Data Controller

The Data Controller for the data collected through this website is Sara Palma, owner of PalmaEventi [TO BE COMPLETED — legal form: sole proprietorship / VAT number / registered address, if applicable], reachable at info@palmaeventi.com.

What data we collect

Through the contact form on the "Contact" page, we may collect the following, only if you provide it voluntarily:

• First and last name
• Email address
• Phone number (optional)
• Wedding date and location (optional)
• Type of wedding, type of ceremony, service of interest, approximate budget range (optional)
• Any style reference images, if manually attached to the email
• The content of any message you choose to write

How the form works technically: the contact form does not save any data to a database on the website. When you fill it in and click "Send", your browser opens your default email program with a message already drafted, addressed to info@palmaeventi.com. The email is actually sent from your own email client, not from the website. If you do not complete and send that email yourself, no data is transmitted to us.

WhatsApp

The website also offers direct contact via WhatsApp. Conversations started on WhatsApp are handled according to WhatsApp/Meta's own privacy policy, which you can find on WhatsApp's official website. We have no control over how Meta handles that data, other than the part relating to our direct reply to you.

Why we collect this data

We use the data you provide exclusively to:

• Reply to you and assess your request for information or a consultation
• Prepare better for an initial introductory meeting, if requested
• Provide you with information on our services or training courses, if requested

We do not use your data for marketing purposes without your explicit, separate consent, and we do not sell it or share it with third parties for commercial purposes.

Legal basis for processing

Processing is based on your consent, given when you voluntarily choose to fill in the form or message us on WhatsApp, as well as on our legitimate interest in responding to pre-contractual requests (Art. 6(1)(a) and (b) GDPR).

Data retention

Since the contact form sends data directly to our email inbox via your own email client, we retain the messages we receive for as long as necessary to handle your request and, if a working relationship begins, for the duration of that professional relationship and any subsequent legal obligations (e.g. tax/accounting), after which they are deleted or securely archived.

Third-party services used by this website

The website relies on a few external services to function properly:

• Google Fonts — the website's typefaces (Julius Sans One, DM Sans, Mrs Saint Delafield) are loaded from Google's servers. This involves transmitting the visitor's IP address to Google when the page loads, in accordance with Google's own privacy policy.
• Website hosting — GoDaddy, which processes technical browsing data (server logs) according to its own privacy policy.
• The website may use traffic analysis tools (e.g. Google Analytics) and/or advertising tracking tools. For the full list of cookies used and their purposes, please see our Cookie Policy

Cookies

For detailed information on the cookies used by this website, please see our Cookie Policy

Your rights

At any time, you have the right to:

• Request access to your personal data
• Request that it be corrected or updated
• Request that it be deleted
• Object to processing or request that it be restricted
• Request data portability
• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if you believe the processing violates applicable law

To exercise these rights, you can write to info@palmaeventi.com

To manage cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool "Real Cookie Banner". Details on how "Real Cookie Banner" works are available at https://devowl.io/rcb/data-processing/. The legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is managing the cookies and similar technologies used and the related consents. Providing personal data is not contractually required, nor necessary for entering into a contract. You are not obliged to provide personal data. If you do not provide it, we will not be able to manage your consents.

Changes to this notice

This notice may be updated over time, for example in the event of changes to the website or to applicable regulations. The date of the last update is shown at the top of the page.