Courtesy translation. This English version is provided for convenience only. The legally binding version is the Spanish one; in the event of any discrepancy, the Spanish text prevails.
1. Data controller
The controller of your personal data is Andes Software S.L. (hereinafter, "FastInvit"), tax ID B26651216, with address at Plaza Europa, núm. 18, planta 2, puerta D, 08902 L'Hospitalet de Llobregat (Barcelona), Spain. You can contact us at legal@fastinvit.es.
2. What data we process and for what purpose
We process the data you provide to us and the data generated by your use of the service. The purposes and legal bases are:
| Data | Purpose | Legal basis |
|---|---|---|
| Registration data: name, email address and password (stored encrypted). | Create and manage your account; authenticate you. | Performance of the contract. |
| Google sign-in data (OAuth): email, name and account identifier. | Enable signing in with Google. | Performance of the contract. |
| Your event content: text, dates, locations and images you upload. | Provide the invitation creation and publishing service. | Performance of the contract. |
| Guest data (RSVP): first name, last name, ID number and answers to the questions set by the organiser. | Manage attendance confirmations for the event. | See section 4 (guest data). |
| Payment data: billing email, country and Stripe customer identifier. We do not store your card details, which are handled directly by Stripe. | Process purchases and issue the corresponding invoices. | Performance of the contract and legal obligation. |
| Technical data: IP address (in system logs and in the record of the withdrawal waiver when publishing) and basic browsing data. | Security, fraud prevention and legal record of transactions. | Legitimate interest and legal obligation. |
Marketing communications (news, promotions) will only be sent if you give your consent; you may withdraw it at any time.
3. Processors
To provide the service we rely on suppliers that process data on behalf of FastInvit, under the corresponding data processing agreement:
- Stripe — payment processing and invoicing.
- Brevo — sending transactional emails (verification, password recovery, service notices).
- Google — sign-in via OAuth.
- Hostinger — hosting of the application and the data.
Some of these suppliers may carry out international data transfers; where that happens, the appropriate safeguards provided for in the GDPR apply (standard contractual clauses or other valid mechanisms).
4. Guest data (RSVP)
When you create an event and collect attendance confirmations, you are the controller of your guests' personal data, and FastInvit acts as the processor hosting them on your behalf. You are responsible for informing your guests about this processing.
Any guest may request access to or erasure of their data by contacting the event organiser or writing to us at legal@fastinvit.es, in which case we will pass the request on to the relevant organiser.
5. Data retention
We keep your account data for as long as the account remains active. Invitations follow their own life cycle: they expire at the end of the event date and, after expiry, are kept for a retention period of 6 months; once that period ends they are deleted permanently and irreversibly together with their content and the associated guest data (data minimisation). Billing data is kept for the periods required by tax and commercial legislation.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to legal@fastinvit.es. If you believe the processing does not comply with the applicable rules, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Cookies and audience measurement
FastInvit currently uses only strictly necessary technical cookies for the site to work (session handling and security). These cookies are exempt from the consent requirement under the applicable rules.
To find out how many people visit the site we use a first-party audience measurement tool (Umami) hosted on our own servers. It sets no cookies, creates no persistent identifiers, does not track your browsing across other websites and does not build profiles: it only produces aggregate statistics (page views, country, device type, referring site). The data is not shared with third parties and never leaves our infrastructure. Given these characteristics, this processing does not require your prior consent.
If in the future we add third-party analytics or marketing cookies, we will ask you beforehand through a consent banner that lets you accept or reject them.
8. Approximate geolocation from your IP address
To show prices in your region's currency and to comply with the tax obligations that apply to us, we infer your country from your IP address. The lookup runs on our own servers, against a local database (MaxMind's GeoLite2): your IP address is not sent to any third party for this purpose. Only the country is determined — never a precise location — it is kept for the duration of your browsing session and, if you make a purchase, stored alongside that purchase record. The legal basis is our legitimate interest in applying the correct price, and compliance with our legal obligations.
9. Minors
The service is not aimed at minors. By registering you declare that you are of legal age and have the legal capacity to enter into contracts.