Legal

Privacy & Cookie Policy

1. Data Controller

Toghrul Nabiyev (Toghrul Nabi) VAT no. (P.IVA) 13236790013 Via Plava 79, 10135 Turin, Italy Email: nabiyevtoghrul@gmail.com For any privacy-related request, write to the email address above.

2. Data We Collect

Contact form: your name, email address, phone number, event date and location, the service and package you are interested in, guest count, budget range, venue, wedding planner, Instagram, country, how you heard about us, and your message. Name, email and message are needed to reply to you; the other fields are optional. With each enquiry the site also sends the page where you first arrived and, if you came from another website, that website's name. If you came through an ad or campaign link, its tracking parameters (such as utm_source, gclid or fbclid) are sent too. Newsletter: your email address. Guide download: your first name and email address, and whether you asked for the newsletter. When you browse the site, your IP address and basic browser data are processed by the providers that host the site and play its films (see section 5). Statistics are collected only if you accept analytics cookies, and ad measurement only if you accept marketing cookies (see section 8).

3. How Your Data Is Used

To reply to your enquiry and prepare a quote
To organise and deliver the photography and/or film services you book
To send occasional emails with new stories and open dates, if you joined the newsletter
To understand how the site is used through statistics, only if you accept analytics cookies
To see which ads and websites bring enquiries, from the link details sent with your enquiry
To measure the results of our Facebook and Instagram ads with the Meta Pixel, only if you accept marketing cookies

4. Legal Basis (GDPR)

Pre-contractual measures and contract (Art. 6(1)(b) GDPR): replying to enquiries, preparing quotes and managing bookings
Consent (Art. 6(1)(a) GDPR): newsletter, analytics cookies (Google Analytics, Microsoft Clarity) and marketing cookies (Meta Pixel); you can withdraw it at any time
Legitimate interest (Art. 6(1)(f) GDPR): running the website securely, showing its photos and films, and knowing which campaigns bring enquiries
Legal obligation (Art. 6(1)(c) GDPR): keeping contracts and invoices as Italian tax law requires

5. Who Receives Your Data

We do not sell your personal data. Besides us, it is processed only by these service providers, for the purposes above:

Netlify, Inc. (USA): website hosting and the contact and newsletter forms. Form messages are checked for spam by Akismet (Automattic Inc., USA), Netlify's spam filter.
Google LLC (USA): Gmail, where form messages arrive; Google Analytics 4, only with your consent.
Vimeo.com, Inc. (USA): plays the films embedded on the site.
Meta Platforms Ireland Ltd (Ireland) and Meta Platforms, Inc. (USA): the Meta Pixel, only with your consent to marketing cookies, to measure the results of our ads on Facebook and Instagram. For the data collected through the Pixel, we and Meta are joint controllers (Meta Controller Addendum).

These providers may process data in the United States. Netlify, Google, Vimeo, Meta Platforms and Microsoft are certified under the EU-US Data Privacy Framework, which the European Commission recognised as providing adequate protection (Decision (EU) 2023/1795 of 10 July 2023).

6. How Long Data Is Kept

Enquiries: up to 3 years from our last contact. If you book, the contract and invoices are kept for 10 years, as Italian law requires. Newsletter: until you unsubscribe. Statistics: up to 14 months. You can ask for deletion at any time, except for data the law requires us to keep.

7. Your Rights

Under the GDPR you have the right to:

Access your personal data
Correct inaccurate data
Request erasure (“right to be forgotten”)
Request restriction of processing
Receive your data in a portable format
Object to processing
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, write to nabiyevtoghrul@gmail.com.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Cookies and Similar Technologies

The site stores only what it needs, and turns on analytics and ad measurement only with your consent:

tn_analytics_consent and tn_marketing_consent (this site, local storage): remember your cookie choices. Technical, always on.
tn_lang (this site, local storage): remembers the language you pick. Technical, always on.
_ga and _ga_8RPSH6TV00 (Google Analytics cookies): statistics on how the site is used. Set only after you accept; they last up to 2 years.
_clck and _clsk (Microsoft Clarity cookies): anonymous visit recordings and heatmaps that show how the site is used; form fields are masked. Set only after you accept; they last up to 1 year.
Vimeo player (vimeo.com): plays the films with Do Not Track on, so Vimeo sets no tracking cookies. Its security service may set technical cookies such as __cf_bm.
_fbp, _fbc and fr (Meta Pixel, marketing): measure which visits come from our Facebook and Instagram ads. Set only after you accept marketing cookies; they last up to 3 months.