Your data, and your family’s.

1199 keeps family trees: names, dates, places, photos and stories of real people. Here we explain what we do with all of that, in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the Dutch law that supplements it (Uitvoeringswet AVG), because 1199 is run by a business registered in the Netherlands.

1. Who the controller is

The controller of your data is:

Owner

Diego Mesa Marrero, trading as 1199.es (sole proprietorship, eenmanszaak)

Address

-

Email

hola@1199.es

Registration

Netherlands Chamber of Commerce (Kamer van Koophandel), KvK number 92671772

VAT

NL004969641B04

For anything to do with your data, write to us at hola@1199.es.

2. What data we process

Your account data. Your email and your password (we only keep a hash: not even we can read it), your name if you give it, when you signed up and confirmed your email, your plan, the language you use 1199 in, whether you want to receive news and when you accepted these terms.

What you upload. The people in your trees with their dates, places, relationships, biographies and links; photos and documents, with what you say about them (when, where, who is in them and where their face is); the posts you write; and who has access to each tree. When photos are uploaded we strip the hidden data they carry (EXIF), which can reveal where they were taken and with which phone.

Technical data, only what is needed. To stop people guessing passwords, the IP address is kept in memory for a few minutes; it doesn’t go into the database. To tell you how many people read your posts we count visits with a code that changes every day and doesn’t allow anyone to be identified or followed from one day to the next. And we measure use of the website with Umami, installed on our own server, without cookies and without personal data.

What you do on 1199. We record, linked to your account, the actions that tell us what is used and what isn’t: signing up, creating or deleting a tree, inviting someone, uploading photos, publishing a post, exporting, changing plan or sharing a link (and how: WhatsApp, email, copying it…). We don’t record what you write, or the names in your tree, or what you search for, or your IP address or your browser: only what happened, when and in which tree. If you don’t have an account, the little that is recorded (sharing, searching) goes with the same one-day code as visits.

The links you share. When you share using the 1199 buttons, the link carries a code (?c=…) so we know how many people come in through it. We don’t keep who comes in: we count them like visits, with a code that changes every day.

If you write to someone else on 1199, or they write to you. People can only write to you if you have turned it on in your account (it is off until you do), and only people with a confirmed email can write. We keep the messages, who wrote them, when, from which page (the tree, the post or the person) and what each of you has not read yet; and who you have blocked. The other person sees your name and what you write to them, never your email; the same goes for theirs. When someone writes to you we send you an email saying who and about what, without the text. Nobody at 1199 reads conversations, unless one of the two people reports it: then support can read it while resolving the report, to decide what to do.

If you report something. We keep the reason, the page, what you tell us and, if you leave it, your email so we can reply; your account, if you are signed in. We don’t keep your IP address.

If you write to us through the chat. The help chat (at the bottom of the screen, when you are signed in to your account) runs on Chatwoot, installed on our own server: what you write doesn’t go through anyone else. We keep the messages and anything you attach; your name, your email and your account code, so we know who you are without asking; and what helps us answer you: your plan, how long you have had an account, how many trees and books you have, the page you are writing from, your browser and its language. Nothing about your family or about what is in your trees.

If we need to look at your tree. Some bugs only show up with your data (for example, a tree that is drawn wrong). To look into them, whoever runs 1199 can open a private tree for 48 hours at most. They can only look at it: they can’t change anything. The moment they open it you get an email saying who opened it and why, and you can close it sooner from the tree settings. We keep a record of who looked at which tree, when and why. We do this only to fix bugs and improve 1199.

Minors. Anyone born less than 18 years ago is always private on 1199: they can only be seen by the members of their trees and by whoever has the password of one of those trees (and by support, if it needs to look at one of those trees, with the notice above), and nobody can make them public.

We don’t use your data for advertising and we don’t make automated decisions about you. What we record about your activity is for improving 1199, not for selling you anything or showing it to anyone.

3. Other people’s data

A tree is mostly about other people. That is why:

• Deceased people are not protected by the GDPR. Even so, if you are a relative or heir of someone who appears on 1199, you can ask us to see, correct or delete their data. Write to us and we will look into it.
• Living people you add are your responsibility: you need their permission, or their parents’ if they are minors, especially to make them public. What you keep for your family in a private tree is a household matter; what you publish on the internet is not.
• Each person can be public or private. Public people can be seen by anyone —search engines too— and any account can add them to its own tree. Private people can only be seen by whoever has access to a tree they are in. New people start out like their tree: private in a private tree, public in a public one.
• Photos follow the same rule: if someone private is tagged in a photo, that photo can only be seen by whoever can see that person, even if the tree or the album are public. Tagging the face of a living person is processing their image: make sure you have their permission.
• Don’t upload specially protected data about living people (health, religion, sexual orientation, ethnic origin, political opinions) without their explicit consent.
• If you appear on 1199 and don’t want to be there, or something about you or your family is wrong, write to us at hola@1199.es even if you don’t have an account. We will hide it or delete it.

4. What for, and on what legal basis

5. For how long

• Your data and what you upload, for as long as you have the account.
• If you delete it, we delete it on the spot. What you added to other people’s trees stays there, without your name. Whatever remains in backups disappears when those backups expire, within 6 months at most.
• What you do on 1199 (the activity linked to your account) and visits through shared links, 13 months. After that only the daily totals remain, with nobody in them. In backups it can last up to 6 more months, the time they take to expire.
• Reports, until they are resolved and one more year, in case it happens again.
• The record of each time support opens a tree (who, when and why), for as long as the tree exists.
• Messages with other people, for as long as you have the account. If you delete it, what you wrote is deleted straight away; what the other person wrote to you stays in their account, because it is theirs. If both accounts are deleted, nothing is left (and from the backups, when they expire, within 6 months at most).
• Help chat conversations, for as long as you have the account: if you delete it, they are deleted with it (and from backups when they expire, within 6 months at most). If you ask us, we delete them sooner.
• Error reports received by Sentry, 90 days at most; then Sentry deletes them.
• The links we send by email expire on their own: the confirmation one after 48 hours; the password one after an hour.
• Whatever must be kept by law, for as long as the law says: invoices and payment data, 7 years (Dutch tax law). If you delete your account, the records we keep on 1199 are left without your name or email, and are deleted after 7 years. Stripe, which handles the payments, keeps its own records of payments and invoices for as long as the law requires it to.
• The files of your purchases (“My purchases”), for as long as you have the account.

6. Who it is shared with

We don’t sell or hand over your data. It is only processed, on our behalf and under contract, by the providers without which the website wouldn’t work:

• Hostinger (Hostinger International Ltd., Cyprus): the server where the website, the database, the photos and the help chat live.
• Hetzner (Hetzner Online GmbH, Germany): keeps the backups of the database, the photos and the chat, encrypted before they leave our server.
• Resend (Resend, Inc., USA): sends the emails. It receives your email, your name and the content of the message. If you ask for news, it also keeps your email on its contact list until you unsubscribe.
• Stripe (Stripe Payments Europe, Ltd., Ireland): charges for plans and purchases. It receives your email, your name, your billing address and, if you give it, your VAT number; card details are collected by Stripe directly and we don’t see them. To prevent fraud and meet its legal obligations, Stripe processes some of that data as a controller in its own right (its privacy policy).
• Sentry (Functional Software, Inc., USA, with the data stored in Germany): tells us when something goes wrong on the website. It receives the error report: the address of the page, which part of the code failed and the data it was working with at that moment, which may include a name, a date or your email. It doesn’t receive your IP address, your cookies, your password or what you send in a form.

In addition, some pages load pieces from other servers, which see your IP address just as any website you visit does:

• Google Fonts (Google Ireland Ltd.): the typefaces chosen when customising a site and those of the prints (the editor and the download). The 1199 ones are served from our own server.
• unpkg and jsDelivr: libraries for the maps and the post editor.
• OpenFreeMap: the map backgrounds (with OpenStreetMap data). Your browser asks it for the map tiles you are looking at.

When you search for a place in the world (when you type a place in a profile and press “Search”), the text you search for is sent by our server to Nominatim, OpenStreetMap’s search engine (OpenStreetMap Foundation, United Kingdom), without your IP address or anything else of yours. The answers are kept for a month so the same question isn’t asked again.

And, of course, whatever you make public can be seen by anyone, and whatever you share with other accounts can be seen by those accounts. We will only give data to an authority if the law requires us to.

7. Outside the European Union

Resend is in the United States; Sentry is a company from there, although it stores the reports in Germany, and Stripe may process payment data in the United States. Those transfers are made with the safeguards required by the GDPR: the EU-U.S. Data Privacy Framework or, failing that, the standard contractual clauses approved by the European Commission. You can ask us for a copy of those safeguards.

8. Your rights

Regarding your data, you can, whenever you like and free of charge:

• access it and know what we do with it;
• rectify it if it is wrong (you can change most of it yourself from your account);
• erase it, by deleting your account;
• take it with you in a format that can be used elsewhere (portability);
• object to our using it, or ask us to restrict its use;
• withdraw your consent to news, without affecting what came before.

You can do almost everything yourself from your account: correct your data, “Download my data” (a copy of everything that is yours, to keep or take somewhere else) and “Delete my account”. For anything else, write to us at hola@1199.es from your account email, or from another one with something that proves it is you. We answer within a month at most. If you think we haven’t done it right, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the one in the country where you live (in Spain, the Agencia Española de Protección de Datos).

9. Minors

To open an account you must be at least 16 years old, the age set by Dutch law (art. 5 of the Uitvoeringswet AVG). If we find an account belonging to someone younger, we delete it.

10. Security

Everything travels encrypted (HTTPS). Passwords are stored as a hash and never in plain text; when you change yours, the sessions open elsewhere are closed and we tell you by email. Identifiers are not numbers that can be tried one after another. If there were ever a breach that put your data at risk, we would tell you, and the Autoriteit Persoonsgegevens, within the time limits set by law.

11. Cookies

1199 only uses the cookies it needs to work: without them you couldn’t sign in to your account, see the website in your language or carry on a conversation with us through the chat. There are no advertising or tracking cookies, neither ours nor anyone else’s; that is why we don’t ask for your permission with a banner: technical cookies don’t need it (art. 5.3 of Directive 2002/58/EC; in the Netherlands, art. 11.7a of the Telecommunicatiewet).

Separately, your browser keeps some preferences (the light or dark theme, the map background) in its local storage. They don’t leave your browser and you can delete them whenever you like from its settings.

12. Changes to this policy

If we change it, we will put the new date here. If the change is important, we will tell you by email before it applies.

See also the terms of use.