Last updated: 21 October 2026. This notice covers visits to fotografiagiove.com and enquiries sent to the studio through this website.
Data controller
The controller is Dalila Giove, trading as Fotografia Giove, Via Saverio Lioce 13, 70124 Bari, Italy, VAT number 08177890723. For privacy enquiries or to exercise your rights, email info@fotografiagiove.com.
Enquiries and quotations
The form collects your name, email address, telephone number, subject and message so that we can respond, check availability and prepare a quotation. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Required fields are marked; you may also use the contact details published on the website. Please do not include health information or other sensitive details that are unnecessary for your enquiry.
Enquiries are stored in the website database and sent to fotografiagiove@gmail.com; the form is configured to send you an acknowledgement. They are handled by Dalila Giove. A hashed version of the IP address is also recorded to protect the form; we do not treat this information as automatically anonymous. We do not use your contact details for newsletters or promotional emails.
How long we keep information
Enquiries that do not lead to a booking are subject to a maximum retention period of 12 months after the last contact, with periodic review and deletion from email accounts and the operational database. If you book, information needed for the contract is retained to fulfil it and meet applicable record-keeping, tax and administrative obligations. Where a dispute arises, necessary information may be retained for as long as required to establish, exercise or defend legal claims.
Backups follow the backup service’s overwrite cycle, so deletion from the operational system may not immediately be reflected in backup copies. Backups are for recovery, rather than routine enquiry management. Previous deletions must be reapplied if data is restored.
Hosting, email and international transfers
Aruba hosts the website and database. It processes information needed to deliver and protect the service under the applicable contract, which includes its appointment as a data processor. Logs may include dates and times, IP addresses, browser details, operations and outcomes; administration logs may also include login details and FTP operations. Aruba states that logs are retained for a maximum of six months for service management, diagnostics and security. For this hosting service, Aruba has stated that data is neither transferred outside the EU nor accessed from non-EU countries. Necessary security processing is based on the legitimate interest in protecting the service (Article 6(1)(f) GDPR).
Our receiving mailbox uses free Gmail. Google processes messages and service data under its Privacy Policy. This is separate from Aruba hosting and may involve processing outside the European Economic Area. Google’s transfer policy describes reliance on adequacy decisions, the Data Privacy Framework for covered transfers and standard contractual clauses where required. This is not a Google Workspace account.
Aruba terms · Google Privacy Policy · Google data transfers
Cookies, browser storage and external services
The website does not integrate advertising or consent-based visitor analytics tools. Reviews, badges, photographs and videos are served by the website; videos play on request. Neither an embedded Google Map nor the external review widget is loaded automatically.
The WhatsApp button uses functional browser session storage (sessionStorage, keys joinchat_views and joinchat_hashes) to manage its message display and remember what has already been shown. This lasts for the tab’s session and is not used by the website for click statistics or profiling. Sign-in pages may use essential WordPress cookies to check cookie support and maintain authentication; these are not needed to browse the public pages.
Links lead to WhatsApp, Google Maps, social networks and photography directories. When you choose to open them, the external service receives the information needed for the connection and its own privacy notice applies. You can manage cookies and site storage through your browser settings. Any future non-essential tracking features will require an updated notice and, where required, a prior consent choice.
Your rights
Subject to Articles 15–22 GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Email info@fotografiagiove.com. You may also complain to the Italian Data Protection Authority (www.garanteprivacy.it). The contact form does not involve automated decision-making or profiling.