The joy is in the giving.
Privacy
Your information accompanies the moments you organize. This notice provides an exhaustive breakdown of personal data processed, marketing uses, and your GDPR rights.
Who is responsible?
Controller: Digital Mind SARL, Douala, Republic of Cameroon. Privacy contact: privacy@giventra.com. Designated EU Representative (Art. 27 GDPR): Digital Mind SARL – EU Representative, [EU Office, Germany / France], email: dpo-rep@giventra.com.
Exhaustive inventory of personal data stored
We store: 1) Account data: full name, email address, salted password hash, language preference; 2) Event data: title, date, time, optional venue/location, description, budget, cover photo; 3) Guest data: invitee names, emails, RSVP responses, guest access tokens; 4) Wishlist & gifts: item titles, external shop URLs, prices, notes, reservation statuses and timestamps; 5) Secret Santa: encrypted giver-recipient pairings; 6) Logs: transactional email delivery logs and server access logs (IP addresses, User-Agent, timestamps, CSRF & session cookies).
When someone invites you (Art. 14 GDPR)
An organizer may supply your name and email address so Giventra can send a personal event invitation on their behalf (Art. 6(1)(f) GDPR). Your responses and subsequent entries come directly from you. Opening an invitation does not create an account, and guest invitees are never subscribed to marketing or promotional newsletters.
Purposes and legitimate interests (Art. 6(1)(f) GDPR)
Service provision: Art. 6(1)(b) GDPR. Legitimate interests (Art. 6(1)(f) GDPR) include: delivering organizer-initiated invitations; real-time duplicate gift prevention; defending systems against DDoS, brute-force attacks, and scraping; direct marketing of similar features to existing users (UWG § 7(3)); and legal defense. Compliance: Art. 6(1)(c) GDPR. Promotional marketing: opt-in consent under Art. 6(1)(a) GDPR.
Who receives information and EU hosting
All databases and servers are hosted in certified data centers within the European Union (Germany / France). Event information is accessible only to authorized participants. Remote technical support by Digital Mind SARL in Cameroon is safeguarded by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
How long information is kept
User accounts remain until deletion is requested. Open events remain accessible until deleted by the organizer. Security server logs are automatically purged after 7 to 30 days. Archiving an event reorders it in the dashboard but does not delete data.
Your statutory rights and supervisory authorities
Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection to legitimate interest processing (Art. 21). Contact: privacy@giventra.com. You have the right to complain to an EU supervisory authority (e.g. BfDI in Germany or CNIL in France).
Required information and automated processes
Account and invitation fields enable the requested services; wishlist entries are optional. The Secret Santa algorithm matches participants randomly based on organizer rules; this is a mathematical feature and does not constitute automated individual decision-making under Article 22 GDPR.
External links, product updates and newsletters
External merchant links redirect to third-party operators under their respective privacy policies. Registered users may receive product updates regarding similar platform features (§ 7(3) UWG) with the right to object at any time via a single-click unsubscribe link or by contacting privacy@giventra.com. General promotional newsletters require separate opt-in consent.