Privacy Policy

Last updated: 7 October 2026

This Privacy Policy explains how personal data is processed when you visit this website, contact us or use the services of Efffetti. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Italian data protection rules (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018).

1. Data controller

The data controller is Francesca Fantoni, sole trader, VAT No. 07679920962, Italy, trading as Efffetti Wedding in Tuscany.

Email: info [at] efffetti.com

We have not appointed a Data Protection Officer, as it is not required for our activity.

2. Personal data we process

Depending on how you interact with us and on the service you request, we may process:

• names and surnames, email address and, if you give it to us, telephone number;
• nationality and country of residence;
• information about your wedding: date, place, type of ceremony, number of guests, services you are interested in, and anything you choose to tell us;
• for translations, wedding paperwork or other official procedures you ask us to help with: identity or passport details, date and place of birth, marital status and the documents to be translated or presented (for example birth certificates, Certificates of No Impediment, Nulla Osta, divorce decrees or marriage certificates);
• contract, invoicing and payment information;
• the messages we exchange;
• technical data generated when you visit the website (for example IP address, browser and device type), as described in section 10.

We only ask for the data that is reasonably necessary for the purpose concerned. Please do not send health information, criminal records or other particularly sensitive data unless they are specifically required for a service you have asked for.

3. Information you give us about other people

To plan and run your day we need details about people who have not written to us themselves: your guests, your parents, your witnesses, and sometimes a friend who is helping. That information comes from you, not from them, which is why we set out here what we do with it.

We use it only to run the day you have asked us to run: the seating, the order of the ceremony, the numbers the caterer and the venue need, and the list of who is expected. Each supplier receives only the part that concerns them. Dietary requirements reach us as numbers, never as lists of names, so we hold no health information about your guests. We never use these names to contact anyone, and never for marketing.

We hold this information on the basis of our legitimate interest in carrying out the service you have asked us for (Article 6(1)(f) GDPR), and we tell you about it here because the people concerned did not give it to us themselves (Article 14 GDPR). We keep it for as long as we keep your wedding file, and no longer.

Please let the people on your lists know that we hold their names for this purpose, and that they can write to us to ask what we hold about them, to have it corrected or to have it removed. If someone would rather not appear on a list we hold, tell us and we will keep them as a number instead of a name.

4. Enquiries and quotations

When you fill in one of our forms, write to us or otherwise ask for information, we use the data you provide to reply, understand what you need and send you information or a quotation. If your request concerns services handled by our planning and paperwork team (WeddingInTuscany.info) or by our celebrant team (MyWeddingInItaly.info), we may forward it to the team that handles that service, only so that they can reply to you.

Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Fields marked as required in our forms are necessary to answer your request; without them we cannot reply. Optional fields are up to you.

We do not use your details for newsletters or marketing, and we never sell or rent personal data.

5. Clients: translations, paperwork and related services

If you book our services, we process your data to provide them - for example certified or sworn translations, interpreting, assistance with wedding paperwork or coordination - to manage the contract and our communications with you, and to issue invoices and keep our accounts.

Legal basis: performance of the contract (Article 6(1)(b) GDPR) and, for invoicing, accounting and tax records, compliance with legal obligations (Article 6(1)(c) GDPR).

6. Translations, sworn translations and official procedures

To translate your documents, have a translation sworn before an Italian court (asseverazione), arrange legalisation or an Apostille, or help with a civil wedding, we receive and handle documents such as passports, birth certificates, Certificates of No Impediment, Nulla Osta and other civil-status documents.

Only where necessary to carry out the service you requested, and only to the extent necessary, these data may be communicated to Italian courts and prefectures, municipalities and civil-status offices, Italian or foreign consulates and embassies and other competent public authorities, to the translators and interpreters who work on your documents, and to the courier companies that deliver the originals or the sworn translations to you or to the town hall.

Copies of documents used only for these purposes are normally deleted within 180 days after the procedure is completed, unless further work, a pending procedure, a dispute or a legal obligation requires us to keep them longer.

7. Photographs

We do not publish photographs in which you are identifiable on this website or on our social media on the basis of the contract alone. Publication only takes place with your consent, which is voluntary and separate from our services, and can be withdrawn at any time for future use by writing to us. Where reasonably possible, we will then remove the material from the channels we control.

8. Who receives your data

Your data is accessible only to the people who need it: Francesca Fantoni and the collaborators who work on your request or service (for example translators, interpreters or coordinators), who act on our instructions. Where needed, data may also be communicated to:

• the public authorities, translators, interpreters and courier companies described in section 6;
• our planning and paperwork team (WeddingInTuscany.info) or our celebrant team (MyWeddingInItaly.info), when your request concerns their services;
• our accountant or tax advisor, for invoicing and tax obligations;
• banks and payment service providers used to make or receive payments (bank transfer, PayPal, Revolut). These providers process payment data as independent data controllers under their own privacy policies;
• other parties involved in your wedding (for example your wedding planner or venue), only when you ask us to coordinate with them.

We also use the following service providers, which process data on our behalf as data processors under their data-processing terms:

• InMotion Hosting (USA) - website hosting, including form submissions stored on the website;
• Cloudflare (USA) - website delivery network and security, including Cloudflare Turnstile, which protects our forms from spam without cookies used for advertising or profiling;
• SMTP2GO (New Zealand) - delivery of the emails sent by the website forms;
• Google (USA) - email (Gmail), document storage (Google Drive) and, only if you accept statistics cookies, Google Analytics;
• Dropbox (USA) - storage and sharing of documents and files;
• Ahrefs (Singapore) - privacy-friendly website statistics that do not use cookies (see section 10);
• the WordPress software and plugins that run the website on our own hosting, including our backup and security tools.

9. Transfers outside the European Economic Area

Some of the providers listed above may process data outside the European Economic Area. In that case data is transferred only on the basis of a mechanism allowed by Chapter V GDPR: an adequacy decision of the European Commission (for example for New Zealand, or for US companies certified under the EU-US Data Privacy Framework), the Standard Contractual Clauses approved by the European Commission, or another legally recognised safeguard.

When you ask us to deliver documents or translations to an authority outside the European Economic Area (for example a consulate or a registry office in your home country), the transfer is necessary to carry out the service you requested (Article 49(1)(b) GDPR).

10. Website visits, cookies and statistics

When you browse this website, our hosting and security providers process technical data such as your IP address and browser information, to deliver the pages and protect the website against abuse. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

We measure visits with Ahrefs Web Analytics, which works without cookies and does not store personal data that identifies you. Legal basis: legitimate interest in understanding, in aggregate, how the website is used.

Non-essential cookies, such as those of Google Analytics, are only activated if you accept them in the cookie banner. You can change your choice at any time with the "Manage consent" button.

When you submit a form, your IP address is recorded to prevent spam and deleted after 30 days, and Cloudflare Turnstile checks that the form is sent by a person and not by an automated program. Legal basis: our legitimate interest in protecting the website and our inbox from spam and abuse (Article 6(1)(f) GDPR).

11. How long we keep your data

• Enquiries that do not lead to a booking: up to 36 months from our last meaningful contact, then deleted or anonymised. Form submissions stored on the website are deleted automatically after 36 months.
• Your wedding file (everything we use to plan and run the day): 3 years from the date of the ceremony, then deleted.
• Invoices, contracts and accounting records: 10 years, as required by Italian law (Article 2220 of the Civil Code).
• Copies of documents for translations and official procedures: up to 180 days after the procedure is completed, with the exceptions described in section 6.
• Photographs published with consent: until you withdraw your consent or they are no longer used.
• Data connected with a dispute: for as long as necessary to manage it and any related legal claims.

12. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including individual accounts with two-factor authentication, restricted access to documents, encrypted connections (HTTPS), regular updates and backups, and deletion of documents once they are no longer needed. No method of transmission or storage is completely secure, but we work to keep risks as low as possible.

Your wedding file is kept in a booking system of our own, reachable only with a personal account protected by a password and a second code. The professionals who work with us on your wedding are independent, not our employees: they see only the weddings they have been given, and each of them is responsible for how they handle the data they receive.

13. Your rights

Under Articles 15-22 GDPR, and within the limits set by the law, you have the right to:

• know whether we process your data and obtain access to it;
• have inaccurate or incomplete data corrected;
• have your data deleted, where the legal conditions are met;
• restrict processing or object to it, where applicable;
• receive your data in a portable format, where the right to portability applies;
• withdraw your consent at any time, where processing is based on consent.

Exercising your rights is free of charge. A deletion request does not oblige us to delete data we must keep by law or that we need to establish, exercise or defend legal claims.

To exercise your rights, write to info [at] efffetti.com. We may ask for information to verify your identity, and we reply within one month.

14. Complaints

You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it). You may also contact the authority of the EU country where you live or work.

15. Automated decisions

We do not take decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.

16. Changes to this policy

We may update this Privacy Policy when our services, tools or the law change. The current version is always published on this page, with the date of the last update at the top.