Privacy policy (GDPR)

Who is responsible for your data

The data controller is [DA FORNIRE: company name or full name of the controller], based at [DA FORNIRE: full address], VAT number [DA FORNIRE: VAT number].

For any question about your data, write to [DA FORNIRE: email address for privacy requests]. Data Protection Officer (DPO): [DA FORNIRE: state whether appointed, or that none is required].

What we collect and why

We collect only what we need to answer you. We do not sell your data, we do not profile you and we do not make decisions by automated means.

The guided request form ("Plan your request")

Data: your name, email, phone number, whether you prefer WhatsApp, your country or city, date or period, place, number of guests, the services you need, an indicative budget and the free text where you tell us about your wedding.

Purpose: to reply to your request, understand what you need and, where possible, propose suitable professionals who are available.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

The form asks you to confirm you have read this notice. Without the required fields we cannot reply.

WhatsApp messages and phone calls

Data: the number you write or call from, the content of your messages and anything you choose to tell us.

Purpose: to answer your questions and, if you wish, to continue the conversation started with your request.

Legal basis: steps taken at your request before a contract (Art. 6(1)(b)) or, for general questions, our legitimate interest in answering people who contact us (point (f)).

WhatsApp is a third-party service (Meta group): messages travel on its platform, which processes them under its own privacy notice. If you prefer not to use it, choose the form or the phone.

Technical browsing data

The site is hosted by Vercel, which records the technical data needed to deliver pages and protect them from abuse (for example IP address, date and time, requested page, browser type).

Legal basis: legitimate interest in security and in the site working properly (Art. 6(1)(f)). We do not use this data to recognise or profile you.

Anonymous statistics (only with your consent)

The site is prepared to measure visits with Google Analytics 4. The tool loads only if you accept it in the cookie banner; before your choice nothing is loaded. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time. Details in the cookie policy.

Data we would rather not receive

In the free-text box, tell us about your wedding, but please do not include health data, religious beliefs or other special categories of data (Art. 9 GDPR): we do not need them to plan a wedding. If something of this kind is truly necessary, we will ask you and explain why.

Who we share data with

Your data is handled by the people at [DA FORNIRE: controller name] who deal with requests, and by suppliers working on our behalf as processors:

• Vercel Inc.: hosting of the website and of the function that receives the form.
• [DA FORNIRE: service that receives and stores requests (for example GoHighLevel or an email service such as Resend), if enabled]
• WhatsApp (Meta group): only if you write to us on that channel.

If we need to ask a photographer, videographer, venue or other professional whether they are available, we share only the details needed to check availability, and we tell you first. [DA FORNIRE: confirm how details are shared with professionals]

Your data is never published and never passed on to third parties for advertising.

Transfers outside the European Union

Some suppliers are based, or have infrastructure, outside the European Economic Area (for example in the United States). In that case the transfer relies on the safeguards the GDPR requires: an adequacy decision, such as the EU-US Data Privacy Framework for certified providers, or standard contractual clauses. [DA FORNIRE: check the transfer basis for each supplier actually enabled]

How long we keep your data

• Requests and messages: for as long as needed to handle your request and, if we do not end up working together, for no longer than [DA FORNIRE: retention period, to be set with an advisor]. If we do work together, for the length of the engagement and the periods required by law (including tax).
• Technical browsing data: according to the hosting provider's retention times. [DA FORNIRE: check Vercel's log retention]
• Your cookie choice: stored on your device until you change it or clear the site's data.
• Form draft: the text you are typing is kept in your browser tab's memory (sessionStorage) and disappears when you close the tab; it never reaches us until you press send.

Your rights

At any time you can ask for access to your data, correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. Where processing is based on consent you can withdraw it whenever you like, without affecting what was done before.

To exercise your rights, write to [DA FORNIRE: email address for privacy requests]. We reply within one month, extendable in complex cases as Art. 12 GDPR allows.

If you think your data is being handled unlawfully you can complain to the Italian data protection authority, the Garante (garanteprivacy.it), or to the authority in your country of residence.

Security and minors

The site is served only over an encrypted connection (HTTPS) and access to requests is limited to the people who handle them. No system is risk-free, which is why we keep data to the strict minimum.

The service is for adults: we do not knowingly collect data from minors.

Changes to this notice

If we change how we handle data we update this page and the date below. Last updated: [DA FORNIRE: final publication date].