Legal information
Privacy policy
Cinemarry privacy notice under Articles 13 and, where applicable, 14 of EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Last updated: 25/09/2026 · Version: cinemarry_privacy_v3 of 25/09/2026
*This is a translation. In case of any discrepancy, the Italian version prevails.*
1. Who we are (data controller)
The data controller is:
Impronta Creativa S.n.c. di Fabio Selvaggini e Filippo Cerqueglini
Via Luigi Catanelli 34 — 06135 Perugia (PG), Italy
VAT and tax code: IT03191060544 · Email: privacy@cinemarry.com
Cinemarry is the trading name under which Impronta Creativa produces wedding films. Any reference to «Cinemarry», «we» or «the controller» in this notice means Impronta Creativa.
2. How to contact us about privacy
- Email: privacy@cinemarry.com
- Post: Impronta Creativa — Via Luigi Catanelli 34, 06135 Perugia (PG), Italy
We handle requests within 30 days, unless an extension applies under Article 12 GDPR. Data Protection Officer (DPO): at present the controller considers that the conditions making a DPO mandatory under Article 37 GDPR do not apply.
3. What personal data we process
- 3.1 Identification and contact data: first and last name, phone number, email address, home address, tax code and VAT number where needed.
- 3.2 Event data: date and place of the wedding, schedule of the day, names and contact details of organizers, suppliers, witnesses and venues, and other logistical information provided by the couple or by people they indicate.
- 3.3 Tax, administrative and payment data: data needed for quotes, invoicing, administration and accounting.
- 3.4 Images, audio and video: photographs, video footage and audio recordings made for the service requested by the couple, in which the couple, guests and other people present at the event may be seen or heard.
- 3.5 Browsing data: IP address, technical data about your device and browser, and access logs, processed by the systems that run and secure the website, including the cookie preferences you set in the banner. The website uses no analytics, profiling or advertising pixels.
- 3.6 Data you send us: the website’s pages contain no data collection forms. Quote requests are made through our online quote form (https://cinemarry.com/quote/), an application run by the same controller and linked from the website. You can also contact us by WhatsApp, phone or email. In every case we process the data you choose to give us: contact details, event details and service preferences.
- 3.7 Special categories of data: in organizing and filming an event, processing may incidentally involve data revealing religious beliefs, health data or other special categories under Article 9 GDPR, where strictly relevant to the event or provided by the data subject. Such data is processed only where a valid condition under Article 9 GDPR applies.
4. Why we process your data
| Purpose | Legal basis | Data | Provision | |
|---|---|---|---|---|
| A | Handling requests for information and quotes (quote form, WhatsApp, phone, email) | Art. 6(1)(b) GDPR — pre-contractual steps at your request | § 3.1, 3.2, 3.6 | Optional, but needed for us to reply |
| B | Entering into and performing the video service contract | Art. 6(1)(b) GDPR — performance of a contract | § 3.1, 3.2, 3.3, 3.4 | Needed for the contract |
| C | Tax, accounting and administrative obligations | Art. 6(1)(c) GDPR — legal obligation | § 3.1, 3.3 | Mandatory as required by law |
| D | Producing the audiovisual service at the event | Art. 6(1)(b) GDPR; where applicable Art. 6(1)(f) for organizational, documentary and security needs of the service | § 3.2, 3.4 | Needed for the service |
| E | Processing any special categories of data relating to the event | Art. 9(2)(a) GDPR or another Article 9 condition, where needed | § 3.7 | Only where genuinely relevant and necessary |
| F | Publishing images or video excerpts for promotion, portfolio, website or social media | Art. 6(1)(a) GDPR — specific, free, informed and revocable consent, where required | § 3.4 | Optional; refusing does not affect the main service |
| G | Keeping the master files and production archive | Art. 6(1)(f) GDPR — legitimate interest in the technical and documentary retention of our work, proportionate and subject to your right to object; where needed, Art. 6(1)(a) | § 3.4 | Limited to what is necessary |
| H | Newsletters, marketing communications and offers | Art. 6(1)(a) GDPR — consent, except where «soft spam» is permitted by law | § 3.1 | Optional |
| I | Managing relationships with collaborators, freelance videographers and suppliers | Art. 6(1)(b) GDPR | Identification, contact, administrative and professional data | Needed for the relationship |
| J | Website operation and security, abuse prevention, recording cookie preferences | Art. 6(1)(f) GDPR — legitimate interest in system security; Art. 6(1)(c) for proof of consent | § 3.5 | Automatic, limited to technically necessary data |
| K | Establishing, exercising or defending legal claims | Art. 6(1)(f) GDPR and other applicable provisions | Only relevant data | As needed for the purpose |
5. Photos, video footage and image rights
As Cinemarry’s core business is producing audiovisual works, processing images, video and audio is an essential part of the service requested by the couple.
5.1 Filming during the event — Footage may include the couple, guests, witnesses, suppliers and others present. Filming is carried out as part of organizing and delivering the service requested by the couple, in a way proportionate to the nature of the event.
5.2 Informing people at the event — Couples are asked to let their guests know in advance that a videographer and a photographer will be present. Where appropriate, the controller may also use other means, such as signs, notices or short information sheets at the venue.
5.3 Promotional use of images — Any use of images or video for promotion, portfolio, website, social media, fairs or marketing materials takes place only on a valid legal basis under the GDPR and, where required, with the specific consent of the person concerned or another valid legal condition.
5.4 Image rights — Articles 96 and 97 of Italian Law no. 633 of 22 April 1941 on portraits and image rights remain applicable. They operate alongside data protection law and do not replace the need for a proper GDPR legal basis.
5.5 Children — Images of identifiable children are not published for promotional purposes without the consent of those with parental responsibility, where required by law.
6. Special categories of personal data
In the course of the service, data revealing religious beliefs, health data or other special categories may emerge incidentally and to a limited extent. It is processed only where genuinely necessary and where one of the conditions of Article 9 GDPR applies.
7. How long we keep data
| Data | Retention | Reason |
|---|---|---|
| Quote requests not followed by a contract | 24 months from collection or last useful contact | Commercial and organizational management |
| Client contract and administrative data | For the duration of the relationship, then within applicable limitation periods | Managing the relationship and protecting our rights |
| Invoices and accounting records | 10 years or other period required by law | Tax and accounting obligations |
| Master files and delivered final materials | As long as reasonably necessary for technical management, possible re-delivery and protection of our work; specific consent may be requested for further uses | Technical and documentary archiving, after-delivery support |
| Unselected raw footage | 12 months from delivery of the final product, unless technical needs or disputes require otherwise | Minimization and technical management |
| Emails, WhatsApp messages and operational communications | 36 months from the end of the relationship, unless further justified | After-sales support and communication history |
| Technical logs and browsing data | 12 months, unless different periods are needed for security or legal claims | IT security |
| Cookie preferences and proof of consent | 180 days (consent validity in the banner), after which the banner reappears | Managing privacy preferences |
When retention periods end, data is deleted, anonymized or kept only as permitted by law.
8. Transfers outside the European Economic Area
Some providers may involve transfers of personal data outside the EEA:
- Dropbox, for storage, backup and file transfer;
- Meta Platforms Ireland Ltd., for our social media channels (Facebook, Instagram), and WhatsApp Ireland Ltd. if you choose to message us on WhatsApp;
- Google (YouTube) and Vimeo, only if you choose to watch an embedded video (see the Cookie notice).
The website does not use Meta tracking tools (such as the Meta Pixel) or Google analytics. Fonts are served from our own server, with no requests to Google Fonts. Transfers take place in line with Chapter V GDPR (adequacy decisions, standard contractual clauses or other appropriate safeguards). Write to privacy@cinemarry.com for more information.
9. Who we share your data with
- 9.1 Internal staff and authorized persons: partners, employees and collaborators authorized and instructed by the controller.
- 9.2 Processors (Art. 28 GDPR):
- Dropbox;
- the hosting and IT provider of the website and the quote form (provider with servers in the European Union);
- administrative, tax and legal advisers.
- 9.3 Independent controllers:
- Meta Platforms Ireland Ltd. and WhatsApp Ireland Ltd., limited to the use of their platforms;
- Google Ireland Ltd. (YouTube) and Vimeo, only for the videos you choose to watch;
- public authorities and parties to whom disclosure is required by law.
We do not sell personal data or pass it to third parties for their own marketing.
10. Your rights
Under Articles 15–22 GDPR you have the right to access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of any consent given. To exercise them, write to privacy@cinemarry.com. We may ask for information needed to verify your identity (Art. 12 GDPR).
Supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy · protocollo@gpdp.it · PEC protocollo@pec.gpdp.it · https://www.garanteprivacy.it
11. Children
Cinemarry’s services are not aimed at children. However, children may appear among the guests at the events we film. Such images are processed with particular care and in line with applicable law.
12. Cookies and similar technologies
The website uses only technical cookies and, if you accept them, video content from YouTube and Vimeo. It uses no analytics or profiling cookies. Details are in the Cookie notice, and you can change your choices at any time from the «Cookie preferences» link in the footer.
13. Data security
The controller applies appropriate technical and organizational measures under Article 32 GDPR, taking into account the state of the art, implementation costs, the nature of the data and the risks to people’s rights and freedoms:
- secure HTTPS/TLS connections;
- controlled access management;
- backups and business continuity measures;
- system monitoring and security measures;
- internal procedures for handling personal data breaches.
14. Changes to this notice
This notice may be updated over time to reflect legal, organizational or technological changes. The current version is published on this page with its last-updated date.
15. Applicable law and disputes
Personal data processing is governed by EU Regulation 2016/679, Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and other applicable Italian and EU provisions. For any dispute, the jurisdiction established by law applies. Where the data subject is a consumer, the protections and jurisdiction rules of applicable consumer law apply.