User Agreement and Website Terms of Use

The Company treats with great respect the confidential (personal) information of all persons who have visited the Website, as well as those who use the services provided by the Website. In this regard, the Company strives to protect the confidentiality of personal data (information or a set of information about an individual who is identified or can be specifically identified), thereby creating and ensuring the most comfortable conditions for using the Website services for each User.

This Privacy Policy explains our rules for collecting, using and disseminating information that you may provide to our Website, and applies to the entire Website that provides information storage and distribution services.

The User has all rights to protect his personal data provided for by the current legislation of the European Union, in particular the General Data Protection Regulation (GDPR) and other applicable data protection laws.

The Company collects only those personal data (for example, your first and last name, login and access password, email address, contact phone number, date of birth, gender, etc.) that are knowingly and voluntarily provided by you as a subject of personal data for the purpose of using the Website services, which, in accordance with the requirements of the legislation and the purpose of their processing formulated in this Policy, is the consent of the subject of personal data to this.

Information Protection

The Company uses generally accepted standards of technological and operational protection of information and personal data from loss, misuse, modification or destruction. However, despite all efforts, the Company cannot guarantee absolute protection against any threats that arise outside the Company's regulation.

The Company ensures the application of all relevant mandatory obligations regarding confidentiality, as well as technical and organizational security measures to prevent unauthorized or illegal disclosure or processing of such information and data, their accidental loss, destruction or damage.

The Company provides access to information and personal data only to authorized employees who have agreed to ensure the confidentiality of such information and data in accordance with the Company's requirements.

Dissemination of personal data without the consent of the subject of personal data or a person authorized by him is allowed in cases determined by law, and only (if necessary) in the interests of national security, economic well-being and human rights.

Personal Data Processing

Processing and storage of provided personal data is carried out in data centers where equipment that ensures the functioning of the Website services is located. The provided personal data is processed and can be stored in the Personal Data Database or a separate table of the Website Database.

Personal data may be used for the following purposes: providing services to the User; User identification; interaction with the User; sending advertising materials, information and requests to the User; conducting statistical and other research; processing User payments; monitoring User operations to prevent fraud, illegal actions.

Collection and Use of Personal Data

When the User uses the Website services, the Company processes the User's data, namely:

data provided by the User both when filling out registration forms and in the process of using services; cookie files;
IP address;
parameters and settings of internet browsers (User-agent);
actions performed by the User in the process of using services.

We draw your attention: The Company limits itself to collecting the minimum amount of information necessary exclusively for fulfilling the request of the subject of personal data. In any case, when information that is not mandatory to provide is requested, the User will be notified at the time of collecting such information.

The Company does not collect any information for the processing of which the legislation establishes certain requirements, such as information about racial or ethnic origin, political, religious or worldview beliefs, membership in political parties and professional unions, conviction to criminal punishment for committing a crime or conviction to criminal punishment, as well as data relating to health, sexual life, biometric or genetic data (according to Article 9 of the GDPR - Special Categories of Personal Data).

The Company collects website visit statistics data. Information may contain connections, traffic, User's browser, as well as information about date, time

Personal Data Storage Period

Personal data is stored for no longer than necessary for the purposes of their processing.

After the subject of personal data ceases to be a User of the Website by deleting an account on the Website, his personal data is also automatically deleted.

The User can manually delete all stored personal data at his own request by writing an appropriate request using one of the available contacts for communication with the site administration.

Rights of the Subject of Personal Data (GDPR Rights)

The Company informs you about your rights as a subject of personal data under the General Data Protection Regulation (GDPR):

Right of Access (Article 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and information about the processing.
Right to Rectification (Article 16 GDPR): You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Right to Erasure (Article 17 GDPR): You have the right to obtain the erasure of personal data concerning you without undue delay.
Right to Restriction of Processing (Article 18 GDPR): You have the right to obtain restriction of processing where certain conditions apply.
Right to Data Portability (Article 20 GDPR): You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.
Right to Object (Article 21 GDPR): You have the right to object to processing of personal data concerning you.
Rights related to automated decision-making (Article 22 GDPR): You have the right not to be subject to a decision based solely on automated processing.

To exercise any of these rights, please contact us using the contact information provided in this policy.

Cookie Policy and Tracking Technologies

What are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit our website. They contain a small amount of information and are used to recognize your device and remember information about your visit.

Types of Cookies We Use:

Essential Cookies (Strictly Necessary)

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

Performance and Analytics Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous.

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages.

Targeting and Advertising Cookies

These cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device.

Cookie Consent:
By continuing to use our website, you consent to our use of cookies as described in this policy. You can manage your cookie preferences through your browser settings or our cookie consent banner.

Managing Cookies:
You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.

Third-Party Cookies:
We may also use third-party cookies from trusted partners for analytics, advertising, and other services. These third parties have their own privacy policies and cookie practices.

Data Retention:
Cookies are typically stored for different periods depending on their purpose. Session cookies are deleted when you close your browser, while persistent cookies remain on your device for a set period or until you delete them.

Other Sites

This Privacy Policy applies only to the gallera.io Website. We do not control sites that use information from our Website, or sites that are linked from our Website. These sites may place their own cookie files on your computer, collect data or request personal information from you.

Compliance with Requirements

By logging into this Website, viewing it and using it, or providing your personal information, you express your agreement with the terms of this Privacy Policy. If you do not agree with these terms, please do not provide us with your personal information.

Policy Changes

Changes and additions may be made to this Policy periodically and without prior notice to the User about this, in particular, when the requirements of the legislation change.

We ask you to review the Policy from time to time to be aware of any changes or additions.

Rights and Obligations of Site Administration and Moderators

The Administration has the right at any time and without warning to change the design of the site and content.

The Administration has the right to call and send messages to users by email and other means of communication regarding the use of the site.

The site moderator, who is appointed by the Administration, monitors and takes necessary measures to ensure that the content posted on the site corresponds to the site's theme. The moderator and site Administration makes every effort to exclude from the site inattentive, incorrect, offensive, untrue or deliberately incomplete information.

Information on the Website is constantly updated and may become outdated at any time. The site administration is not responsible for receiving outdated information from the Website, as well as for the User's inability to receive updates stored on the Website.

The site administration may use users' personal data to contact these users, for example, to notify about changes/updates to site services or send important messages and other similar messages related to products that were ordered by the user, and contact for purposes related to user/client service, as well as inform about promotions, discounts and exclusive offers of the site.

The site administration may at any time and without explanation block the User's account and delete all his materials.

User Rights and Obligations

The User has the right to use the information and functionality of the service and contact the administration to resolve controversial issues.

The service administration does not guarantee processing of all user requests.

The User undertakes to take appropriate measures to ensure the preservation of personal login and password for access to the site.

The User undertakes to bear full responsibility for any actions performed by the user using his account, as well as for any consequences that could cause or caused such use.

When using information from the site, the user understands and accepts the risks associated with its possible unreliability, as well as the fact that some information may seem offensive, false, rude, indecent to him.

The User undertakes to publish any information from the Website with a mandatory link to the site "https://gallera.io".

Order Terms

Through the service tools, the Client is provided with the opportunity to expand the range of services provided by the service, and open access to new functions that will be available to him according to the selected tariff.

Withdrawal of funds for using the service occurs monthly (30 calendar days) automatically using the card "token" that was received from the Client during verification of his payment card, or during the first payment of the selected tariff plan.

In case of impossibility to withdraw funds automatically, after several attempts the Client will be denied access to the paid subscription that was issued to him, until the moment of re-payment.

To create a card "token", the user is obliged to pay an amount of 1-2 hryvnias, which will be returned to him in case of successful payment within 15 minutes.

The list of functions that will become available after ordering one of the tariffs is indicated in the "Subscription" section in the web application. The list of functions may be changed with mandatory notification of the Client about the change.

The service provides services with the possibility for the User to create his own galleries to display photos that he will upload, arrange and change the settings of such galleries. The total volume of photos of all galleries should not exceed the volume that is provided to the User according to the selected tariff.

The site administration does not undertake obligations regarding verification and change of information that was entered by the User when filling out the fields of the site sections. Entering current and reliable information is the responsibility of the User.

Order payment is made by non-cash payment on the site using the "Internet acquiring Monobank" payment service, and other available methods that it provides. The user independently chooses the method of payment for services among those offered.

The User bears full, sole responsibility for all commission costs and other costs provided by the bank that may be added to the cost of bank card emissions. The user gives consent to the processing of his personal payment data. After the User moves to the field for entering payment card details, the responsibility for providing services is borne by the payment system or acquiring bank.

The payment information of the bank card specified by the User is entered on the secure page of internet acquiring and is not transmitted to the site https://gallera.io/. Only a hashed token of his card is stored on the Website.

Refund Terms

Refund of funds occurs only in case of erroneous payment. When canceling a subscription to one of the tariffs, the tariff ends at the previously specified moment.

If the user has issued a subscription to one of the tariffs and decided to cancel it, the funds will not be returned, and the subscription action will not be stopped according to the terms of the selected tariff.

The terms and amount of payment depend on the insurance company and are carried out within the period established by the legislation of the European Union and applicable national laws. Commissions and payments from the acquiring bank, payment systems and bank card servicing are not subject to refund.

Gallery and Photo Storage Terms

The Website undertakes to store all galleries and photos during the User's use. All uploaded photos are stored according to current terms and may be deleted if they violate the site rules or current European Union legislation and applicable national laws.

When manually deleting photos or galleries by the user, it happens immediately and is not subject to recovery. After the subscription ends, after seven days, all photos that were uploaded earliest are automatically deleted without the possibility of recovery in the volume that the updated tariff that will be provided to the user requires.

All galleries have the ability to be limited in public access using tools and functions that are available on the Website. If the User has shared access to such a gallery, it is no longer private and may be available at the address specified in its settings.

GDPR Compliance and Data Protection

Legal Basis for Processing:
We process your personal data based on the following legal grounds under GDPR:

Consent (Article 6(1)(a) GDPR): When you have given clear consent for the processing of your personal data for specific purposes.
Contract (Article 6(1)(b) GDPR): When processing is necessary for the performance of a contract to which you are party.
Legitimate Interest (Article 6(1)(f) GDPR): When processing is necessary for the purposes of our legitimate interests, provided such interests are not overridden by your fundamental rights and freedoms.

Data Controller and Data Protection Officer:
The Company acts as the data controller for the personal data we collect and process. For any data protection inquiries, you can contact our Data Protection Officer at the contact information provided below.

International Data Transfers:
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses.

Data Breach Notification:
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and 34.

Supervisory Authority:
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Contact Information

For any questions regarding this Privacy Policy or your personal data, please contact us at [email protected] or visit our Contact Page.

Last Updated: 04 October 2025