Privacy
notice

Last updated: 10 September 2026

This notice explains how personal data is processed for people who visit guastinistyle.com, who write to us, who request a first appointment, and who entrust us with the planning of their wedding or private event. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1 · Who processes your data

The data controller is Guastinistyle di Stefania Guastini, with registered office at Via XXV Aprile 23, 21020 Monvalle (VA), Italy, VAT number 03367760125, certified email (PEC) guastinistyle@pec.guastinistyle.com.

For any matter concerning your data, write to info@guastinistyle.com.

Data Protection Officer: none has been appointed, as the conditions of Art. 37 GDPR do not apply.

2 · What data we process

2.1 Data you give us

• “Request a first appointment” form: names, email address, type of event and — if you choose to share them — season, place, number of guests, budget horizon, the free text in which you describe how you imagine the day, and how you found us.
• Correspondence: the content and contact details of emails, messages and calls exchanged with us.
• During an engagement: identification and contact data needed for the contract, invoicing and tax obligations; payment data; organisational information about the day.

2.2 Third-party data you pass to us

While planning, you may pass on data about other people — guests, relatives, witnesses, your own suppliers — such as names, contact details, seating or travel requirements.

In these cases you act as an independent controller for that data and undertake to inform those individuals that their data has been shared with us for the organisation of the event, referring them to this notice. We process it solely for the agreed organisational purposes and retain it for the period stated in § 6.

2.3 Special categories of data (Art. 9 GDPR)

Planning a wedding may involve data revealing health (allergies, food intolerances, accessibility needs) or religious beliefs (the chosen rite), relating to you or your guests. We process such data only if you provide it, exclusively to make the service possible, on the basis of your explicit consent (Art. 9.2.a GDPR), which you may withdraw at any time. We use it for no other purpose and disclose it only to the suppliers who need it for their part of the work (kitchen, catering, styling).

2.4 Data collected automatically

• Browsing data: the systems running the site record, for technical and security reasons, IP address, date and time of the request, page requested, browser type and operating system. This is not linked to other data and is not used to identify you.
• Enquiry context: together with the form we collect the referring page and, where present in the link, campaign parameters (utm). These help us understand which channels work.
• Cookies and measurement tools: described in the cookie policy. The site uses technical cookies only; no measurement tool is installed.

3 · Why we process data, and on what legal basis

• To answer your enquiry and arrange a first meeting. Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• To carry out the engagement, coordinate suppliers and venues, manage timing and the unexpected. Legal basis: performance of the contract (Art. 6.1.b GDPR).
• To process health needs or religious beliefs necessary to the service. Legal basis: your explicit consent (Art. 9.2.a GDPR).
• To meet tax, accounting and legal obligations. Legal basis: legal obligation (Art. 6.1.c GDPR).
• To establish or defend a legal claim, where necessary. Legal basis: legitimate interest in asserting or defending our rights (Art. 6.1.f GDPR).
• To measure the site in aggregate form and understand which channels bring you to us. This processing is not active: we use no statistics tool. Should we activate one, it will happen only with your consent (Art. 6.1.a GDPR), withdrawable at any time, and we will say so here and in the cookie policy before we begin.
• To publish photographs and accounts of your wedding on our website or channels. Legal basis: your specific, separate consent (Art. 6.1.a GDPR), collected apart from this notice and withdrawable.

4 · If you do not provide the data

Name and email are necessary for us to reply: without them the enquiry cannot be answered. Event type and how you found us help us prepare the meeting. All other form fields are optional and leaving them empty does not affect our reply. During an engagement, identification and tax data are required by law: without them the relationship cannot continue.

5 · How we process data

Processing is carried out using IT tools and, marginally, on paper, with technical and organisational measures appropriate to the risk, within the meaning of Art. 32 GDPR. We carry out no automated decision-making and no profiling within the meaning of Art. 22 GDPR.

6 · How long we keep data

• Enquiries that do not lead to an engagement: 24 months from the last contact, then deleted.
• Contractual and organisational data: for the duration of the relationship and the following 10 years, the ordinary limitation period and the retention period for accounting records (Art. 2220 Italian Civil Code; Art. 22 Presidential Decree 600/1973).
• Tax documents: 10 years from registration.
• Guest and third-party data: up to 12 months after the event, unless otherwise agreed.
• Special categories (§ 2.3): up to 12 months after the event, together with guest data, and in any case no longer than they are needed for the service.
• Browsing data: for the time strictly necessary for technical and security purposes, according to the hosting provider’s retention policy, save for the investigation of offences.
• Images published with consent: until consent is withdrawn, and in any case no longer than the life of the channel on which they appear.

Once these periods expire, data is deleted or irreversibly anonymised.

7 · Who can see the data

Data is processed by the controller and by persons authorised and instructed under Art. 29 GDPR. It may also be disclosed to:

• Suppliers appointed as processors under Art. 28 GDPR, under written agreement: Register.it, based in Italy, which provides both website hosting and form collection and email; the tax and accounting adviser; IT consultants.
• Event suppliers — venues, caterers, florists, photographers, musicians, transport companies — limited to the data needed for their service. Depending on the role they play, they act as independent controllers or as processors.
• Authorities and public bodies, where required by law.

We do not sell, transfer or disclose your data to third parties for marketing purposes. An up-to-date list of processors is available on request by writing to info@guastinistyle.com.

8 · Transfers outside the European Economic Area

As things stand, this website does not transfer personal data outside the European Economic Area. The typefaces are served from our own domain and not by an external service; no measurement tool is active; the pages embed no third-party content — towards Instagram you will only find links to our profile, which open only if you choose to follow them.

The data you send through the form stays on the server that hosts the site and is delivered to the mailbox info@guastinistyle.com: both services are provided by Register.it, based in Italy, appointed as data processor under Art. 28 GDPR.

Should we in future activate measurement tools or other services involving a transfer outside the EEA, this section will be updated before they are activated, and the processing will in any case be subject to your consent.

9 · Your rights

In relation to your data you may exercise at any time the rights set out in Articles 15 to 22 GDPR:

• access — to know what data we process and obtain a copy (Art. 15);
• rectification — to correct inaccurate data or complete incomplete data (Art. 16);
• erasure — to have data removed, in the cases provided for (Art. 17);
• restriction — to require that data be stored only and not otherwise processed (Art. 18);
• portability — to receive the data in a structured, machine-readable format, or have it transmitted to another controller (Art. 20);
• objection — to object to processing based on legitimate interest (Art. 21);
• withdrawal of consent — at any time, without affecting the lawfulness of processing carried out beforehand (Art. 7.3).

To exercise them write to info@guastinistyle.com, stating the right you wish to invoke. We reply without undue delay and in any case within one month of receipt, extendable by two months in particularly complex cases, of which we will inform you. Exercising your rights is free of charge.

If you believe the processing infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garante@gpdp.it — garanteprivacy.it), with the supervisory authority of your habitual residence, or bring proceedings before the courts.

10 · Children

The site is not directed at children under 14 and we do not knowingly collect their data. Data relating to children that may be shared during planning — for instance in a guest list — is processed under the responsibility of those holding parental authority.

11 · Updates

This notice may be updated to reflect changes in law or in our organisation. The version in force is always published on this page, with the date of last update. Should we process your data for purposes other than those stated here, we will let you know before doing so (Art. 13(3) GDPR).