1. Data Controller

The Data Controller is:

Name/Company Name: Davide Gallo

Registered Office: [Full Address, e.g., Via Roma 1, Rome, Italy]

Contact Email: [Your Professional Email]

VAT Number: [Your VAT Number, if applicable]

2. Types of Data Collected

During the navigation and use of the services provided, we collect the following categories of data:

Data provided voluntarily: Name, surname, email address, phone number, event location, and any other information provided via contact forms or quote requests.

Browsing data: IP addresses, browser type, and device information collected through essential cookies to ensure the security and proper technical architecture of the platform.

3. Purposes of Processing

The collected data is processed exclusively for the following operational purposes:

Preparing quotes, responding to inquiries, and planning photographic services.

Managing contract execution, including the delivery of digital client galleries and invoicing.

Complying with applicable tax, accounting, and legal obligations.

Sending portfolio updates or marketing communications, subject to your explicit consent.

4. Legal Basis for Processing

The processing of data is based on the following legal grounds:

Execution of a contract or pre-contractual measures: To provide the commissioned photography services.

Legal obligation: To comply with administrative and tax requirements.

Consent: For optional marketing activities or newsletters (always revocable).

5. Processing Methods and Retention

Processing is carried out using IT tools, with logic strictly related to the stated purposes, and adopting adequate security measures to prevent data loss or unauthorized access. Personal data will be retained for the time strictly necessary to achieve the operational purposes and, in any case, in compliance with statutory retention periods (e.g., 10 years for invoices).

6. Data Sharing (Third Parties)

Personal data will not be sold or publicly disseminated. It may be shared exclusively with the following entities acting as Data Processors:

IT service providers necessary for the website's operation (e.g., hosting services) and cloud platforms used for the secure delivery of photographs (e.g., [Insert software name, e.g., Pixieset, Pic-Time, WeTransfer]).

Administrative and accounting consultants for tax compliance.

7. User Rights

Pursuant to Articles 15-22 of the EU Regulation 2016/679 (GDPR), the User has the right to:

Request access to their personal data.

Request rectification or erasure ("right to be forgotten").

Object to the processing or request its restriction.

Request structured data portability.

Withdraw previously granted consent.

To exercise these rights, the User may send a formal request to the email address: [Your Email].

8. Changes to this Policy

We reserve the right to periodically update this Policy to ensure compliance with current legislation or new operational procedures. Substantial changes will be indicated by updating the date at the top of this page.