Privacy Policy

1. Data Controller

The data controller for the personal data you provide via this website is:

Maria Grillo and Orazio Sciuto operate as private individuals (personas fisiche) and do not hold a VAT number (P.IVA). They are not subject to the requirement to appoint a Data Protection Officer (DPO) under Art. 37 GDPR.

2. Data We Collect

We collect personal data only when you voluntarily submit the contact form on this website. The data collected is:

• Name — to address you in our reply
• Email address — to respond to your inquiry
• Wedding date — to verify availability
• Venue and city — to understand your project (optional)
• Free notes — any additional information you choose to share (optional)

We do not collect any special categories of data (Art. 9 GDPR), financial data, or data relating to minors. We do not use cookies or tracking technologies of any kind on this website (see Section 5 on Analytics below).

3. Purpose and Legal Basis

Your data is processed exclusively to respond to your contact inquiry and, if relevant, to discuss a potential collaboration for your wedding photography.

The legal basis for this processing is your freely given, informed consent as per Art. 6(1)(a) GDPR, expressed when you tick the consent checkbox before submitting the contact form. You may withdraw this consent at any time (see Section 6).

We do not use your data for marketing, profiling, or any purpose other than responding to your inquiry.

4. Data Retention

Your data will be retained for a maximum of 24 months from the date of your inquiry, or until you request its deletion, whichever comes first. If a collaboration agreement is entered into, data necessary for the contractual relationship may be retained for the duration required by applicable Italian and EU law.

5. Analytics

This website uses Plausible Analytics (plausible.io), a privacy-first analytics service hosted in the EU. Plausible does not use cookies, does not collect personal data, does not track visitors across sites or devices, and is fully compliant with GDPR, PECR, and ePrivacy. No consent banner is required for Plausible.

Aggregate statistics collected by Plausible include page views, referral sources, and device type — none of which can identify individual visitors.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your form submission is delivered directly to our email inbox. No third-party CRM, marketing platform, or email marketing service has access to your data.

7. Your Rights

Under the GDPR you have the following rights, which you can exercise at any time by writing to info@oraziosciuto.it:

• Right of access (Art. 15) — request a copy of your data
• Right to rectification (Art. 16) — request correction of inaccurate data
• Right to erasure (Art. 17) — request deletion of your data
• Right to restriction (Art. 18) — request limited processing
• Right to data portability (Art. 20) — receive your data in a structured format
• Right to object (Art. 21) — object to processing based on consent
• Right to withdraw consent — you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal

If you believe your rights have not been respected, you have the right to lodge a complaint with the Italian Data Protection Authority: Garante per la protezione dei dati personali.

8. Updates to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page always reflects the most recent revision. Material changes will be communicated via a prominent notice on this website.