Gallery publication — joint-controller summary

Only when an end user explicitly ticks “Share publicly” on the Save popup inside the widget. Everything else the widget does — the render itself, and emailing a render to an end user who asks for it (which passes their email to the retailer as a lead) — is processor-only (governed by our DPA).

• Both organisations jointly decide that the images will be published in galleries.
• Visualiseo runs the gallery on visualiseo.co.uk; the retailer runs the gallery on its own website.
• Visualiseo captures the end user's explicit consent at the widget.
• The retailer moderates submissions before publication.

You can exercise any of your data protection rights against either Visualiseo or the retailer — you don't need to go to both. Under Article 26(3) UK GDPR, your rights are effective against each joint controller regardless of any internal allocation.

• Visualiseo: privacy@visualiseo.co.uk or our electronic complaints form.
• The retailer: contact details in their own privacy notice.

At the moment you publish, a withdrawal link is shown on the widget result screen for you to copy and keep. You can use that link at any time to remove your submission from both galleries without having to contact us. You can also email privacy@visualiseo.co.uk or use the complaints form, and the retailer can also remove your submission from their moderation dashboard at any time — withdrawal is as easy as giving consent.

• Purposes: displaying consented before/after images as marketing / social proof.
• Legal basis: Art. 6(1)(a) and 9(2)(a) UK GDPR — your explicit consent.
• Recipients: visitors of visualiseo.co.uk and the retailer's website.
• Retention: until you withdraw consent or either party removes the image.
• Transfers: images are stored in the European Union (Google Cloud Storage). See sub-processors.