Privacy policy

Who is responsible for your data

Your data is processed by DocPicasso — the visa workshop that is a party to the public offer; we are the ones who decide why and how it is processed. You can write to us about data on Telegram (@DocPicasso), on WhatsApp (+66 92 663 12 32) or by email to hello@docpicasso.com. We send the workshop’s registration details in the chat before the contract is concluded and state them in the payment documents.

The workshop is established outside the European Union, Switzerland, the United Kingdom, Canada, Brazil and Türkiye. If you live in an EU or EEA country, we process your data under the GDPR; if you live in Switzerland, Canada (including Quebec), Brazil or Turkey — under the same rules, with the rights your own country’s law gives you (the nLPD, PIPEDA and Law 25, the LGPD, the KVKK). On what basis, to whom we pass it and how long we keep it is set out below.

What data we receive

The site has no forms and never asks you to enter personal data. You talk to the workshop in Telegram or WhatsApp — the data you send there is governed by the rules of those services, and we use it only to solve your case.

The Russian and English pages of the site run a Yandex.Metrica counter. It collects anonymised visit statistics: pages, referral sources, device type, actions on the page (including the Webvisor technology). This data does not let us establish your identity.

Why we need these statistics

To understand which parts of the site are useful and which are not, and to make the site better. Nothing beyond that: we do not sell data, do not pass it to third parties and do not send advertising.

Cookies

The site sets no advertising or tracking cookies. On the Russian and English pages Yandex.Metrica uses cookies to count visits; on the pages in Spanish, Czech, German, Italian, Polish, French, Portuguese and Turkish no analytics counters are installed.

You can turn cookies off in your browser settings — the site will keep working in full. More about the data Yandex.Metrica processes: yandex.ru/legal/confidential.

Client data

The documents you give the workshop for your visa application are used only to prepare that application and support its filing. Only the masters working on your case have access to them; partner contractors on particular destinations receive only what is needed for the specific service. The application goes to the consulate from your personal account — you can see for yourself what has been filed and where.

We keep the case documents for as long as the repeat-filing guarantee is in effect — without them we could not support a re-filing; accounting and payment materials are kept for three years from the end of the relevant year — for as long as the tax and other authorities at our place of registration may request them. At your request we will delete the case materials earlier — a repeat filing under the guarantee will then only be possible once you provide the documents again. The full terms are in section 10 of the Offer.

We translate correspondence in other languages: at the translation provider it is kept for up to 30 days, and on our side translations are kept as correspondence.

On what basis and to whom we pass data

We process the documents and the case correspondence in order to perform the contract and to do what you ask of us before it is concluded: to work through the task, check the documents, assemble the package and support the filing. We keep accounting and payment materials because the law at our place of registration requires it. We ask for separate consent only where the processing goes beyond what the contract needs — and you may withdraw that consent at any time. We collect site statistics in our legitimate interest: to understand which parts of the site are useful.

The data is seen by the masters working on your case; the enquiry management service (amoCRM) and the messenger connection service (Wazzup) — correspondence and contacts; Telegram and WhatsApp — as communication channels, under their own rules; the correspondence translation provider; the site hosting (Netlify); partner contractors on particular services — only what is needed for the specific service. Nobody else: we do not sell data and do not hand it to advertising networks.

The workshop and most of these services are outside the EU and the EEA, Switzerland, the United Kingdom, Canada, Brazil and Türkiye: your data is stored outside your own country (for residents of Quebec — outside Quebec and Canada), and our country of registration has not been recognised as a country with an adequate level of protection, either by the European Commission or by the authorities of your country. We therefore transfer the minimum amount of data necessary and require an obligation of confidentiality from everyone we engage. The documents you send into the chat you provide to us directly — that is you approaching us, not a third party transferring your data abroad.

Your rights

You have the right to: find out what data of yours we hold and to whom we have passed it, and receive a copy of it; correct inaccuracies; delete data we are not obliged to keep by law or for the repeat-filing guarantee; restrict the processing or object to it; receive your data in a portable form; withdraw consent where the processing is based on consent. Write to us in the chat or to hello@docpicasso.com — we reply within 10 business days.

We take no decisions about you without human involvement and do no profiling: assessments and decisions on a case are made by the masters. In family cases we receive children’s data from a parent or legal guardian and keep it in the same way as adults’ data.

If you think we are handling your data wrongly, tell us — we will sort it out. You also have the right to complain to the supervisory authority where you live: in Spain — the AEPD, in the Czech Republic — the ÚOOÚ, in Germany — the BfDI and the state authorities, in Italy — the Garante, in Poland — the UODO, in France — the CNIL, in Belgium — the APD/GBA, in Luxembourg — the CNPD, in Portugal — the CNPD, in Switzerland — the FDPIC (PFPDT/EDÖB), in Canada — the Office of the Privacy Commissioner (OPC), in Quebec — the CAI, in Brazil — the ANPD, in Turkey — the KVKK; or to the supervisory authority of our country of registration.

Questions

Write to us on Telegram (@DocPicasso) or WhatsApp (+66 92 663 12 32), or email hello@docpicasso.com — we answer questions about data too.