Privacy Policy

When you visit our website or contact us, we may collect the following categories of personal data: - Contact information: name, email address, phone number (when you submit our contact form) - Technical data: IP address, browser type, device information, operating system - Usage data: pages visited, time spent on pages, referral source - Cookie data: preferences, session identifiers (see Cookies section below) We do not collect any special categories of personal data (such as data about your health, race, religion, or political opinions).

Your personal data is processed for the following purposes: - To respond to your inquiries and provide information about our wedding photography services - To manage pre-contractual and contractual communications related to wedding photography bookings - To improve and optimize our website experience - To analyze website traffic and usage patterns through anonymized analytics - To comply with legal obligations We will never use your personal data for automated decision-making or profiling.

We process your personal data based on the following legal grounds, as provided by Article 6 of the GDPR: - Consent (Art. 6.1.a): When you voluntarily submit a contact form or subscribe to communications. You may withdraw your consent at any time. - Contractual necessity (Art. 6.1.b): When processing is necessary to fulfill a contract or take pre-contractual steps at your request (e.g., discussing a wedding photography booking). - Legitimate interest (Art. 6.1.f): For website analytics and security purposes, where our interests do not override your fundamental rights and freedoms. - Legal obligation (Art. 6.1.c): When we are required to retain data for tax, accounting, or other legal purposes.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: - Contact form submissions: retained for up to 24 months after the last communication, or until you request deletion - Contractual data: retained for the duration of the contract and for up to 10 years thereafter, as required by Italian tax law - Analytics data: anonymized and aggregated data may be retained indefinitely; identifiable data is deleted within 14 months - Cookie data: see the Cookies section for specific retention periods After the applicable retention period, your data will be securely deleted or anonymized.

Under the GDPR, you have the following rights regarding your personal data: - Right of access (Art. 15): You can request a copy of the personal data we hold about you. - Right to rectification (Art. 16): You can ask us to correct inaccurate or incomplete data. - Right to erasure (Art. 17): You can request that we delete your personal data ("right to be forgotten"), subject to legal retention requirements. - Right to restriction (Art. 18): You can ask us to restrict the processing of your data in certain circumstances. - Right to data portability (Art. 20): You can request your data in a structured, commonly used, machine-readable format. - Right to object (Art. 21): You can object to the processing of your data based on legitimate interest. - Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. - Right to lodge a complaint: You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it. To exercise any of these rights, please contact us at hello@spaghettiweddings.com.

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. Types of cookies we use: - Essential cookies: Required for the website to function properly. These cannot be disabled. - Analytics cookies: Help us understand how visitors interact with our website. We use Google Analytics with IP anonymization enabled. - Preference cookies: Remember your choices and settings for a better experience. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information about cookies, visit www.allaboutcookies.org.

We may share your personal data with the following categories of third-party service providers: - Google Analytics: For anonymized website traffic analysis (Google LLC, USA — data processed under EU-US Data Privacy Framework) - Hosting provider: For website hosting and server infrastructure (data stored within the EU) - Email service provider: For managing contact form submissions and communications We ensure that all third-party processors comply with the GDPR and have appropriate data processing agreements in place. Data transfers outside the European Economic Area (EEA) are only made where adequate safeguards exist, such as Standard Contractual Clauses or adequacy decisions. We do not sell, trade, or rent your personal data to any third parties.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this privacy policy or our data practices, please contact us: Email: info@spaghettiweddings.com