O
Ovation

GDPR

General Data Protection Regulation

Last updated: 1 January 2026

Overview

Ovation Keepsakes, S.L. is committed to protecting the personal data of every individual whose information we process. This document explains how we comply with the General Data Protection Regulation (EU) 2016/679 in our role as a data controller for couples and guests who use our platform.

Data we process

We process the following categories of personal data in connection with our service:

  • Identity data: names provided by guests when leaving a message, and names of the couple who create an Ovation event.
  • Contact data: email addresses of registered users (couples and planners).
  • Voice recordings: audio and video messages submitted by guests, which may contain voice biometric data and personal statements.
  • Transcription data: machine-generated text derived from voice recordings.
  • Photographic data: photographs uploaded by guests as part of their message submission.
  • Usage data: IP addresses, browser types, session identifiers, and interaction logs collected automatically.
  • Payment data: billing information processed by our payment provider, Stripe. We do not store full card numbers.

Legal basis

We rely on the following legal bases under Article 6 GDPR:

  • Contract: processing necessary to perform our service agreement with registered couples and planners.
  • Consent: processing of guest voice recordings and photographs, where guests explicitly agree before proceeding.
  • Legitimate interests: security monitoring, fraud prevention, and service analytics, balanced against data subject rights.
  • Legal obligation: retaining financial records as required by applicable tax law.

Your rights

Under the GDPR, you have the right to access your personal data, correct inaccurate data, request erasure where processing is no longer necessary, restrict processing, receive your data in a portable format, and object to processing based on legitimate interests. To exercise any of these rights, contact us at privacy@ovation.wedding. We will respond within 30 days.

Data transfers

Our infrastructure is hosted within the European Economic Area. Where we engage sub-processors located outside the EEA, we ensure adequate safeguards are in place — including Standard Contractual Clauses approved by the European Commission — before any transfer takes place.

Retention

We retain account data for as long as your account is active, and for up to 12 months after deletion. Guest voice recordings and photos are retained for the duration of the couple's subscription and deleted within 90 days of account closure. Financial records are retained for 7 years as required by Spanish tax law.

Contact

Our data protection contact is reachable at privacy@ovation.wedding. Our registered address is Ovation Keepsakes, S.L., Carrer de Provença 123, 08036 Barcelona, Spain. If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with the Spanish data protection authority (AEPD).