Privacy Statement
Last updated: 31 May 2026
Version 1.0
Crowd Pics cares about your privacy. In this Privacy Statement we explain which personal data we process, why, how long we keep it and what rights you have. Crowd Pics is a service of Blom Development, based in Grave, The Netherlands (KvK 58891498).
About Crowd Pics and this statement
Crowd Pics lets guests upload photos and videos to one shared event gallery using a QR code. This Privacy Statement applies to the collection and processing of personal data via our website and service.
We process personal data in accordance with the General Data Protection Regulation (GDPR).
Our two roles: processor and controller
It is important to distinguish between two situations:
1. Event photos and videos — we are the processor
For the content guests upload to a gallery, the organiser is the controller. They determine the purpose and means. Crowd Pics processes this content solely on the organiser's instructions and acts as a processor. These arrangements are set out in our data processing agreement.
2. Account, customer and website data — we are the controller
For the data we need to offer the service, manage accounts, handle payments and run our website, we are the controller. This Privacy Statement focuses primarily on that.
Which personal data we process
Organiser data
- name and email address;
- login and account details;
- details about your event (such as name, date and chosen package);
- payment and invoice details (processed via Mollie).
Guest data
- the photos and videos you upload, including any people visible in them and information stored in the file (such as timestamp);
- an optional name or caption you add yourself.
Technical data
- IP address and device/browser information;
- log files and usage data needed for the operation and security of the service.
Purposes and legal bases
We only process personal data for clear purposes and on a valid legal basis under the GDPR:
| Purpose | Legal basis |
|---|---|
| Offering and managing the service and your account | Performance of the agreement |
| Handling payments and invoicing | Performance of the agreement / legal obligation |
| Securing and improving the service | Legitimate interest |
| Contact and support | Performance of the agreement / legitimate interest |
| Complying with legal obligations | Legal obligation |
Photos and videos from guests
Content in a gallery is processed on the organiser's instructions. We use this content solely to provide the service: storing, displaying and making it available to the organiser and the guests of that same event.
Want a photo removed? Please contact the organiser of the event. If that is not possible, you can reach us at info@blomdevelopment.nl and we will forward your request.
Sharing with third parties and processors
We do not sell your data. We do engage carefully selected service providers who help us deliver the service. We conclude data processing agreements with them. The main ones are:
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase (Google Ireland Ltd.) | Storage of content and data, authentication | EU servers; parent company in the US |
| Vercel | Hosting of the website and application | EU / US |
| Mollie | Payment processing | EU (Netherlands) |
In addition, we may share data where we are legally required to do so.
Transfers outside the EEA
We aim to store data within the European Economic Area (EEA) and process content on European servers. Some of our service providers are part of a group based outside the EEA (such as the United States). Where data is processed outside the EEA, we ensure appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
Retention periods
We do not keep personal data longer than necessary for the purposes for which it was collected:
| Data | Retention period |
|---|---|
| Content in a gallery | For the package's retention period (30 or 180 days), then permanent deletion |
| Account and event data | As long as the account exists, until deletion by the organiser |
| Payment and invoice data | 7 years (statutory tax retention obligation) |
| Log files | Up to 12 months |
Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access, including encrypted connections (HTTPS), access restrictions and storage with certified service providers. No service is entirely free of risk; if you notice anything suspicious, please let us know.
Your privacy rights
Under the GDPR, you have the right to:
- access your data;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to the processing;
- have your data transferred (data portability);
- withdraw consent you have given.
If your request concerns content in an event gallery, the organiser (the controller) is the right point of contact; we will assist. For other requests, you can email us at info@blomdevelopment.nl. We respond within the statutory period.
Cookies and similar technologies
We only use functional and necessary cookies and similar technologies required to run and secure the website and service, such as remembering your login session and language choice. We do not place tracking or advertising cookies without your consent.
Minors
Our service is not aimed at children under 16. We do not knowingly process personal data of people under 16 without the consent of a parent or guardian. If you believe we have processed a minor's data without such consent, please contact us and we will delete it.
Complaints and supervisory authority
Do you have a complaint about how we handle your data? Please contact us first at info@blomdevelopment.nl so we can find a solution together. You also always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
Changes
We may update this Privacy Statement, for example if the service or legislation changes. You will always find the most recent version on this page, stating the date.
Contact
Questions about your privacy or this statement? We are happy to help.
Blom Development
Oranje Nassaustraat 17, 5361 CG Grave, The Netherlands
KvK 58891498
info@blomdevelopment.nl