Privacy policy

In short: your photograph is used only to generate your ID photo, it is deleted automatically after 24 hours, it is not shared with third parties and it is not used to train any artificial intelligence model.

Data controller

Nombre y apellidos o razón social, NIF 00000000X, Calle Ejemplo 1, 28001 Madrid. Contact: hola@fotocarnet.es.

What data we process

• The photograph you upload and the files generated from it. The image of a face is personal data; when processed for the purpose of uniquely identifying a person it is additionally considered biometric data (art. 9 GDPR). Here it is processed solely to crop and frame it: no biometric template is generated, it is not compared against any database and nobody is recognised.
• Payment data: not collected. The service is free, no payment gateway is connected and card details are never requested.
• Technical data: IP address and server logs, needed to prevent abuse and to diagnose errors.

Legal basis and purpose

The purpose is to provide the service you request. The legal basis is performance of a contract (art. 6.1.b GDPR) and, for processing the facial image, your explicit consent (art. 9.2.a GDPR), given when you voluntarily upload the photograph. You may withdraw it at any time by writing to us.

How long it is kept

The original photograph is deleted as soon as processing finishes. The generated files are deleted automatically 24 hours after upload by a scheduled process.

Recipients

• The server hosting provider, as a data processor.

No transfers are made to third parties other than the above, and no international transfers outside the European Economic Area.

We do not train models on your photos

The processing is deterministic and runs on our own server. The models that separate the background and locate facial landmarks are pre-trained models that only classify pixels: they do not learn from your image and do not store it. Your photograph is not sent to any external artificial intelligence service.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to hola@fotocarnet.es. Since the files delete themselves after 24 hours, early erasure is immediate if you quote the order reference. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Cookies

This site uses no analytics, advertising or any other cookies.