and security providers
  • Legal and accounting professionals

All third parties are required to maintain confidentiality and data security.

      9.International Data Transfers

If any data is stored or processed outside the European Economic Area (EEA), we ensure protection through:

  • EU Standard Contractual Clauses (SCCs), or
  • Transfers to countries with an adequacy decision by the European Commission.

We will notify you if such transfers occur

     10.Data Retention Periods

We store personal data only for as long as necessary:

  • Booking & communication records: 3 years
  • Financial & invoicing data (required by Cyprus tax law): 10 years
  • Photos and videos:
    • Until delivery + 12 months backup
    • Longer retention only with your consent
  • Consent records: for as long as the consent remains valid

Once retention periods expire, your data is securely deleted or anonymized.

     11. Data Security Measures

We implement a combination of organizational and technical measures, including:

  • Encrypted storage
  • Secure servers
  • Restricted access to visual materials
  • Multi-factor authentication for internal systems
  • Regular security audits
  • Encrypted backups
  • GDPR-compliant data processor agreements

While we strive for maximum security, no online system is 100% risk-free.

    12. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion (“right to be forgotten”)
  • Limit processing
  • Object to processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent at any time
  • Submit a complaint to the Cyprus supervisory authority

To exercise your rights, email:
[email protected]

     13. Digital Marketing & Re-marketing

  • Services may include Google Ad Words, Facebook, Instagram, Twitter, LinkedIn re-marketing.
  • Cookies are used to inform, optimize, and serve ads based on past visits.
  • Opt-out links available in the respective privacy policies of each platform.

      14. Cookies and Tracking Technologies

Our website uses cookies for:

  • Essential functionality
  • Analytics
  • Performance optimization
  • User experience improvement

You can control or disable cookies through your browser settings.

A detailed Cookie Policy is available here: Cookie Policy

     15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
When significant changes occur, we will notify users via website notice or email.

     16. Contact Information

For any concerns, questions, or data-related requests, please contact:

SP 3SIXTY EYE DIGITAL MEDIA LIMITED
Address: Nicosia
Email: [email protected]
Phone: +357 95741431