Privacy Policy
Last updated: 27 October 2026
1. Data controller
Facibeni is the wedding photography business operated by Bosch & Posh SRL, VAT number IT01441750450, Italy ("Facibeni", "we", "us"). Bosch & Posh SRL is the data controller for the personal data described in this policy. For any request about your data, write to [email protected].
2. Scope
This policy covers facibeni.com, the emails you exchange with us, the calls you book with us and the services we provide to our clients. It is written under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Italian data protection law.
3. Personal data we process, purposes and legal bases
3.1 Inquiries. When you contact us through the inquiry form or by email, we process your name, email address, country, wedding date, venue, wedding planner, guest count and the content of your message. We use them to reply to you and prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
3.2 Calls. When you schedule a call with us through our booking tool, we process your name, email address and the date and time you select, for the purpose of organising the call (Art. 6(1)(b) GDPR).
3.3 Clients. When you engage us, we process your contact details, contract and invoicing data, payment information and the photographs taken at your wedding, to deliver the service and to meet our accounting and tax obligations (Art. 6(1)(b) and (c) GDPR). Card payments are handled directly by our payment provider: we do not receive or store your full card details.
3.4 Mailing list. Our mailing list currently is not active. Email addresses submitted through the sign-up form are not used for any communication.
3.5 Website use. We collect information on how the site is used (pages visited, approximate location, device and browser type, referring website) through analytics and advertising-measurement tools, in order to understand and improve the site. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
3.6 Internal analysis. We may use software tools, including AI-assisted tools, to organise and analyse inquiries and website statistics for our own business purposes. These tools act on our instructions only and are not used to make decisions about you that produce legal or similarly significant effects.
We do not sell personal data.
4. Recipients
Personal data may be disclosed, to the extent necessary, to the following categories of recipients, acting as processors on our behalf or as independent controllers where required by law:
– website hosting, content delivery and security providers;
– email and productivity service providers;
– web analytics and advertising-measurement providers, including social media platforms whose content is embedded in the site;
– scheduling, payment and online gallery providers;
– software and AI service providers used for internal analysis;
– accountants, tax advisers and public authorities where required by law.
A list of the processors we use is available on request at [email protected].
5. International transfers
Some recipients are located outside the European Economic Area, including in the United States. Where this happens, transfers rely on an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework, or on Standard Contractual Clauses adopted by the Commission.
6. Retention
– Inquiries that do not lead to a booking: 24 months from our last exchange.
– Client and accounting records: 10 years, as required by Italian law.
– Online client galleries: for the period set out in the client contract.
– Website statistics: up to 14 months.
At the end of these periods, data is deleted or anonymised.
7. Security
We apply appropriate technical and organisational measures to protect personal data, including access restricted to the studio and to providers bound by confidentiality and data processing agreements.
8. Photographs
Images of your wedding are published on our website, social media or in the press only as agreed in your contract. To ask for an image to be removed, write to [email protected].
9. Your rights
Under Articles 15 to 22 GDPR you may request access to your data, its rectification or erasure, the restriction of processing, data portability, and you may object to processing based on our legitimate interest. Requests are free of charge and answered within one month. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Cookies and similar technologies
The site uses technical cookies required for it to function and cookies from analytics, advertising-measurement and social media providers. You can block or delete cookies at any time through your browser settings. Blocking technical cookies may affect how the site works.
11. Children
Our services are not directed at people under 16, and we do not knowingly collect their data.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with its date at the top.