Privacy Policy

1. Scope

This Privacy Policy explains how CUCCHIA'S WORLD processes personal data when you register for and use its private platform, galleries and social features.

2. Personal data we collect

Depending on your use of the platform, we may process:

• registration details, including first name, last name, email address, age, gender, Instagram profile and WhatsApp number;
• account and security information, including a hashed password, verification tokens and login/session information;
• platform activity, including likes, comments, replies, dates and times of interactions;
• technical information reasonably required for security and operation, such as IP address, browser information, logs and cookie identifiers;
• photographs and media in which an individual may be identifiable;
• communications sent to support or administration.

3. Why we process personal data

We process personal data to:

• create, verify and manage user accounts;
• provide access to private galleries and platform features;
• display the name connected with comments and replies;
• record likes and other interactions;
• maintain platform security, prevent misuse and investigate technical problems;
• respond to requests and provide support;
• comply with legal obligations and protect legal rights.

4. Legal bases

Depending on the processing activity, the legal basis may include performance of the agreement governing your account, legitimate interests in operating and securing the private platform, compliance with legal obligations and, where required, your consent.

Acknowledging this Privacy Policy confirms that you have been informed about the processing. It does not replace consent where the law requires a separate, freely given consent for a specific purpose.

5. Photographs and media

The platform contains event photographs and media that may show identifiable individuals. Access is restricted to registered users. Measures may be used to limit unauthorised access and misuse; however, users are also required by the Terms & Conditions to treat this content responsibly.

Requests concerning a photograph, including requests for review or removal, may be sent to the privacy contact listed above. Each request will be assessed according to the circumstances and applicable law.

6. Who can receive personal data

Personal data may be processed by authorised platform administrators and by service providers supporting hosting, database storage, email delivery, security, maintenance or professional advice. Data may also be disclosed where legally required or necessary to establish, exercise or defend legal claims.

7. International transfers

If a service provider processes personal data outside the European Economic Area, appropriate safeguards will be used where required by law. Complete this section with the actual hosting, email and other providers used by the platform.

8. Retention

Account data is retained while the account remains active and for a reasonable period afterwards where necessary for security, dispute resolution or legal obligations. Verification tokens and security logs are retained for shorter operational periods. Comments and likes may remain associated with the account until removed, anonymised or no longer required.

9. Your rights

Subject to applicable law and any relevant limitations, you may have the right to request access, rectification, erasure, restriction of processing, data portability and objection. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

You may also lodge a complaint with the competent data-protection authority. In Spain, this is generally the Agencia Española de Protección de Datos.

10. Account and content requests

To exercise a privacy right, request account deletion or raise a concern about a photograph, contact the privacy email listed at the beginning of this Policy. Additional information may be requested where reasonably necessary to verify identity.

11. Security

Reasonable technical and organisational measures are used to protect personal data, including access controls, password hashing and restricted account access. No internet service can guarantee absolute security.

12. Cookies

The platform uses technical cookies and similar storage necessary for login, session security and core functionality. Further information is available in the Cookie Policy.

13. Children

The platform is not intended for children who cannot lawfully create an account or provide the required information under applicable law. The registration process must be configured consistently with the intended minimum age and the laws of the countries in which the platform operates.

14. Changes to this Policy

This Policy may be updated to reflect changes to the platform, its providers or legal requirements. The current version and update date will be shown on this page.