Privacy & Cookies Policy

Last updated: 29\12\2025

1) Who we are (Data Controller)

Data Controller: Studio Nove100 \ Federico Zaza
Address: Via Niceneto 51, 00124 Rome, Italy
Email: studio@nove100.com
Phone: +39 392 5410367
VAT / Company ID (if applicable): 10444281009

For any privacy request, contact: studio@nove100.com

2) What data we collect

Depending on how you use the website, we may collect:

Data you provide

  • Enquiry / contact forms: name, email, phone (if provided), event date, venue/location (if provided), budget range (if provided), message content.

  • Newsletter: email address (and name if provided).

  • Clients (if you book us): information needed to deliver photography services (planning details, logistics, deliverables, and billing details where applicable).

Data collected automatically

  • device/browser information

  • pages visited and interactions (events)

  • approximate location (derived from technical signals)

  • referral source

  • cookie identifiers (only for non-essential cookies, and only after consent)

    3) Why we use your data (purposes, legal bases, retention)

    A) Website operation & security (always)

    Purpose: provide the website, ensure stability and security, prevent abuse.
    Legal basis: legitimate interests and technical necessity.
    Retention: technical/security logs for up to 90 days, unless longer retention is required for security or legal obligations.

    B) Enquiries / availability requests (active)

    Purpose: respond to your request, check availability, provide information or a quote.
    Legal basis: pre-contractual steps taken at your request.
    Retention: up to 24 months from the last interaction (or earlier if you request deletion), unless a contract follows.

    C) Newsletter (active)

    Purpose: send newsletter emails (updates, editorial content, and occasional promotional communications).
    Legal basis: your consent (unsubscribe anytime).
    Retention: until you unsubscribe or withdraw consent. We may retain basic consent logs for compliance for up to [5 years].

    D) Analytics (Google Analytics 4 – GA4) (active)

    Purpose: understand website performance and improve content and user experience.
    Legal basis: consent (analytics cookies/identifiers are used only after you accept them via our cookie banner).
    Data processed (examples): pages viewed, interaction events, device/browser information, approximate location, referral source, and cookie identifiers (where applicable).
    Retention: GA4 user-level data retention is set to 2 months (privacy-max).

    E) Marketing / ads / remarketing (ONLY IF ENABLED)

    Purpose: measure conversions and run advertising/remarketing campaigns (e.g., Meta Pixel or similar).
    Legal basis: consent (marketing cookies are used only if you opt in via the cookie banner).
    Note: if these tools are enabled, they may set cookies and collect identifiers to deliver and measure ads. If marketing cookies are disabled, we do not run remarketing from this website.

    F) Photography services (when you become a client)

    Purpose: perform the photography service, edit and deliver images, provide support, manage administration.
    Legal basis: contract performance and legal obligations (e.g., accounting, tax).
    Retention: for the duration of the relationship and then for [10 years] as required by law and legitimate business needs (e.g., dispute management).

    G) Portfolio publication of images (ONLY if agreed)

    Purpose: showcase work on our website and social channels.
    Legal basis: your consent and/or the terms of your agreement (release).
    Retention: until you withdraw consent or for the agreed period. Withdrawal will be honoured within reasonable technical limits.

    4) Cookies and consent

    We use cookies to ensure core website functionality and, if you allow, to measure performance and enable marketing features.

    When you first visit the website, you will see a cookie banner that lets you accept or decline non-essential cookies.
    Non-essential cookies (Analytics and Marketing) are blocked until you give consent.
    You can change your choice at any time using the cookie controls provided by the banner.

    Cookie categories

    • Necessary cookies: required for core features and security.

    • Analytics cookies (GA4): help us understand how the website is used.

    • Marketing cookies (only if enabled): advertising measurement and remarketing.

    5) Who we share data with

    We may share data with trusted providers that help operate the website and services, for example:

    • website platform/hosting (Squarespace)

    • newsletter/email services (Squarespace Email Campaigns or equivalent)

    • analytics (Google Analytics 4)

    • advertising platforms (only if enabled)

    These providers act as processors or independent controllers depending on their role.

    6) International transfers

    Some providers may process data outside the EEA (e.g., in the United States). Where required, transfers rely on appropriate safeguards.

    7) Your rights

    You may request: access, rectification, deletion, restriction, objection, portability, and you may withdraw consent at any time (newsletter unsubscribe and cookie preferences).
    To exercise your rights, contact studio@nove100.com

    8) Complaints

    If you believe your rights are infringed, you may lodge a complaint with your local supervisory authority (Italy: Garante per la protezione dei dati personali).