Privacy Policy (User)

Vixi Suite Privacy Policy (for Users) - Last Updated: February 27, 2025

Introduction 

Welcome to Famous Group Technologies, Inc. (“we”, “us”, or “our”).

We provide a web application that allows event participants (“you”) to engage with interactive experiences by submitting selfies, names, and email addresses through QR code scanning at events. Depending on the specific activation, our clients may choose to collect additional information, such as survey responses or demographic details. 

 This Privacy Policy explains: 

• What personal data we collect (including data provided by you and any additional information collected by our clients) 
• How we use, store, and protect your data (including retention periods and security measures) 
• Your rights regarding your personal data (including how to withdraw consent or request deletion) 

We are committed to ensuring your privacy and complying with the General Data Protection Regulation (GDPR), the UK GDPR, and other relevant privacy laws. 

Data We Collect 

When you interact with our web application by scanning a QR code, we collect the following personal data: 

• Selfie (image) – A photo you voluntarily submit. 
• Name – Your full name or nickname. 
• Email address – Used for retrieving your selfie and event participation. 

In addition, please note that while we typically only collect the above-mentioned data, our clients may choose to collect additional personal information as part of their specific use case. We do not collect sensitive data such as race, health, or biometric identifiers beyond the selfie you provide. 

Purpose of Processing 

We process your personal data for the following purposes: 

• Generating and storing event images – We process your selfie to generate and store event-related images for retrieval via email. 
• Providing access to your images for up to 30 days. This retention period may vary based on our clients' (event organizer) needs. Once the retention period expires, the data is permanently deleted and is no longer recoverable.  
• Activation-related processing 
• Ensuring system security and improving our web application. 

We do not use your data for marketing or automated decision-making. 

Legal Basis for Processing 

We rely on the following legal bases for processing your data under the GDPR:  

Consent Article 6(1)(a). By submitting your data, you explicitly consent to its processing as described. Data Retention Policy 

We retain personal data only as long as necessary for its intended purpose: 

Extension Requests: If our client (event organizer) requests extended storage, retention may be extended under strict security controls. 

Once the retention period expires, data is permanently deleted and unrecoverable. 

Data Sharing & Transfers 

We do not sell, rent, or trade your personal data. 

However, we may share data under the following circumstances: 

• With event organizers (our clients) – Only when requested and strictly for event-related purposes. 
• With trusted sub processors – For secure storage, email delivery, and security monitoring. 
• When required by law – If authorities request data under valid legal orders. 

Where is your data stored? 

• All data is securely stored on servers located in North America. 
• We use Standard Contractual Clauses (SCCs) to ensure GDPR compliance for all data transferred outside the European Economic Area (EEA). 

Your Rights Under GDPR 

You have the following rights regarding your personal data: 

• Right to Withdraw Consent – You can revoke your consent at any time. 
• Right to Access – Request a copy of your stored data, as long as the request is made within the retention period prior to the data being purged. 
• Right to Rectification – Correct inaccurate or incomplete data. 
• Right to Erasure (“Right to be Forgotten”) – Request deletion before the standard retention period. 
• Right to Restriction of Processing – Limit how we use your data. 
• Right to Data Portability – Request your data in a structured, machine-readable format. 
• Right to Object – Stop processing of your data under certain conditions. 

How to Exercise Your Rights? 
You may submit requests to our Data Protection Officer (DPO) at: 

• ba@thefamousgroup.com 
• We will respond within 30 days of your request in accordance with GDPR regulations. 

Data Security Measures 

We take security seriously. To protect your data, we implement: 

• Encryption in Transit & At Rest – AES-256 encryption for stored data, TLS 1.2+ for transmissions. 
• Access Controls – Only authorized personnel can access participant data. 
• Multi-Factor Authentication (MFA) – Required for all admin accounts. 
• Security Audits & Monitoring – We conduct regular security reviews and monitor access logs. 
• Anonymization & Data Minimization – We store the least amount of personally identifiable data possible. 

In the event of a data breach: 

• We will notify affected individuals and regulatory authorities within 72 hours (as per GDPR Article 33). 

Cookies & Tracking Technologies 

We use cookies and similar technologies only for essential purposes, such as: 

• Performance analytics – Understanding how our web app is used. 

Your Choices: 

• You can disable cookies in your browser settings. 

Cookies We Use:  

• Essential Cookies (Necessary for service functionality). 
• Analytics Cookies (Google Analytics, etc.). 

Consent Management 

Participants can accept or reject cookies on our web app. 
 

Third-Party Services 

We may use trusted third-party services to provide our web application, including: 

• Cloud Storage Providers – Secure data hosting. 
• Email Service Providers – Delivering retrieval links. 
• Security Monitoring Services – Detecting unauthorized access. 

We ensure all third-party vendors comply with GDPR requirements. 

Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. If changes are significant, we will: 

• Notify you via email (if applicable). 
• Update the “Last Updated” date at the top of this page. 

We encourage you to review this policy periodically for any changes. 

Contact Information 

If you have any questions about this Privacy Policy or your personal data, you can contact us: 

• Email: ba@thefamousgroup.com  
• Mailing Address: 114 Sheldon St., El Segundo, CA 90245  

If you believe your privacy rights have been violated, you have the right to file a complaint with your local Data Protection Authority (DPA).