Privacy Policy

Last updated: July 2026

This Privacy Policy explains what personal data FPO — World Federation of Photographic Organizations ("FPO", "we", "us") collects through worldphotofederation.com, why we collect it, and what rights you have over it.

Data Controller

The data controller responsible for your personal data is [Legal entity name — to be inserted once FPO's registration in Serbia is complete], registered in Serbia. Until registration is complete, questions can be directed to office@worldphotofederation.com.

Legal Basis for Processing

We process your personal data on the following legal bases: (a) performance of a contract — creating your account, processing membership/patronage/distinction payments, and displaying your public profile or exhibition results as part of the service you signed up for; (b) legitimate interest — protecting the platform against fraudulent logins, spam, and abuse; and (c) your consent where separately requested (e.g., optional communications).

1. Information We Collect

Account information: first and last name, postal address, email address, and a securely hashed password, provided when you register as a member or as an organizing club/organization.
Content you provide: profile photo, biography, portfolio images, exhibition details, jury information, and contest rules files you upload.
Payment information: we do not collect or store your card details. All payments are processed directly by PayPal; we only receive confirmation that a payment was made, its amount, and a PayPal transaction reference.
Technical information: IP address and timestamp of login attempts, kept temporarily to protect accounts against automated abuse.
Contact form submissions: your name, email address, and message, used solely to respond to your inquiry.

2. How We Use Your Information

To create and manage your member or organizer account.
To display your public profile, portfolio, exhibition listings, and ranking position, as applicable to your account type.
To process payments and send related confirmations.
To send essential account emails: verification, password reset, payment confirmations, and membership renewal reminders.
To protect the platform against fraudulent logins and spam.

3. Sharing Your Information

We do not sell your personal data. We share data only where necessary to operate the platform:

PayPal — to process payments.
Hostinger — our hosting provider, which stores our database and files.
Information you choose to make public (name, country, portfolio, exhibition results) is visible to any visitor of the site, as described on the relevant pages.

Because FPO serves members and organizers worldwide, your data may be processed in a country other than your own (including Serbia, where FPO is based, and wherever our hosting and payment providers operate their servers). Where this involves transferring data out of the EU/EEA, we rely on the transfer safeguards required by applicable law (such as standard contractual clauses used by our providers).

4. Data Retention

We retain account data for as long as your account is active. If you request account deletion, we remove your personal account data (name, address, contact details, profile photo) within a reasonable time, except where we are required or entitled to keep certain records (e.g., payment records for accounting/tax purposes, typically for the period required by applicable law). Exhibition and results data is retained indefinitely as part of the historical FPO ranking record, even if reported under an email address that has not registered as a member, since it forms part of the public competition record described in Section 5 below.

5. Your Rights

If you are located in the European Union (or another jurisdiction with equivalent data protection law), you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at office@worldphotofederation.com. Note that deleting historical exhibition results may not be possible where they form part of the public competition record.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been mishandled — for example, the Commissioner for Information of Public Importance and Personal Data Protection in Serbia, or the equivalent authority in your own country if you are located elsewhere in the EU/EEA.

6. Cookies

We use a single essential session cookie required for you to stay logged in. We do not currently use analytics or advertising cookies.

7. Contact

Questions about this policy can be sent to office@worldphotofederation.com.

This page is a general-purpose starting template and does not constitute legal advice. Before publishing, please have it reviewed by a qualified lawyer to confirm it meets your specific obligations under GDPR and any other applicable law.