Information under Articles 13–14 GDPR

Privacy Policy

Last updated: 24 July 2026.

1. Data Controller

The Data Controller is Prime Weddings [registered legal name to be added], with registered office at [full address to be added], tax/VAT number [to be added] (“Prime Weddings” or the “Controller”).

Questions about personal data may be sent to info@primeweddings.it.

2. Scope of this policy

This policy applies to visitors to the website and to individuals who submit an enquiry about wedding planning, destination weddings, wedding design or event coordination. It does not govern third-party websites reached through external links.

3. Personal data we process

• Identity and contact details: full name, email address and telephone number;
• Enquiry details: approximate event date, destination, required service, guest count, budget range and message;
• Technical and security data: submission date and time, IP address, browser and user-agent;
• Compliance data: acknowledgement of this policy and its applicable version.

Please do not include special-category data under Article 9 GDPR, information about children or any information that is unnecessary for your enquiry.

4. Purposes, legal bases and required information

Responding to enquiries and pre-contractual steps

Data is used to assess an enquiry, check availability, contact the enquirer, arrange an initial consultation and prepare a potential proposal. The legal basis is Article 6(1)(b) GDPR: steps taken at the individual’s request before entering into a contract.

Your name, email address and acknowledgement of this policy are required to submit an enquiry. Other fields are optional but help Prime Weddings provide a more relevant response.

Security, abuse prevention and legal protection

IP addresses, user-agents and technical metadata are processed to protect the form against abuse, maintain service security, document enquiries and protect the Controller’s rights. The legal basis is the Controller’s legitimate interest under Article 6(1)(f) GDPR, balanced against the rights and freedoms of data subjects.

Legal obligations

Data may be processed where necessary to comply with legal obligations or lawful requests from public authorities under Article 6(1)(c) GDPR.

Marketing

The current form does not subscribe users to a newsletter and does not request marketing consent. Submitted information will not be used for unsolicited promotional communications. If marketing is introduced, a separate, optional and withdrawable consent will be provided.

5. Processing and security

Data is processed using digital systems and organisational procedures appropriate to the nature of the information and reasonably foreseeable risks. Measures include access controls, protection of the administration area, submission logging and access limited to authorised individuals. No electronic transmission or storage method can be guaranteed as absolutely secure.

6. Retention

Enquiries and associated technical metadata, including IP address and user-agent, are retained for no more than 24 months from the last meaningful contact, unless:

• a contractual relationship begins, in which case relevant data is retained for the periods required by civil, tax and accounting law;
• longer retention is necessary to establish, exercise or defend legal claims; or
• a legal obligation or authority requires another period.

At the end of the applicable period, information will be deleted or anonymised in a manner compatible with the systems in use.

7. Recipients

Data may be accessed by authorised Prime Weddings personnel and by suppliers providing hosting, email, maintenance, security or technical support, where necessary. Depending on their role, these parties act as processors under Article 28 GDPR or as independent controllers.

The website is hosted on Aruba infrastructure. Before publication, all active suppliers and their privacy roles must be documented. Data may also be disclosed to public authorities where required by law. It is not sold or publicly disclosed.

8. International transfers

Prime Weddings favours suppliers processing data within the European Economic Area. Where a supplier transfers data to a third country, the transfer will rely on an adequacy decision or appropriate safeguards under Articles 44 onward GDPR, including Standard Contractual Clauses where applicable. This position must be verified against the services actually in use.

9. Automated decision-making

No decisions producing legal or similarly significant effects are made solely through automated processing. Destination, service, guest and budget information is used to assess each enquiry manually.

10. Your rights

Subject to the conditions and limits of the GDPR, you may request access, rectification, erasure, restriction, objection, portability where applicable, and withdrawal of consent for any processing based on consent. Requests may be sent to info@primeweddings.it. Prime Weddings may request information necessary to verify the applicant’s identity.

You may also lodge a complaint with the Italian Data Protection Authority or the supervisory authority in your EU Member State.

11. Children

The services are not directed at children and Prime Weddings does not knowingly collect children’s data through the enquiry form. A parent or guardian may contact the Controller to request deletion.

12. Cookies

For details about technologies used on the website, please read the Cookie Policy. Introducing analytics, marketing tools or third-party embeds may require this documentation and the consent interface to be updated.

13. Changes to this policy

This policy may be updated to reflect legal, organisational or technical changes. The current version and its revision date will be published on this page.