NOTICE UNDER ARTICLES 13 AND 14 GDPR
Privacy policy
Version 2026-09-22 — last updated 22 September 2026
This notice describes how personal data is processed through the website www.dolomitesweddingphotographer.com, its enquiry form and its testimonial-submission form. It is drawn up under Regulation (EU) 2016/679 ("GDPR"), the Italian data protection code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018), and the ePrivacy rules on electronic communications reflected in the Cookie policy.
1. Data controller
The data controller is [Legal name of the data controller — set before go-live], based at [Full registered business address — set before go-live], reachable at hello@dolomitesweddingphotographer.com. Data protection officer: Not appointed. If a Data Protection Officer is later designated, add their contact here.
2. What data we collect
When you submit the enquiry form, we collect: your name, email address, phone number, country, wedding/event date, preferred location, budget range and message. We also automatically record how you reached the form — referring page, UTM campaign parameters and the pages you viewed beforehand — but only once you've given analytics consent in the cookie banner; without that consent this attribution data is not stored.
If you're asked to submit a client testimonial, we collect your name, location, the service booked, your quote and star rating, under a separate consent given on that form, before it is published on the site.
For security and to keep the site running, we also process standard technical data such as IP address, request logs, browser type and session information for as long as strictly necessary for that purpose.
3. Purposes and legal bases
To reply to your enquiry, arrange a call, prepare a quote and take the pre-contractual steps you request, we process your data under Art. 6(1)(b) GDPR. Where forwarding is active for this site, your enquiry may be routed to the studio's affiliated photographer for that region under the same basis, as disclosed on the enquiry form itself. To meet accounting, tax or other legal obligations, we process data under Art. 6(1)(c). To prevent abuse, keep the service secure and defend our legal rights, we rely on our legitimate interest under Art. 6(1)(f). Analytics and any marketing tools, and the public display of a testimonial you submit, are only ever based on your free, specific, informed and revocable consent under Art. 6(1)(a).
4. Providing your data
The fields marked as required on the enquiry form are necessary for us to reply. Everything else is optional. Not providing optional information has no consequence beyond a less tailored first response; not providing the required fields means we can't process your enquiry.
5. Methods and security
Processing is carried out by electronic means, following the principles of fairness, lawfulness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality. Technical and organisational measures in place include access controls on the CRM, encrypted transport (HTTPS), rate-limiting on the enquiry endpoint, and routine backups.
6. Recipients
Your data is processed by our hosting and database providers (site hosting and PostgreSQL database infrastructure), our email delivery provider (for sending replies and notifications), and — only when this site's forwarding feature is switched on and only for enquiries that qualify — the affiliated photographer handling that region, appointed as data processors or independent controllers as applicable. We do not sell personal data to third parties, and we do not use it for purposes beyond those described in this notice.
7. Transfers outside the EEA
Our hosting, database and email providers are chosen to keep data within the EU/EEA wherever possible. Where a provider does process data outside the EEA, this only happens on the basis of an adequacy decision, standard contractual clauses, or another safeguard recognised under Chapter V GDPR.
8. Retention
Enquiries that don't lead to a booking are automatically deleted once they reach the retention period configured for this site (365 days by default, counted from the enquiry date) — this runs on an automated, scheduled process, not a manual review. Enquiries that do lead to a booking are kept for as long as needed to deliver the service and to meet accounting and tax obligations afterwards. Analytics data, where consented to, is retained for the period set in Google's own configuration for this property. See the Cookie policy for cookie-specific durations.
9. Your rights
You can request access, rectification, erasure, restriction, portability and object to processing in the cases provided for by Arts. 15–22 GDPR. You can withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand, via the "Privacy settings" button in the site footer or by writing to hello@dolomitesweddingphotographer.com. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it.
10. Automated decision-making
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you. Lead "forwarding," where active, is a simple routing rule based on region — it doesn't score, profile or otherwise evaluate you.
11. Cookies and tracking
The site uses necessary technical cookies/local storage. Optional analytics stays off until you actively consent, and no marketing or profiling tool is installed. For categories, duration and providers, see the Cookie policy; to change your choice at any time, use the "Privacy settings" control in the footer.
12. Changes to this notice
Whenever we make a material change to this notice — a new purpose, a new recipient, a different legal basis or retention period — we update the version number and date at the top of this page. If the change affects data we already hold, we also email everyone in our records whose enquiry predates that version, pointing them back to this page, so nobody is left relying on an outdated notice. If you've received such an email, no action is required — it's for your information, and you can exercise any of the rights in section 9 at any time.
13. Contact
For any question about this notice or to exercise your rights, write to hello@dolomitesweddingphotographer.com.
This site is offered on a rank-and-rent basis: sections 1 and 6 above use placeholder text (in brackets, in content/legal.ts) until a specific studio/controller is onboarded. Replace those before the site accepts real enquiries — everything else on this page describes the site's actual, current data-handling behaviour.