Privacy Policy

January 2025

In accordance with the EU General Data Protection Regulation (GDPR, 679/2016/UE) we outline how your personal data is managed on our website(s).

This Privacy Policy is applicable to the following websites (including any subdomains or sections) owned and operated by FileFiesta.com (hereinafter referred to as the “Website”): www.FileFiesta.com

This document provides essential legal details regarding how we handle your personal data when you use our Website.

The current Privacy Policy governs the collection, storage, and processing of your personal data by FileFiesta.com whenever you engage with the services available on the Website (hereinafter, “Services”).

The most recent update to this Privacy Policy is stated at the top of this document and takes effect from the date specified. We encourage you to review this Privacy Policy periodically for any updates.

Some Services offered on the Website may be subject to additional privacy policies or specific information that will be provided when applicable. Furthermore, access to and use of the Website and its Services are subject to the respective Terms of Use.

PROCESSING OF PERSONAL DATA

The sections below explain how we collect, use, and manage your personal data across all FileFiesta.com projects, including subdomains and related sections.

1. Data Controller

FileFiesta.com is responsible for handling users’ personal data on the Website.

For any inquiries, concerns, or requests regarding data protection, you may contact us at [your contact email].

2. Website Usage and Terms

To access and use our services, as well as to accept our Terms of Use, you must be of legal age.

Our products and services are intended for adults. In specific instances, we may allow them to be used by minors; however, such use must be reviewed and approved by a parent or legal guardian who is responsible for their care and supervision.

If you are a minor, you are not permitted to enter into any contracts for our services under our Terms and Conditions.

By using FileFiesta.com, you acknowledge and agree to the terms outlined in this Privacy Policy.

3. Purpose and Legal Basis for Data Collection

Your personal data is collected and processed for different purposes, each of which must be supported by a lawful basis, as required by regulations. We rely on the following legal grounds:

  • Consent: You have given clear, informed, and specific consent for your personal data to be processed for a particular purpose.
  • Legal Obligation: In certain cases, we are required by law to process and share certain data with relevant authorities.
  • Contractual Necessity: Some data is essential for us to provide our services and fulfill agreements with you.
  • Legitimate Interests: We may process your data when necessary for our business operations, provided that it does not override your rights and interests.

The legal grounds for processing data on FileFiesta.com, in relation to the purposes for which we use your information, are outlined below:

3.1. Website Usage and Browsing

When you visit and navigate through the Website, even without registering, certain data is automatically collected using technological tools or automated processes. This includes your IP address, device identifier, and specific metadata (such as HTTP headers and browser details). We also track the number of searches and downloads you make.

This data is used to monitor download activity per user to prevent fraudulent or unauthorized usage of the Website and to ensure compliance with our Terms of Use. Essentially, this helps us manage the contractual relationship between you and FileFiesta.com.

Additionally, this technical data is processed to identify and mitigate security threats such as automated attacks (bots, code injections, or DDoS attacks). This ensures the overall security and integrity of our Website. The legal basis for this processing is our legitimate interest in protecting our systems and enforcing our terms and conditions.

Personal Data Processed: IP address, device identifier, and metadata, including browser details and HTTP/HTTPS headers.

3.2. Contractual Relationship with Registered Users (Free or Premium)

When you sign up as a user on FileFiesta.com—whether with a free or premium account—we collect the necessary personal information to manage and maintain our contractual relationship with you.

If we request personal data that is required by law or necessary to fulfill the terms of our service, and you choose not to provide it, we may be unable to establish the contract or deliver the requested service. If this occurs, we will inform you accordingly.

Personal Data Processed:

  • Free Users: Username, email address, full name, address, and profession (only email and username are mandatory).
  • Premium Users: The above, plus country, city of residence, identification document, tax residence, and payment details (all mandatory).

You have the option to create an account on FileFiesta.com using third-party platforms like Google through a federated login system. This allows you to access your account without the need to create and remember a separate username and password.

This login process is facilitated by a collaboration between FileFiesta.com and Google, where both act as joint controllers of your personal data. This means: (i) You authenticate yourself directly on the external platform. (ii) The platform verifies your identity. (iii) We use the authentication data to grant you access as a registered user on FileFiesta.com.

With your prior consent, FileFiesta.com obtains your username, profile image, and email address from Google to complete your registration. Meanwhile, Google collects online identifiers (such as your IP address), technical data from your device, and advertising identifiers (e.g., Google ID). Additionally, Google logs the date and time of each login to FileFiesta.com. You can find more details in Google’s Privacy & Terms.

You have the right to access, rectify, delete, restrict processing, request data portability, and withdraw consent regarding any personal data obtained from these platforms, as well as any other data you have shared with FileFiesta.com. You can exercise these rights by contacting us at the email address provided in this policy.

3.3. Contractual Agreements with External Creators

When we establish a collaboration agreement with you as a content creator for distribution and licensing through FileFiesta.com, we collect the necessary personal data to manage and fulfill our contractual obligations.

Personal data collected: Email address, full name, residential address, city of residence, tax details, identification documents, and preferred payment method.

3.4. Models Featured in Our Content

If your image or voice appears in photos or videos available on our platform, we process your personal data as recorded in the required legal documentation. Your image and/or voice may be incorporated into our content for promotional and distribution purposes, either through a direct agreement with us or via an external creator who has entered into a contract with FileFiesta.com.

Additionally, your image and/or voice may be utilized in software development, training, testing, and machine learning applications in combination with other digital assets, such as images, text, graphics, audio, and video. This processing is conducted in an aggregated manner, ensuring that it does not uniquely identify you.

Personal data collected: Your image or voice, along with details provided in the image rights release form—such as full name, surname, identification document (or equivalent), and address.

As part of our content distribution, your data may be made publicly available worldwide via the internet (our websites) and shared with third parties through licensing or access agreements. These international transfers may involve countries with different levels of data protection than those outlined in the GDPR, in accordance with Article 49(1)(a) of the GDPR.

3.5. Personalized Advertising on FileFiesta.com and Other Platforms

We promote our products through targeted advertising strategies:

Social Media and Online Platforms: We run promotional campaigns on platforms such as Pinterest, Google, and Twitter, targeting potential FileFiesta.com users based on predefined audience segments offered by these platforms. We do not create these user segments ourselves but select from existing ones. Importantly, we can only identify users who voluntarily register on our website.

Legal basis: Our legitimate interest in attracting new customers by promoting our products through personalized advertising.

Personal data processed: We do not process personal data directly. Instead, we choose predefined audience segments (such as age groups or geographic location) provided by the advertising platforms. These platforms supply us with general insights about campaign performance but do not disclose the identities of individual users who interact with our ads.

Retargeting Campaigns: If you visit our website without registering and have accepted cookies, we may display FileFiesta.com advertisements on third-party websites.

Legal basis: Your consent, given both on our website and on third-party platforms where the ads are displayed. More details about this can be found in our Cookie Policy.

3.6. Sending Commercial Communications via Email

We will send you promotional emails if (i) you have registered for or purchased any of the Website Services, or (ii) you have requested information about our products using any of the forms provided on the Website. In all cases, we will only do so as long as you haven’t opted out of receiving such communications. You can easily opt out by using the designated slider in your user profile, or through the “Unsubscribe” link found at the bottom of each email you receive.

Additionally, we will send you updates from the creators you follow, provided that you have given specific consent for this via the appropriate slider in your user profile. You may withdraw your consent at any time by unchecking the box.

Our legal basis for sending these communications is our legitimate interest in providing you with information about products or services similar to those you have already purchased or inquired about, as outlined in article 21.2 of Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI).

3.7. Advertisements on Our Website

Unless you become a premium user, personalized ads will be shown on our Website, provided that you have consented to the installation of cookies (for more details, refer to our Cookies Policy).

When we use cookies, it will be based on your prior consent. You can accept or reject all cookies, or select specific ones, using our One Trust CMP (cookie settings panel).

When you submit your email address on our website (whether for logging in, signing up for a newsletter, or similar actions), we may share personal or other information we collect from you—such as your email (in hashed, pseudonymous form), IP address, or browser and operating system details—with our partner, LiveRamp, Inc. and its affiliates. LiveRamp uses this information to generate an online identification code to recognize you across devices. This code does not contain any personally identifiable data and will not be used by LiveRamp to re-identify you. We store this code in our cookies or use LiveRamp’s cookie, allowing it to be utilized for online and cross-channel advertising.

3.8. Personalized Advertising via Preference Forms

We offer voluntary surveys to gather basic user profile information and preferences, allowing us to personalize your experience on our website and the ads we display to you or the information we send based on the profile you create.

The purpose of this data processing is to personalize our advertising and content based on the information you provide, and our legitimate interest lies in continuously improving our products and services.

Personal data processed includes: username, the type of usage of our products (personal, freelance, business, as well as the approximate size and industry of the user), and personal preferences shared in the form.

3.9. Surveys

In line with our legitimate interest in gathering feedback to enhance our products’ functionality and user experience, we may reach out to you to request your opinions and preferences through satisfaction surveys.

Personal data processed: Contact details.

3.10. Support Requests

When you reach out to us for information, assistance, or feedback, we process your data to provide support, based on your consent given through your request.

Personal data processed: Contact information you provide when submitting your request, as well as the content of your inquiry.

3.11. Submitting Your Resume

If you apply to join the FileFiesta.com team or as a freelance designer or collaborator, we process your personal data based on your consent to evaluate your candidacy.

Personal data processed: Contact details and information included in your resume and/or cover letter to support your application.

3.12. Professional Contact with Individual Professionals or Company Representatives

If you are an individual professional or a representative from a company that we have contacted, or if we have gathered your details through the forms provided on our websites for this purpose, we will process your data to maintain professional contact. This processing is based on our legitimate interest in keeping professional communication with you or the organization you represent, as stated in article 19 of the LOPDgdd.

Personal data processed: Full name, corporate or non-personal email address, corporate or non-personal phone number (optional), job title (optional), and data contained in the message.

3.13. Third-Party Integrations, APIs, Plugins, and Extensions

FileFiesta.com may incorporate or utilize a variety of third-party services, including APIs, plugins, add-ons, extensions, and other technologies (collectively referred to as “Third-Party Integrations”) within our platform.

For instance, FileFiesta.com has developed certain extensions that integrate with Google services using Google APIs. An example of this is our Google Slides extension, which enables the use of functionalities linked to our Slidesgo product.

The data retrieved from Google—such as your email, name, language preferences, and profile picture—along with other information is collected to facilitate access to our products and ensure compliance with our terms and conditions.

To manage your preferences, you can disable or unsubscribe from these integrations at any time.

3.14. AI-Powered Products

FileFiesta.com provides AI-driven tools that generate images based on the content you input. We handle your data for the following purposes:

  • Delivering our services in accordance with our terms of use
  • Creating avatars or digital recreations using your uploaded images, with your explicit consent
  • Ensuring the security and integrity of our AI-based services
  • Enhancing and refining our AI-driven features

We do not share your images with third parties. Any uploaded images are deleted immediately after generating the avatar or digital recreation.

Personal Data Processed:

  • User details (if you are a registered user)
  • Input data provided when using AI-based services, along with the AI-generated output
  • Images you upload for AI processing (temporarily)

3.15. Legally Required Data Processing

In certain situations, we are legally obligated under various regulations to process and/or share specific personal information with relevant authorities, regardless of whether you have given your consent.

Personal data processed: Any data specified in the applicable legal regulations.

4. How Long We Retain Your Data

We only retain your personal data for as long as necessary based on the specific purpose for which it was collected. The retention periods for different types of data are as follows:

  • Security and fraud prevention: 13 months
  • Contractual and service-related data: Duration of the agreement + 5 years (for potential claims) + 6 years (for accounting purposes)
  • External designer agreements: Duration of intellectual property license + 5 years
  • Marketing communications: 3 years from your last interaction with FileFiesta.com
  • Survey participation: Duration of contractual relationship, unless you opt out
  • Non-commercial inquiries: Until we respond to your request
  • Job applications: 1 year from receipt
  • Model data from digital content: Duration of contractual relationship with external creator + 5 years
  • Professional contact data: Up to 3 years from last interaction
  • AI-generated content: We don’t store uploaded images, but retain text inputs and outputs for the duration of our contractual relationship
  • Legal compliance: In accordance with relevant laws

5. Updating Your Information

We kindly request that you notify us promptly of any changes to your personal information to ensure our records remain accurate and up-to-date. By providing your data, you confirm that all details submitted are correct, current, and truthful.

6. Sharing of Information

FileFiesta.com Does Not Sell Personal Data

We do not transfer or share the personal data collected with third parties outside of our company.

Third-Party Service Providers

We may share user data with third-party service providers only when necessary to carry out our operations and fulfill the Terms of Use for our Website, including:

  • Technology and hosting providers
  • Payment processors and financial institutions
  • Marketing and CRM platforms
  • Recruitment platforms
  • Customer support services
  • Legal, auditing, and accounting consultants

These third-party services are essential to FileFiesta.com’s business operations. Personal data shared with these service providers is governed by legally binding contracts that ensure compliance with data protection regulations.

Advertising and Cookies

We monetize advertisements displayed on our Website using cookies and similar tracking technologies. These are only activated with your prior consent, which is collected via One Trust CMP. For detailed information, please refer to our Cookies Policy.

Social Media Plugins

Our Website includes social media plugins that allow users to interact with third-party platforms such as Twitter and Pinterest. If you consent to using these plugins, the content you share will be transmitted to the corresponding platform.

Data Sharing Within FileFiesta.com Group of Companies

To streamline business operations and administrative processes, FileFiesta.com processes personal data across its affiliated companies. This includes information from suppliers, users, and employees based on our legitimate business interests.

We process the following categories of data:

  • Basic identification and contact details
  • Login credentials (single sign-on)
  • Financial and professional information
  • Image, audio, and video files (for contractual management)
  • Website interaction data (including metadata for security and analytics)

7. Your Rights as a User

As a user, you are entitled to the rights outlined in General Data Protection Regulations (GDPR). You can exercise these rights by:

  • Logging into your account and navigating to the designated section
  • Submitting a request through our support form
  • Contacting us via email at rpd@filefiesta.com

Your Rights Include:

  • Right to information
  • Right of access
  • Right to correction
  • Right to restrict processing
  • Right to object to automated decision-making
  • Right to erasure (right to be forgotten)
  • Right to data portability
  • Right to withdraw consent
  • Right to object to data processing

8. Data Security

We implement strict security measures to safeguard your personal information from unauthorized access, misuse, or alteration.

For instance, Secure Socket Layer (SSL) encryption is used when transmitting data to and from our servers, ensuring secure communication between your device and FileFiesta.com’s infrastructure.

9. International Data Transfers

Some of our third-party service providers are located outside the European Economic Area (EEA). As a result, certain data processing activities may involve the transfer of personal data to countries with different privacy regulations.

To ensure compliance with GDPR, all international data transfers are governed by Standard Contractual Clauses (SCCs) in accordance with Article 46.2(c) of GDPR.

10. Filing Complaints

If you have concerns about how FileFiesta.com handles your personal data, you can contact us by email at legal@filefiesta.com.