This policy applies to the English pages of this website. The Italian pages use Iubenda and their own privacy and cookie notices. Choices on English pages are managed separately from choices on Italian pages.
1. Data controller
Alessandra Villelli Wedding & Events di Villelli Alessandra, Via B. Telesio 52, 88060 Satriano Marina (CZ), Italy, VAT IT03675210797, is the data controller. For enquiries about your personal data, email info@alessandravillelli.it.
2. Data we process
When you contact us, we receive the details you choose to share, such as your name, contact details, wedding or event information and message. The contact form does not submit or store your details on this website’s server: it prepares a message and opens WhatsApp or your email client. You decide whether to send that message. Messages you send are handled in our correspondence and by the messaging or email provider involved.
Clicking a WhatsApp, phone or email link opens the relevant service or application. The service may process your phone number, account details, message and technical information under its own policy. Please avoid sending sensitive personal information unless it is necessary and agreed with us.
Hosting infrastructure processes technical information needed to deliver and protect the website, such as IP address, requested URL, browser information and access or security logs. With your consent, analytics and advertising tools may also process cookie identifiers, IP address, browser or device information, page visits and interaction events. Meta events include PageView, ViewContent on destination and services pages, Contact for WhatsApp, phone or email link clicks, and Lead when you use a contact-form send button after checking the privacy box. Form fields and message contents are not included in these events.
3. Purposes and legal bases
- Replying to enquiries and preparing a proposal: steps at your request before entering into a contract (Article 6(1)(b) GDPR).
- Website delivery, security and essential technical operations: our legitimate interest in operating a secure, accessible website (Article 6(1)(f) GDPR). Necessary consent storage is used to remember your choices.
- Statistics: measuring website use, only with your consent (Article 6(1)(a) GDPR).
- Advertising measurement: measuring visits and enquiries associated with advertising through the Meta Pixel and Google tags, only with your consent (Article 6(1)(a) GDPR).
- Legal obligations: where required, compliance with applicable law (Article 6(1)(c) GDPR).
You do not have to accept statistics or marketing cookies to browse or contact us. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Checking the contact form’s privacy box acknowledges this notice; it does not grant cookie or marketing consent.
4. Providers, recipients and international transfers
We use Replit for website hosting. Enquiries are received through our email service or WhatsApp, depending on your choice. Meta Platforms Ireland Limited provides the Meta Pixel and relevant WhatsApp services; Google Ireland Limited provides Google Tag Manager and related Google measurement services. These providers may act as processors or independent controllers, depending on the service and processing involved.
Google Tag Manager is a tag delivery tool; it loads only if you accept Statistics or Marketing. We send category-specific consent signals to Google: statistics consent enables analytics storage, while marketing consent enables advertising storage and measurement. The Meta Pixel loads only with Marketing consent. Loading a container does not itself authorise every tag inside it: tags must respect your selected category.
Providers may process data outside the European Economic Area, including in the United States. Where applicable, safeguards include an adequacy decision (such as the EU–US Data Privacy Framework for a certified recipient), Standard Contractual Clauses and supplementary measures. You can ask us for information about the applicable safeguards. See Meta’s privacy policy, WhatsApp’s EEA privacy policy, Google’s privacy policy and Replit’s privacy policy.
5. Cookies and similar technologies
Before you choose, and after Reject, the English pages do not load Google Tag Manager or the Meta Pixel. Necessary storage is always enabled. Statistics and Marketing are off by default. Accept all enables both; Customise lets you choose either category separately.
| Cookie / provider | Purpose and category | Duration |
|---|---|---|
| av_consent_en — this website | Necessary. Stores your Statistics and Marketing choices, timestamp and consent-notice version. First-party, whole-site path; used on English pages. | 6 months from your last saved choice. |
| _fbp — Meta | Marketing. Identifies a browser for advertising measurement. | Usually 3 months. |
| fr — Meta (facebook.com) | Marketing. Advertising delivery, measurement and fraud prevention, where Meta sets it and your browser permits it. | Usually 3 months. |
| _ga, _ga_* — Google Analytics via GTM | Statistics. Distinguishes browsers and maintains analytics session state. | Up to 2 years, subject to configuration and browser limits; may renew on use. |
| _gid, _gat / _gat_* — Google, if enabled through GTM | Statistics. Short-lived visitor identification or request throttling; dependent on the deployed tags. | Typically 24 hours (_gid) or 1 minute (_gat). |
| _gcl_au, _gcl_aw, _gcl_dc — Google advertising tags via GTM | Marketing. Advertising attribution and conversion measurement, when the relevant tag and ad interaction apply. | Usually up to 3 months. |
The exact third-party cookies depend on the tags currently configured, your browser settings, whether you have interacted with an advertisement and provider changes. Not every cookie listed is set on every visit. Google Tag Manager itself does not require a visitor-identification cookie. Hosting or security services may use strictly necessary technical storage where required to deliver the site.
6. Retention
We keep enquiry correspondence for the time reasonably needed to respond and manage the potential event or business relationship. If a contract follows, relevant records are retained for the contractual relationship and any legally required retention period, including applicable accounting or tax requirements. Data needed to establish, exercise or defend legal claims may be retained for the relevant limitation period. Technical logs are retained only as needed for operation and security, subject to the hosting provider’s retention rules. Analytics and advertising data are retained according to the relevant provider and account settings; cookie expiry is not the same as server-side data retention. Contact us for details of the retention applying to your information.
7. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction and portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Email info@alessandravillelli.it to exercise your rights. We may need proportionate information to verify your identity.
You may complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the competent supervisory authority where you live or work. We do not use the contact form to make decisions producing legal or similarly significant effects based solely on automated processing.
8. Change your cookie preferences
Use Cookie preferences here or in the footer of any English page. Choose Reject to withdraw both optional categories, or Customise to change them separately, then Save choices. Withdrawing a previously accepted category reloads the page to stop loading the relevant tags. This does not erase data already lawfully sent to providers or necessarily remove their existing cookies. You can also delete cookies through your browser; deleting the consent cookie makes the banner appear again. Your choice expires after six months or when a new consent-notice version requires a fresh choice.