Privacy policy
What data about you we process, why, who we share it with, how long we keep it and what you can do about it.
Last updated: October 11, 2026
Data controller
The controller of the personal data collected on this website is the company shown below, in accordance with Andorran Qualified Law 29/2021 of 28 October on the protection of personal data (LQPD). For any question about your data, write to us at contacta@fotolocals.com.
- Owner
- eltokina SLU
- NRT
- L-712013-M
- Registered address
- Carrer de l’Obac 13 AD700 Escaldes - Engordany Principat d’Andorra
- Website
- Fotolocals
What data we process and why
Account. If you create one: your name, your email address, your password — which we store irreversibly encrypted, never in plain text —, the language you read the website in and, where applicable, your subscription, your downloads and the photos you have saved. We process them to provide the service you ask for by creating it.
Purchases and subscriptions. The email address we send the download and the invoice to, what you bought and when, and the invoice details. Payment is handled by your bank’s Redsys terminal: we never see or store your card number. To renew a subscription we store, encrypted, the identifier the bank gives us for the card. We process them to perform the purchase contract and meet our tax obligations.
Newsletter and waiting lists. Your email address, language and the date you signed up and, for waiting lists, what you want to be told about. Only with your consent, which you give by ticking the box on the form and can withdraw at any time: every newsletter carries an unsubscribe link.
Topic suggestions. The topic you suggest and, if you leave it, your email address, so the photographer can let you know when she photographs it. They reach the photographer by email.
Security. To protect the website and accounts, we record the actions taken on it — a sign-in, a purchase, a password change — with the date, the IP address and the browser. We do so on the basis of our legitimate interest in keeping the service secure.
Statistics. We count how many times each photograph is viewed, only as a number per photo and per day, without knowing who viewed it.
Who has access to it
We do not sell or hand over your data to anyone. To run the website we rely on providers that process it on our behalf and with the safeguards the LQPD requires: Amazon Web Services, for hosting, storage and sending email, with servers in the European Union, and your bank and Redsys, for card payments.
How long we keep it
Account data, for as long as the account exists. Purchases and invoices, for the period required by Andorran tax and commercial law. The newsletter and waiting lists, until you unsubscribe or ask us to remove you. Records of ordinary activity, 90 days; warnings, 400 days; security records tied to an account — sign-ins, password changes — and serious errors are kept indefinitely, so they can be investigated.
Your rights
You can ask at any time to access your data, rectify it, erase it, object to or restrict its processing, and request its portability, by writing to contacta@fotolocals.com. From your account you can already correct your name and change your password.
If you believe we have not handled your request properly, you can lodge a complaint with the Andorran Data Protection Agency (APDA).
How we protect it
Passwords are stored irreversibly encrypted, connections to the website are encrypted (HTTPS), the original files of the photographs are kept in private storage that only opens after a purchase, and payment credentials are stored encrypted.
Changes to this policy
If we change this policy, we will say so here, with the update date shown at the top.