Privacy policy

Data controller

Data controller: SWG PHOTOBOOTH YAZILIM SANAYİ VE TİCARET LİMİTED ŞİRKETİ

Address: Fulya Mah. Yeşilçimen Sk. Polat Tower Residence No: 12 İç Kapı No: 430 Şişli / İstanbul, Türkiye

Contact: info@skreen.tech

Scope

This Policy applies to individuals who use Skreen, create photos or videos through Skreen devices, use AI transformation features, make payments or receive digital content. Data processing may vary depending on the venue or event setup; additional notices may be displayed in the user interface where appropriate.

Data we may process

• Identity and contact data: Name, surname, email address, telephone number or similar information voluntarily provided for delivery or support.
• Visual and audio content: Photos, videos, audio, selected templates and AI-generated outputs captured or uploaded by the user.
• Transaction and payment data: Amount, date, transaction status, device/terminal and order identifiers. Skreen does not retain full card numbers or security codes; payments are processed through PAVO.
• Technical and usage data: IP address, device and browser information, operating system, app version, session times, error logs, performance and security records.
• Preferences and consent records: Language, selected experience, delivery preference and records of notices, permissions and consents.

Purposes of processing

• To create, process, display, print or digitally deliver photo, video and AI experiences.
• To process and verify payments, prevent fraud and meet accounting obligations.
• To operate the service, troubleshoot issues, maintain security, measure performance and improve the user experience.
• To respond to support requests and data subject requests.
• To comply with legal obligations and establish, exercise or defend legal claims.
• To send promotional or marketing communications where separate permission has been given.

Legal bases

Personal data may be processed where necessary to enter into or perform a contract, comply with legal obligations, establish, exercise or defend rights, pursue legitimate interests, and, where required, on the basis of the user's explicit consent. Notice and consent mechanisms are presented separately where consent is legally required.

Photo, video and AI processing

Skreen processes visual or audio content provided by the user to create the selected experience. When an AI transformation is selected, content may be transmitted to AI infrastructure and cloud service providers, including fal.ai, solely to perform the requested processing. Their servers may be located outside Türkiye.

Skreen does not use photographs to uniquely identify or authenticate individuals. Nevertheless, content containing a person's face is personal data and is processed only for the purposes described in this Policy.

Retention

Photos, videos and AI outputs may not be retained at all, depending on the technical configuration of the relevant experience. Where retention is required, they are kept for no longer than 30 days for delivery, printing, technical support and completion of the service, and are then deleted or irreversibly anonymised.

Payment, accounting, contractual and legal records may be retained for periods required by applicable law. Technical security records may be retained for a reasonable period necessary for their purpose.

Sharing and international transfers

Data may be shared, to the extent necessary to provide the service, with PAVO, hosting and cloud providers, AI service providers, technical support and software vendors, participating venues or event organisers, printing and digital delivery providers, and competent public authorities. Each party processes data only within its role and legal responsibilities.

Where an international transfer is required, appropriate safeguards or another valid transfer mechanism under applicable law will be used. Separate explicit consent will be obtained where legally required.

Participating venues and branded experiences

Skreen may be offered as a customised experience for a venue, event owner or brand. If that party collects data for its own purposes, it may act as a separate data controller and must provide its own privacy notice. Skreen's responsibility for independent third-party processing is limited to its role under applicable law.

Children and minors

Skreen is not designed as a service directed at children. Users under 18 should use the service with the supervision and permission of a parent or legal guardian. Children under 13 should not use the service independently. A parent or guardian who believes a child's data has been processed without appropriate permission may request deletion at info@skreen.tech.

Security

Appropriate technical and organisational measures are used to protect data against unauthorised access, loss, misuse and alteration. However, no internet transmission or electronic storage method can provide absolute security.

Your rights

You may contact info@skreen.tech to exercise the rights available to you under applicable data protection law, including rights of access, correction, deletion, restriction or objection where applicable. Requests must contain sufficient information to verify identity and identify the request and will be handled within the procedures and time limits required by law.

Changes to this Policy

This Policy may be updated to reflect changes in the services or applicable law. The current version will be published on the Skreen website or within the application. Material changes will be communicated through an appropriate method.

Contact

For privacy, data protection and content deletion requests: info@skreen.tech