Terms of Service
Terms of Service
Effective date: 26 June 2026 · Version 2.0
These Terms of Service (“Terms”) govern your use of the event-photo platform operated by EventLens DOO Zrenjanin (“EventLens”, “we”, “us”, “our”) and any purchase of photos through it. By creating an account, scanning to find your photos, or buying photos, you accept these Terms.
In short:
- EventLens helps you find and buy photos of yourself from events, using facial recognition.
- Purchased photos are licensed for personal, non-commercial use.
- Prices may be shown in EUR, RSD, or USD, but payment is charged in RSD; a fiscal receipt is emailed to you.
- Once a download begins, the statutory withdrawal right for digital content is lost.
- Refunds are limited — see Section 7.
1. The Service
EventLens lets event organizers and photographers publish event photos, and lets attendees find photos of themselves using facial recognition and purchase digital copies. Facial recognition requires your separate Biometric Data Consent (shown before you first scan); without it, scanning is unavailable. Because matching a selfie to event photos is the core function of the Service, the Service cannot find your photos without this consent. Facial recognition is an automated AI system under the EU AI Act; we keep it under human oversight, and you can ask us to review any match at info@eventlens.rs. For how we handle your selfie, your faceprint, and your other data, see our Privacy Policy at https://eventlens.rs/privacy-policy.
2. Eligibility and accounts
You must be able to enter into a binding contract, be at least 16 years old (or the minimum digital-consent age in your country, if higher), and provide accurate information. You are responsible for activity under your account and for keeping your credentials confidential. One person, one account.
3. Buying photos
Prices and any taxes are shown before purchase. Prices may be displayed in EUR, RSD, or USD, but all payments are settled in RSD (Serbian Dinar); where the displayed currency differs, the amount is converted to RSD at the rate applied when the order is created, and the final RSD total is shown before you confirm.
You buy a personal, non-exclusive, non-transferable licence to download and use the purchased photos for personal, non-commercial purposes. Resale or further distribution is not permitted.
Payment method depends on currency. Payments in RSD are processed by OTP Banka Srbija via the SIA gateway, and EventLens issues a fiscal receipt (fiskalni račun) in Serbian. Payments in any other currency are processed by our online reseller Paddle (Paddle.com Market Ltd), which acts as the Merchant of Record for that transaction. For non-RSD orders, Paddle is the seller of record, issues the receipt, and handles applicable taxes, refunds, and buyer support for the payment under its own Checkout Buyer Terms (https://www.paddle.com/legal/checkout-buyer-terms) and Privacy Notice (https://www.paddle.com/legal/privacy). The licence you acquire in the photos, and these Terms, continue to apply regardless of which payment method is used.
4. Delivery and access
If you bought without an account (guest checkout), we email you a secure access link (a “magic link”) to the address you provided. The link lets you view and download your purchased photos without signing in, and is valid for the lesser of 30 days from payment or the event’s expiry date set by the organizer. After it expires, the link no longer works, because event photos are cleaned up once the event ends. We recommend you download your photos promptly; the email shows the exact expiry date. The link gives read-only access to your purchased photos only — keep it private, as anyone with the link can view those photos.
If you have an account, your purchased photos are also available in your account while it is active, in addition to any link we email you.
5. Right of withdrawal — digital content (EU/EEA)
Photos delivered electronically are “digital content” under EU consumer law and Serbia’s Zakon o zaštiti potrošača. For consumers in the EU/EEA you have a 14-day right of withdrawal, but by starting the download you expressly request immediate delivery and acknowledge that you lose the right of withdrawal as soon as the download begins. Where this exception does not apply, your statutory withdrawal rights remain in force.
6. Refund policy
Our photos are digital goods delivered instantly, so all sales are final. We do not offer refunds, returns, or exchanges, except in the limited cases below.
We will issue a refund only where:
- A technical fault on our side prevented delivery — you completed payment but, due to an error attributable to EventLens, you never received access to the photos you paid for and we are unable to resolve it within a reasonable time; or
- A purchased photo cannot be downloaded because the file is corrupted, missing, or otherwise materially defective, and we cannot provide a working replacement; or
- A refund is required by mandatory consumer-protection law that applies to you and that cannot be excluded.
Refunds are not available for, among other things: changing your mind after a download has begun; buying the wrong photo, package, or quantity by mistake; dissatisfaction with the artistic quality, framing, lighting, or composition of a photo (these are determined by the photographer or organizer on site, not by EventLens); a photo not being of you because the wrong selfie was used; or losing access because your account was deleted or an event expired after you were given a fair opportunity to download.
To request a refund, email info@eventlens.rs with your order reference and a description of the problem within 14 days of purchase. We review each request in good faith; approved refunds are returned to the original payment method in RSD. Approving one refund request does not oblige us to approve others. Nothing in this Section limits any non-excludable right you have under the consumer-protection law of your country.
Refunds on Paddle (non-RSD) orders. Where your order was processed by Paddle as Merchant of Record, the refund is handled by Paddle under its own refund policy and buyer terms, in addition to the limited cases above. You may contact Paddle directly for payment and refund queries on such orders, or contact us at info@eventlens.rs and we will coordinate with Paddle.
7. Acceptable use
Do not attempt to identify or scan people other than yourself without a lawful basis, interfere with the Service, circumvent watermarks or access controls, scrape or bulk-download photos you have not purchased, use the Service to train any AI or facial-recognition model, or use the Service unlawfully.
8. Availability and changes
The Service is provided “as is” and “as available”; we may change or discontinue features. We may update these Terms; material changes require your renewed acceptance before you continue using the affected features. Purchases you have already made remain governed by the Terms in force at the time of purchase.
9. Liability
To the extent permitted by law, EventLens is not liable for indirect or consequential loss, and our total aggregate liability for any claim relating to the Service is limited to the amounts you paid us in the 12 months before the event giving rise to the claim. Nothing limits liability that cannot be limited by law (for example, for death, personal injury, or fraud).
10. Governing law
These Terms are governed by the laws of the Republic of Serbia, with exclusive jurisdiction in the courts of Zrenjanin, without prejudice to mandatory consumer-protection rights in your country of residence. The EU online dispute-resolution platform is available at https://ec.europa.eu/consumers/odr.
11. Contact
EventLens DOO Zrenjanin
Klajnova 18, 23000 Zrenjanin
Republic of Serbia
Company ID: 21998303 · TIN (PIB): 114277204
Email: info@eventlens.rs
Phone: +381 (0)62 944 96 76
We aim to respond to questions and complaints within 7 working days.
Organizer Terms
Effective date: 26 June 2026 · Version 1.0
This part of the document applies to organizers, photographers, and their team members who use the EventLens organizer dashboard to create or manage events, or to upload or handle content. It is a B2B agreement, separate from the consumer Terms above. You must accept it in the app before accessing the dashboard; the sections below are the full text that the in-app consent screen refers to.
The Organizer Terms have three parts:
- A. Organizer Agreement (#organizer-agreement) — your role, your content, fees, audit, termination
- B. Data Protection Addendum (#data-protection) — controller roles, your data obligations, sub-processors
- C. Indemnity and Liability (#indemnity) — who is financially responsible for what
A. Organizer Agreement
A.1 Parties. This agreement is between EventLens DOO Zrenjanin (Klajnova 18, 23000 Zrenjanin, Company ID 21998303, TIN 114277204) and you, acting as an organizer, photographer, or team member. You warrant that you are authorized to bind the entity you represent and that the information you provide is accurate.
A.2 Your team. You are responsible for all activity under your account and the accounts of team members you invite (photographers, uploaders, taggers), and for managing their access.
A.3 Your content. For every photo or other content you or your team upload, you warrant that you either own it or hold a written transfer of the economic rights (not merely “authorization”), that you have a lawful basis to process the personal data of everyone depicted — specifically explicit consent for facial recognition (Art. 9 GDPR) and an appropriate basis for the photography itself — and that you have written parental consent for any child under 16 (or the local digital-consent age) who is depicted. You must not upload content that is unlawful, that infringes anyone’s rights, that depicts people who have objected to being photographed, or that was captured without a lawful basis.
A.4 Third-party photographers. Where content was created by photographers who are not part of your legal entity, you warrant that you hold a written transfer of economic rights (or a sub-licensing right) sufficient to upload and commercially exploit that work, that the photographer’s moral rights under Serbia’s Copyright Act are respected (including, where applicable, attribution), and that no photographer or other rights-holder will have a claim against EventLens arising from your upload. You are solely responsible for your agreements with, and payments to, your photographers.
A.5 Licence to EventLens. You grant EventLens a non-exclusive, worldwide, royalty-free licence to host, store, process, watermark, display, distribute, and sell the uploaded content solely to provide the Service on your behalf. This licence ends when the content is deleted, except as needed to complete transactions already made or to meet legal obligations.
A.6 Pricing, payouts, and tax. You set your own prices within the platform’s rules. Transactions in RSD are settled via OTP Banka Srbija, with EventLens issuing fiscal receipts to buyers in Serbian; transactions in other currencies are processed by Paddle as Merchant of Record, which issues the buyer’s receipt and handles the applicable sales taxes/VAT for that transaction. You remain responsible for taxes on your own revenue (your payouts), regardless of which payment route applies, and for the accuracy of your payout configuration.
A.7 Compliance checks. From time to time, on 14 days’ notice, EventLens may request evidence that you are meeting these terms — for example, samples of attendee consents, photos of the notices displayed at your events, and records of how you handled attendee requests. A more detailed review may take place where there is a reasonable suspicion of a breach.
A.8 Termination and migration. You may terminate at any time, with a 30-day window to migrate your active events and export your data. EventLens may terminate on 30 days’ notice, or immediately for a material breach. On termination, content is deleted except where retention is legally required.
A.9 Versioning and changes to law. Material changes to these Organizer Terms require your renewed acceptance, with at least 30 days’ notice. If GDPR, ZZPL, the EU AI Act, the Copyright Act, or consumer-protection law materially changes, the parties will update this agreement in good faith; if a party refuses a reasonable update, the other may terminate without penalty.
B. Data Protection Addendum
B.1 Legal framework. This addendum governs the processing of attendees’ personal data under the GDPR and Serbia’s ZZPL.
B.2 Roles.
| Role | Responsible for |
|---|---|
| EventLens — sole controller | Biometric processing, accounts, payments, security, platform sub-processors |
| You — sole controller | Decisions about your event, attendee consent, on-site notices, ticketing data |
| Joint controllers (Art. 26 GDPR) | The photos of a specific event: hosting, delivery, the public gallery, and deletion of a depicted person’s photos on request |
B.3 Your obligations before the event. – Provide a privacy notice at the ticketing stage, before purchase. – Collect attendees’ explicit consent for facial recognition, separately from the ticket (not bundled). – Display visible notices at the event venue about photography and facial recognition. – Provide an opt-out mechanism (for example, a coloured wristband) for attendees who do not wish to be photographed.
B.4 Your obligations during processing. – Configure retention in line with the consent you collected — do not request longer retention than attendees agreed to. – Respond to attendee requests (access, correction, deletion, objection) within 30 days. – Forward to EventLens, within 5 working days, any request that concerns EventLens’s processing. – Notify EventLens of a personal-data breach within 24 hours of becoming aware, so we can meet our 72-hour deadline to the supervisory authority (Art. 33 GDPR). – Keep access secure: strong passwords, 2FA where available, no credential sharing.
B.5 Special categories. Obtain written parental consent for any child under 16. For medical, religious, or political events, heightened protection applies and EventLens may decline processing without further legal analysis. You must not use the platform to profile people by sensitive characteristics (race, sex, religion, mood) — this is prohibited under the EU AI Act.
B.6 DPIA. EventLens has carried out a Data Protection Impact Assessment for the platform. You must carry out your own DPIA for high-risk events (over 5,000 attendees, events with children or vulnerable groups, or public spaces with passers-by), or accept EventLens’s DPIA as a baseline while taking on the risks specific to your event.
B.7 Sub-processors. Any third party you use (external photographers with their own software, cloud storage outside the platform) is your sub-processor and must be bound by a written DPA (Art. 28(2) GDPR). EventLens gives general authorization for its own sub-processors listed in the Privacy Policy, with 30 days’ notice of any change.
B.8 Contact point. Attendees may contact either party. EventLens is the primary contact for platform and biometric matters; you are the primary contact for content and event-specific matters. The essence of this joint-controller arrangement — namely the role split in B.2, each party’s obligations in B.3–B.4, the contact points, and how attendees exercise their rights — is published by EventLens in its Privacy Policy and must be published by you in your ticketing terms.
B.9 Processing details (Article 28 GDPR). Where EventLens acts as your processor (processing event content on your instructions to operate the Service), the processing is described as follows:
| Element | Detail |
|---|---|
| Subject matter | Hosting, facial-recognition matching, and delivery of your event photos |
| Duration | For the life of the event, until it is deleted or its retention period ends |
| Nature and purpose | To make attendees’ photos findable and deliverable through the Service |
| Types of personal data | Photographs of attendees, facial templates (faceprints), and attendee email addresses you provide |
| Categories of data subjects | Attendees and other people depicted in your event photos |
EventLens processes this data only on your documented instructions; ensures persons authorized to process it are bound by confidentiality; applies the security measures in our Privacy Policy (Art. 32); assists you, taking into account the nature of processing, with attendee-rights requests and with your obligations under Articles 32–36; and, at your choice, deletes or returns the data at the end of the Service, except where retention is legally required. The audit right in A.7 applies to this processing.
C. Indemnity and Liability
What this means in practice. An indemnity clause is standard in B2B SaaS agreements — AWS, Stripe, and Salesforce all use them. It is triggered only if you cause a specific breach (for example, uploading photos without consent). If you meet your obligations under these terms, it never comes into play.
C.1 Your indemnity to EventLens. You agree to indemnify EventLens DOO Zrenjanin — including for GDPR/ZZPL fines — against losses, claims, regulatory penalties, and reasonable costs arising from your content, a breach of your warranties, or your processing of attendees’ personal data within your sphere of responsibility.
C.2 Procedure. EventLens will notify you of any claim within a reasonable time and let you take over the defense, provided EventLens may participate with its own counsel and that you do not settle anything that imposes an obligation on, or admits fault by, EventLens without its prior written consent. You will keep EventLens reasonably informed of the progress of the defense.
C.3 Limit on EventLens’s liability to you. EventLens is not liable for indirect or consequential loss. Our total aggregate liability is limited to the amounts you paid EventLens in the 12 months before the relevant claim.
C.4 Understanding the risk. Your liability may be significantly greater than the amounts you pay EventLens. We recommend you take legal advice for high-risk events.
C.5 Survival, law, and jurisdiction. These obligations survive termination. Governed by the law of the Republic of Serbia, with exclusive jurisdiction in the courts of Zrenjanin. The limits in C.3 do not apply to liability that cannot be limited by law (death, personal injury, or fraud).
Questions about the Organizer Terms? Write to us at info@eventlens.rs