English translation provided for convenience. In case of any discrepancy, the Italian version prevails.
1. Introduction
In accordance with Regulation (EU) 2016/679 (GDPR), Studio Haddon is committed to protecting the personal data of visitors to its website and to respecting their privacy. This policy describes how we collect, use and protect the personal data provided by users who contact us for information about our services.
2. Data Controller
The data controller is Massimiliano Maino, Italian VAT number 04727920169, trading as Studio Haddon, who can be reached at info@studiohaddon.it.
3. Types of Data Collected
Under Article 4(1) of the GDPR, we collect the following personal data when users fill in the contact forms:
- Contact details: the couple’s names, email address and telephone number.
- Event details: the wedding date, the locations of the day, the number of guests and the time of day it will take place.
- Additional information: any details about the services requested and notes left by the user.
4. Legal Basis for Processing
We process the data collected on the following legal bases:
- Consent (Art. 6(1)(a)): to send information and replies to enquiries about our services.
- Pre-contractual measures (Art. 6(1)(b)): to prepare quotations and provide specific details about the services requested.
5. How Data Is Collected
We collect personal data through the forms on the website, as well as through any direct communication by email or telephone.
6. Purposes of Processing
Data is processed for the following purposes:
- To answer requests for information and provide quotations for photography services.
- To prepare tailored service proposals based on the needs expressed by the user.
- To carry out anonymous statistical analysis in order to improve our services (in which case the data is aggregated and not identifiable).
7. Data Retention
In accordance with Article 5(1)(e) of the GDPR, we keep personal data only for as long as is necessary for the purposes for which it was collected, after which it is securely deleted. For quotation requests that are not confirmed, data is kept for a maximum of 12 months.
8. Data Sharing
We do not share users’ personal data with third parties, except for the technical management of the website and for support with anonymous statistical analysis. These providers comply with the GDPR as data processors under Article 28 of the GDPR.
Data entered in the contact form is transmitted and stored by Formspree Inc., which delivers it to our mailbox and keeps a copy of it. Formspree acts as a data processor under Article 28 of the GDPR.
9. Rights of Data Subjects
Users have the right to:
- Access their data and receive a copy of it (Art. 15 GDPR).
- Have inaccurate data corrected (Art. 16 GDPR).
- Have their data erased (“right to be forgotten”) under the applicable conditions (Art. 17 GDPR).
- Restrict processing or object to processing in certain circumstances (Arts. 18 and 21 GDPR).
- Withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
10. Data Security
We take appropriate security measures to protect personal data against unauthorised access and unlawful processing, as required by Article 32 of the GDPR.
11. Transfers of Data Outside the EU
Where we transfer personal data to providers located outside the European Union, we ensure that the data is protected by Standard Contractual Clauses (SCCs), in line with the GDPR provisions on international transfers.
This is the case for Formspree Inc., based in the United States, which receives the data entered in the contact form.
12. Cookies and Local Storage
This site uses the Meta Pixel to measure the results of advertising on Facebook and Instagram. It is the only third-party tool that processes data for marketing purposes, and it does not start on its own: it is loaded only after explicit consent, given through the banner that appears on the first visit. If you decline, or simply do not choose, it is not loaded at all and your browser never contacts Meta.
Consent can be changed or withdrawn at any time from the «Cookie preferences» link at the foot of every page, and withdrawing it reloads the page so that anything already started is stopped immediately.
Beyond this, the site keeps on your device only what it needs in order to work, described here in full.
- Reading position: when you switch between Italian and English, the site briefly notes where you were on the page in the browser’s session storage, and deletes it as soon as it has been used. It is not a cookie, it does not survive closing the browser, and it cannot identify anyone.
- Cookie notice: if you dismiss the notice at the foot of the page, the browser remembers this for the sole purpose of not showing it again on every visit.
- Typefaces: the Cormorant Garamond and Mulish typefaces are served by Google Fonts. Your browser therefore connects to servers operated by Google LLC, which in doing so receives the visitor’s IP address. Google Fonts installs no cookies.
13. Changes to This Privacy Policy
This policy may be updated in the future. Any changes will be published on this page together with the updated revision date.
14. Contact
For questions about this policy, or to exercise your rights in relation to your personal data, write to us at: info@studiohaddon.it