Privacy and your photos
Last updated: 1 November 2026
Who is responsible
KOS VIEW P.C., trading as Ramentales (VAT EL803074205 · GEMI 188766020000), is the controller of the personal data described below; its details are at the end of this page. Contact for anything about your data: hello@ramentales.com.
What we collect
Your name, email, phone and delivery address; your child's first name (and its Greek forms), age and gender; the options and text you choose (dedication, family phrase); the photos you upload of your child, and, for portraits and the pet add-on, of grown-ups and pets; for a book bought as a gift, the parent's email if you give it; your order and payment status (never your card number); messages you send us. For the free colouring page: your email, the child's name on the page, and whether you agreed to emails.
Why, and on what legal basis
To make, deliver and support your order (contract, GDPR Article 6(1)(b)). The photos are used only with your explicit consent as parent or guardian, given before upload, which you can withdraw at any time. To keep invoices and order records (legal obligation, Article 6(1)(c)). To prevent fraud in the referral programme, keep the site secure and fix errors (legitimate interest, Article 6(1)(f)). To send you ideas and offers, only if you ticked the box (consent); you can stop them at any time by writing to hello@ramentales.com.
Your photos and the cover preview
When you upload a photo and give consent, we start making the cover preview right away, before you buy, so you can see it on the last step. Photos are checked in your browser, then stored in private storage in the EU; we remove the camera data (including location) when we save them. Only our team sees them, to make and check your book. The photo goes to Google (Gemini), which draws your child as a character; the pages are painted from that drawing (by Google or OpenAI). For portraits of grown-ups and pets, the photo goes to OpenAI or Google. We use their paid business services, whose terms say they do not use our requests to train their models.
How long we keep things
Photos and our working copies of them: 30 days after delivery, or 120 days after payment if an order is never delivered, or sooner if you ask from your order page. Cover previews you don't buy: 7 days. Unfinished books in the creator: 7 days; baskets: 30 days. A portrait preview you asked for by email before buying, with its photos: 30 days. Copies of the emails we send you: 90 days. Order records and invoices: as long as Greek tax law requires. The pictures of your book and its print files: with your order, so that we can reprint a faulty copy, until you ask us to delete them. Your child's photos are deleted 30 days after the book is delivered (sooner if you ask); only the drawn pictures of the book stay with your order.
Who helps us (processors)
Each receives only what it needs for its part, under a data processing agreement: Google (Gemini, pictures from your photo), OpenAI (pages, portraits and the grown-ups' custom stories), Gelato (printing and shipping: your name, address and the print files), Viva and Stripe (payments), Supabase (our database and private photo storage, in Frankfurt, Germany), Trigger.dev (runs the picture making in the background), Vercel (hosts the website, in Frankfurt), Cloudflare (Turnstile, the check that a person and not a bot uploads a photo), Resend (sends our emails, from the EU), and, only if we switch it on, Sentry (error reports with personal details removed). Some of these companies are based in the USA; transfers are covered by the EU-US Data Privacy Framework or the EU's standard contractual clauses.
Counting visits without tracking you
We count how many visitors reach each step of the shop (for example how many start a book) as daily totals per market. This uses no cookies and no personal data: nothing that identifies you is stored. We use no advertising cookies; if we ever add analytics, we will ask first (see the cookies page).
Advertising, only with your consent
If you allow it in the cookie banner, Meta (Facebook, Instagram) and TikTok receive, for measuring our ads: the pages you saw, what went into the basket, and a purchase's value and currency (their pixels, in your browser), and at payment the same purchase from our server with your email address hashed, your browser and your IP address (consent, GDPR Article 6(1)(a)). They act as joint controllers or processors under their business terms and may process the data outside the EU under the EU-US Data Privacy Framework or standard contractual clauses. We never send names, photos, ages, dedications, addresses or anything typed for a book. The campaign name of the link that brought you (utm_*) is kept with your order. You can withdraw consent at any time under "Cookie settings".
Google Tag Manager and Google's tags
Only if you choose "Allow" in the cookie banner, our pages load Google Tag Manager, which loads Google's measuring and advertising tags (such as Google Analytics and Google Ads). Before that nothing of Google's is loaded and nothing is sent to Google. Once you allow it, they set Google's cookies and tell Google the pages you saw and a purchase's value, to measure visits and our ads (consent, GDPR Article 6(1)(a)). Google Ireland Limited processes this under its business terms and may process data outside the EU under the EU-US Data Privacy Framework or standard contractual clauses. We never send names, photos, ages, dedications, addresses or anything you typed for a book.
Books bought as a gift
If you buy a book as a gift and give the parent's email, we email them a private link to upload the photo and give consent; we use their email only for that and for the order's updates. If you forward the link yourself, the parent gives the consent when they open it.
Pets
For the pet add-on and pet portraits you upload a photo of your pet. If people are visible in it, the same rules apply as for any photo, and it is deleted on the same schedule.
Referrals and partners
For the referral programme we keep your code, which orders used it, and the email and delivery address of your friend's first order, only to give one reward per new customer and to stop misuse. A partner who shares an affiliate code sees totals only, never who ordered.
Security
Connections are encrypted. Photos and pictures are kept in private storage; links to them are signed and expire. Admin access is protected by a password, and access is limited and logged.
Children
The shop is for adults. We do not collect data from children: a parent or guardian gives their child's details and photo.
Your rights
You can ask to see, correct, export or delete your data, object to its use, or withdraw your consent, by writing to hello@ramentales.com; you can delete your photos at any time from your order page. We answer within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr).
Data controller
- Company
- KOS VIEW P.C.
- Trading as
- Ramentales
- VAT
- EL803074205
- Tax office (ΔΟΥ)
- ΔΟΥ ΚΩ
- GEMI
- 188766020000
- Registered address
- IRAKLIS 0, KOS, Greece, 85300
- Legal representative
- Rapesis Andreas
- info@kos-view.com
- Phone
- +306984377465