Privacy notice

This is a translation; in case of discrepancy the Italian version prevails.

Last updated: 19 October 2026

This page explains what personal data the website fotocarrino.it collects, why it collects it and what you can do about it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).

Who the data controller is

CARRINO FRANCESCO, sole proprietorship, trading as “Carrino Francesco Fotografo”
Lungomare Cristoforo Colombo 293, 84129 Salerno (SA), Italy
VAT no. 02731870651 · REA SA-239315
Phone +39 328 139 3877 · Email info@fotocarrino.it · PEC (certified email) carrino.francesco@pec.it

No data protection officer (DPO) has been appointed, because it is not required for this business.

What data we process

Data you send us

When you fill in the quote request form or write to us by email or phone: first and last name, phone number, email address, date and place of the wedding, approximate number of guests and the text of your message. Please do not include in your message sensitive data (for example about health) that is not needed to prepare the quote.

Technical browsing data

Like every website, the server automatically records some technical data: IP address, date and time of the request, page requested, browser type and operating system, referring page. This data is used to make the site work and to protect it from abuse.

Visit statistics

When you open a page, a script on the site tells our server which page you are viewing, which site you came from (for example Google or Instagram), whether you are using a phone, a tablet or a computer and, if you tap them, that you clicked on the phone number, WhatsApp, the email address or our social profiles. We do not use cookies or any other tool that stores information on your device, and we do not keep your IP address. To count how many different people visit the site in a day we calculate a code from your IP address and browser, mixed with a random value that changes every day and is then deleted: the code cannot be traced back to you and cannot recognise you on the following days. Visits by the people who manage the site are not counted.

Why we process it and on what legal basis

• Replying to your request and preparing a quote: processing is necessary for pre-contractual measures taken at your request (Art. 6(1)(b) GDPR). Without this data we cannot reply to you.
• Complying with legal obligations, for example tax and accounting obligations if the request becomes a contract (Art. 6(1)(c) GDPR).
• Site security and prevention of abuse (spam, attempts at unauthorised access): legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Visit statistics, in aggregate form, without cookies and without identifying individual visitors: legitimate interest of the controller in understanding which pages are useful and how to improve the site (Art. 6(1)(f) GDPR). The statistics stay on the site’s server and are not shared with anyone.

We do not use your data for newsletters or advertising unless you expressly ask us to. We do not carry out profiling and we do not take automated decisions that concern you.

How long we keep it

• Quote requests not followed by a contract: 24 months from the last contact, after which we delete them.
• If we sign a contract: for the whole duration of the relationship and then for the period required by law for tax and accounting records (normally 10 years).
• Technical server logs: for a short period, normally no longer than a few weeks, unless they are needed to investigate an abuse.
• Visit statistics: 25 months, then they are deleted automatically.
• Database backups (encrypted): no longer than 90 days, then they are deleted automatically.

Who we share the data with

The data is not sold or transferred. Only the essential technical providers process it on our behalf, as data processors:

• Aruba S.p.A., the hosting provider, with servers in Italy.
• Cloudflare, Inc., which delivers the site’s images. Cloudflare may process technical data (such as the IP address) outside the European Union too; the transfer takes place with the safeguards provided by the GDPR (European Commission Standard Contractual Clauses and/or participation in the EU-US Data Privacy Framework).
• The email service provider we use to receive and send messages.
• Our accountant, only for the data needed for tax obligations in the event of a contract.

Your rights

At any time you can ask us to:

• know what data we hold about you and get a copy of it (access, Art. 15);
• correct it (rectification, Art. 16) or delete it (erasure, Art. 17);
• restrict its processing (Art. 18);
• receive it in a machine-readable format (portability, Art. 20);
• object to processing based on legitimate interest (objection, Art. 21).

Just write to info@fotocarrino.it or to the PEC address carrino.francesco@pec.it. We reply within one month.

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

Cookies

The site does not use profiling cookies or third-party cookies. The details are on the Cookies page.

Changes

If we change the way we process data, we update this page and the date at the top.