Privacy Policy

We sincerely appreciate your presence here and taking a moment to understand the importance of this policy and how we protect your privacy and rights.

Privacy and protection of your personal data are fundamental to us. At Honest Editors, we are committed to respecting and safeguarding your privacy, and complying with the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD), as well as other regulations related to data protection.

This privacy policy describes how we collect, use, and protect the information you provide when using our photo editing services through our website and associated platforms.

Controller of Your Personal Data

WE ARE HONEST, S.L.U.
Address: C/ Manuel Garcia Conde, 3, 1 izq. 33001, Oviedo, Asturias, Spain
VAT ID: B72958507
Email: hello@honesteditors.com

Types of Personal Information Collected

At Honest Editors, we collect various types of personal information to ensure the effective provision of our services and the satisfaction of our users. The following details the types of personal information collected for different purposes:

For Registration:

• Name
• Email address
• Optional Information: In addition to mandatory data, we provide an optional field for users to indicate how they learned about our services and to enter discount codes if available.

For Invoice Payment:

• Name and surname
• Billing address
• Credit card information or payment method

For Gallery Submission:

• Third-party images: To complete the gallery submission, we ask the user to attach any relevant photos or files containing third party images they would like us to edit, ensuring that we have access to the necessary resources to perform the requested work efficiently.

Purpose of Information Use

‍

For Photographers:

• Photographer Registration: For photographers to use our services, we request certain personal information during the registration process on our website. This information is stored and managed through Memberstack, a service that allows us to turn our page into a private site accessible only to registered users.
• Payment Information: To process gallery payments, we request information such as name, surname, billing address, and credit card details or payment method through Stripe, a secure and reliable payment processing service.
• We use the information provided during registration to create and manage the photographer's personalized account, allowing them to access their private area on our website and use our photo editing services.
• Payment information is used solely to process payments for edited galleries and generate corresponding invoices.
• The information provided in the gallery submission form is used to identify the gallery, understand the photographer's preferences regarding editing, and receive the images to be submitted for editing.

Communication:

• We use the email address provided during registration to send important service-related notifications, such as registration confirmations, updates on gallery status, and payment confirmations.
• We may also use the email address to send promotional communications or newsletters about our services, provided that the user has given explicit consent to receive such communications.
• We do not share users' personal information with third parties except when necessary for the provision of our services (e.g., sharing payment information with Stripe to process transactions) or when legally required to do so.

Agreements with Editors

Editors who are part of the Honest Editors team are subject to a Non-Disclosure Agreement (NDA) that ensures the strict confidentiality of the received photo galleries for editing. This agreement expressly prohibits editors from disclosing, sharing, or using images or information related to the galleries for their own benefit or that of third parties. Violation of this agreement may result in disciplinary and legal actions by Honest Editors.

Legal Basis for Data Processing

‍

The collection and processing of your personal data on the "Honest Editors" web platform are based on various legal bases, in compliance with data protection regulations, including the General Data Protection Regulation (GDPR). Below, we detail the legal bases that support the processing of your data:

We require your Consent for:

• Data registration
• Sending communications
• Contact forms
• Gallery Submission

Contractual Obligations:

• Hiring of services, administrative management, billing, and payments.

Legal Compliance:

• In certain circumstances, "Honest Editors" may be legally required to process personal data to comply with legal obligations, such as fraud prevention or compliance with requirements from competent authorities.

It is important to highlight that the "Honest Editors" platform is committed to ensuring that the processing of your data is carried out lawfully, fairly, and transparently, and that your rights and freedoms are protected. We will always respect your decision to provide or not provide your personal data and will provide you with the necessary information to exercise your rights regarding your data, in accordance with our Privacy Policy.

What are your rights when providing your data?

In accordance with the General Data Protection Regulation (GDPR), Users have several rights regarding their personal data. The Website recognizes and respects these rights and facilitates their exercise as follows:

1. Right of Access: Users have the right to obtain confirmation of whether the Website processes their personal data and, if so, to access that data.
2. Right to Rectification: Users have the right to request the rectification of their personal data if it is inaccurate or incomplete.
3. Right of Deletion or Right to be Forgotten: Users have the right to request the deletion of their personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
4. Right to Object: Users have the right to object to the processing of their personal data in certain situations, such as processing for direct marketing purposes.
5. Right to Restriction of Processing: Users have the right to request the restriction of the processing of their personal data in certain circumstances, such as when the accuracy of the data is contested or the legality of the processing is questioned.
6. Right to Data Portability: Users have the right to receive the personal data they have provided to the Website in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another data controller.
7. Right not to be subject to Automated Decision-Making: Users have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect them in a similar way. The Website does not make this type of automated decisions.
8. Exercise of Rights: To exercise any of the rights mentioned above or to make any inquiries or requests related to privacy and data protection, Users can contact the Website through the following contact details:

WE ARE HONEST, S.L.U.
Address: C/ Manuel Garcia Conde, 3, 1 izq. 33001, Oviedo, Asturias, Spain.
Email: hello@honesteditors.com

The Website undertakes to respond to Users' requests regarding their rights within the legally established timeframe and in accordance with the provisions of the GDPR.

Retention Periods for Personal Data

Honest Editors is committed to securely retaining Users' personal data for the time necessary to fulfill the purposes for which it was collected, as well as to comply with legal and regulatory obligations. The retention period for data varies depending on the category of data and its specific use, and is governed by the following criteria:

Personal data of photographers and editors are securely retained and deleted when no longer needed for the purposes for which they were collected, in accordance with applicable legal and contractual obligations.

Honest Editors will implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data during the retention period, in accordance with the provisions of the GDPR. Additionally, a periodic review of the need to retain data will be carried out, and data will be deleted when no longer necessary for the established purposes or when the User withdraws their consent, in accordance with the aforementioned deadlines.

To Whom Will Your Data be Disclosed?

Honest Editors may share certain personal data of Users with third-party service providers, as data recipients, such as hosting services, email marketing, or website management. Data disclosure to these recipients is carried out with the aim of fulfilling the purposes established in the Website's Privacy Policy and improving the user experience.

Our recipients include:

• Hosting Providers: Webflow, which hosts our website platform and ensures the security and availability of our services.
• Billing Tools: Stripe, which securely processes payments from our customers and complies with industry security standards.
• Customer Management and Database Tools: Airtable, used to manage our clients' information and optimize internal communication.
• Email Marketing Tools: Mailersend, which allows us to send relevant communications to our users and customers effectively and securely.
• Analytics Tools: Google Analytics and Hotjar, which provide us with information about user behavior on our website to continuously improve the user experience and our services.
• Other Tools: Tawk for online chat, facilitating direct communication with our customers. Dropbox, Memberstack, Zapier, Make, Ez file drop, Filemail, and Noloco, which are used for various functions such as cloud gallery hosting, access to the private web, task automation, file sending and receiving, download management, and communication with members of our team.

It is important to note that data disclosure to these recipients is carried out in accordance with the obligations and requirements established by the GDPR and other applicable data protection laws. The Website ensures that data recipients comply with adequate security and privacy standards to protect Users' personal information.

Online Security

Honest Editors is committed to using and processing the included personal data of users, respecting their confidentiality, using it for the purpose of this, and fulfilling its obligation to keep it and adapt all measures to prevent alteration, loss, treatment, or unauthorized access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures that your data travels in an integral and secure manner, that is, the transmission of data between a server and web user, and in feedback, is fully encrypted. It also includes Anti-spam measures, measures against attacks and phishing.

With respect to the confidentiality of processing, Honest Editors will ensure that any person authorized to process client data (including its staff, collaborators, and providers) will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).

In the event of a security incident, Honest Editors, upon realizing it, must notify the Client without undue delay and must provide timely information related to the Security Incident as it is known or when the Client reasonably requests it.

Security Notification and Breach Statement

Honest Editors is committed to the security and protection of Users' personal data. In accordance with the General Data Protection Regulation (GDPR), the following security notification and data breach declaration procedure is established:

Detection of Security Breaches: Honest Editors implements appropriate technical and organizational security measures to protect Users' personal data. Despite all efforts to maintain data security, a security breach may occur at any given time. A security breach is defined as any incident that may lead to the destruction, loss, alteration, unauthorized disclosure, or unauthorized access to personal data.

Internal Notification: In case of detecting a security breach that may affect personal data, the Website's team will take immediate measures to contain and assess the situation. An internal investigation will be carried out to determine the nature and scope of the breach.

Notification to the Data Protection Authority: If the security breach involves a risk to Users' rights and freedoms and is subject to notification under the GDPR, the Website will notify the competent data protection authority within 72 hours from the moment it becomes aware of it. The notification will include detailed information about the nature of the breach, the categories of data affected, and the measures taken to mitigate the risk.

Notification to Affected Users: When the security breach involves a high risk to Users' rights and freedoms, Honest Editors will notify the affected Users promptly and appropriately, providing clear and understandable information about the nature of the breach, the potential consequences, and recommended measures to protect themselves. The notification will be carried out directly and, as far as possible, electronically.

Record of Security Breaches: Honest Editors will maintain an internal record of all detected security breaches, including details of the breach, measures taken to mitigate the risk, and notifications made.

Honest Editors strives to ensure transparency and timely notification in case of security breaches, thus complying with the obligations established in the GDPR. Users are encouraged to report any suspicion of a possible security breach or data protection incident through the contact details provided in the Privacy Policy. User cooperation is essential to ensure the security of personal data on the Website.

Browsing

When browsing HONEST EDITORS, non-identifiable data may be collected, which may include IP addresses, approximate geographic location, a record of how services and sites are used, and other data that cannot be used to identify the user. Non-identifying data also includes data related to users' browsing habits through third-party services. This website uses the following third-party analysis services:

• Google Analytics

This information is used to analyze trends, manage the site, track user movements around the site, and gather demographic information about our user base as a whole.

Applicable Legislation and Jurisdiction

The relationship between HONEST EDITORS and the USER will be governed by current Spanish regulations, and any dispute will be submitted to the courts and tribunals with jurisdiction.

Changes to the Privacy Policy

Honest Editors reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, Honest Editors will announce the changes on this page with reasonable advance notice before they come into effect.

Last Updated Date: February 2024

‍