Privacy notice

Who we are

The controller of your data is [COMPANY NAME — pending], [ADDRESS — pending], VAT number [ΑΦΜ — εκκρεμεί], commercial registry number [ΑΡ. Γ.Ε.ΜΗ. — εκκρεμεί]. The company is still being set up, and these details will be filled in before sales begin. The website trades as Vivlary.

For anything about your data, write to us at hello@vivlary.com.

What data we use

• Your name and email.
• Your delivery address and phone number, for printed books only.
• The names, ages, grammatical gender and relationship to you of the people in the book. Grammatical gender is needed to get the Greek grammar of the story right.
• Photos of those people. They may include children.
• Text you write yourself, such as a dedication or memories for the story.
• Your orders and invoices.
• Technical data: IP address, device and security logs.
• Your cookie choices.

Payments are handled by a payment provider. We never see or store full card numbers.

What we do with photos

We use photos only to make the illustrations of the book you asked for. We do not use them to train AI. We work only with AI providers that are bound by contract not to use them for training. We will publish the list of providers on this page before sales begin.

We do not sell photos, we do not use them in advertising and we do not show them in public without your separate, explicit permission.

The photo quality check (is it sharp, is there enough light, is a face visible) runs on your own device, before anything is uploaded.

How stories and pictures are made

The stories are written and checked by our team and are built around your answers: the names, the ages, the topic and the dedication you give. The children's and baby stories are read and edited by the kindergarten teacher in our team.

The illustrations are generated by artificial intelligence from the photos. The words on each page are placed by our own software.

Why we may use it

We rely on the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

• Performing the contract, art. 6(1)(b): for your account, your order and delivery.
• Explicit consent, art. 6(1)(a): for photos. To the extent that creating a likeness from a face counts as a special category of data, we also rely on art. 9(2)(a).
• Legal obligation, art. 6(1)(c): for invoices.
• Legitimate interest, art. 6(1)(f): for security and fraud prevention.
• Consent: for non-essential cookies and for marketing emails.

Children and other adults

The website is for adults aged 18 or over. Children do not use it. A child's photo and details may be given only by the parent or legal guardian, or by someone who confirms they have the parent's or guardian's permission. Greek Law 4624/2019 (art. 21) sets 15 as the age at which a child can give digital consent alone. We simply require an adult.

If other adults appear in the photos, you confirm that they have agreed.

Who receives data

We share data only with these kinds of partners, and only what they need:

• hosting and database, in the EU;
• AI services that create text and pictures;
• a payment provider;
• a print and delivery partner: it receives the finished book file and your name, address and phone number, never the original photos;
• an email service.

We have not yet signed contracts with specific companies. When we do, we will publish the list here.

Transfers outside Europe

Data leaves the European Economic Area only with the safeguards the GDPR requires: an adequacy decision or Standard Contractual Clauses.

How we protect it

• Encryption in transit and at rest.
• The database and file storage are hosted in the EU.
• Photos are kept in private storage and can be reached only through short-lived links.
• Access is limited to the account owner and a small number of authorised staff.

If a security incident affects personal data, we will inform the authority and the people affected, as the law requires.

How long we keep it

• Photos from a preview that was never bought: deleted automatically after 7 days.
• Photos of a book that was bought: deleted automatically 30 days after delivery. We keep them that long only so we can fix mistakes.
• You can delete photos sooner, at any time, from your account or by email.
• The finished book (pictures, text, names) stays in your account so you can read and reorder it, until you delete it or close the account.
• Orders and invoices: for as long as tax law requires.

Automated decisions

We do not make automated decisions with legal effect about you, and we do not build profiles.

Your rights

You have the right to:

• access your data;
• have it corrected;
• have it deleted;
• restrict how we use it;
• receive it in a portable form;
• object to its use;
• withdraw your consent at any time. Withdrawing does not affect what was done before.

To use these rights, email hello@vivlary.com. We answer within one month.

If you think we are breaking your rights, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr.

Changes to this notice

We will announce changes on this page and, when they are important, by email.

The Greek text is the binding one. The English version is a translation for convenience.