Privacy Policy
Last updated: September 2026

1. Who we are

This website is operated by Lucilla Bellini, a portrait photographer based in Florence, Italy.
For the purposes of the General Data Protection Regulation (GDPR), Lucilla Bellini is the data controller of the personal data collected through this website.

You can contact us at:
Email: portraits@lucillabellini.net

2. What personal data we collect and why

We collect and process personal data only when it is necessary to provide our services, respond to your requests, or improve your experience on this website.

2.1 Information you provide directly

When you contact us through the website (contact form, booking form, email, or direct messages), we may collect:

  • Name and surname

  • Email address

  • Phone number (optional)

  • Message content and details about your photography request (type of session, preferred dates, location, etc.)

  • Any additional information you choose to share (for example, details about family members or children for a family or maternity session)

Purpose: To respond to your inquiry, discuss your project, organize and deliver photography sessions, and provide related services (editing, galleries, prints, etc.).
Legal basis: Performance of a contract (or steps taken at your request prior to entering a contract) and, where applicable, your explicit consent.

2.2 Technical information collected automatically

When you visit this website, our systems may automatically collect certain technical data, including:

  • IP address

  • Browser type and version

  • Operating system

  • Referring website (if any)

  • Pages visited on our site, date and time of access

  • Approximate location (derived from IP address)

This information is used to ensure the security and proper functioning of the website, to detect and prevent abuse, and to understand how visitors use the site in order to improve its content and structure.

Legal basis: Our legitimate interest in maintaining a secure, functional, and continuously improving website.

2.3 Cookies and similar technologies

We use cookies and similar technologies to:

  • Ensure the basic functionality and security of the website

  • Understand how visitors interact with the site (analytics cookies)

  • Provide a personalized experience and, where applicable, support marketing activities

Some of these cookies are strictly necessary for the website to work. Others (such as analytics and marketing cookies) are used only if you give your explicit consent through our cookie banner.

You can manage your cookie preferences at any time via the cookie settings link in the footer of the website. For more details, please see our Cookie Policy.

3. How we use your personal data

We use your personal data to:

  • Respond to your inquiries and requests for information

  • Organize, plan, and deliver photography sessions and related services

  • Communicate with you about your project, scheduling, deliverables, and any updates or changes

  • Send administrative information (for example, booking confirmations, invoices, or updates to our terms and policies)

  • Improve the website and our services through anonymized or aggregated analytics

  • With your explicit consent, send newsletters or promotional communications about upcoming sessions, offers, or events

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Who we share your data with

We do not sell your personal data. We may share your data with carefully selected third parties who help us operate the website and deliver our services, always in compliance with applicable data protection laws.

These may include:

  • Hosting provider: Our website is hosted on servers located in the European Union (Aruba, Italy). The hosting provider processes data on our behalf as a data processor.

  • Email and communication tools: Services used to send and receive emails or messages related to your requests and bookings.

  • Analytics providers: Tools such as Google Analytics, used only if you have given your consent via the cookie banner, to understand how visitors use the site in an anonymized or pseudonymized form.

  • Social media platforms: When you interact with our social media pages or embedded content (for example, Instagram or Facebook), those platforms may collect data according to their own privacy policies.

  • Professional advisors: Accountants, lawyers, or other advisors, where necessary to comply with legal or contractual obligations.

All third parties are required to process your data only on our instructions and to implement appropriate security measures. Where applicable, we have signed Data Processing Agreements (DPAs) with these providers.

5. International data transfers

Our website is hosted on servers located within the European Union. In principle, your personal data is processed inside the EU.

If, in the future, we need to work with service providers located outside the EU, we will ensure that appropriate safeguards are in place (for example, Standard Contractual Clauses approved by the European Commission) and that your rights remain protected in line with GDPR requirements.

6. How long we keep your data

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

  • Inquiry and booking data: Generally kept for the duration of our professional relationship and for a reasonable period afterwards (for example, to handle follow-up questions, provide additional services, or comply with tax and accounting obligations).

  • Technical and analytics data: Retained for a limited period necessary for security, troubleshooting, and statistical analysis, often in anonymized or aggregated form.

  • Newsletter and marketing data: Kept until you withdraw your consent or unsubscribe.

When data is no longer needed, it is securely deleted or anonymized so that it can no longer be linked to you.

7. Your rights under the GDPR

As a data subject, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.

  • Right to rectification: You can ask us to correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”): You can request the deletion of your personal data in certain circumstances.

  • Right to restriction of processing: You can ask us to limit the way we use your data in specific situations.

  • Right to data portability: You can request your data in a structured, commonly used, and machine-readable format, or ask us to transmit it to another controller where technically feasible.

  • Right to object: You can object to certain types of processing, such as direct marketing or processing based on legitimate interests.

  • Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, please contact us at privacy@lucillabellini.net. We will respond within one month, as required by law.

If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you reside, work, or where the alleged infringement occurred.

8. Security of your data

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

  • Secure hosting infrastructure within the European Union

  • Encrypted connections (HTTPS) across the entire website

  • Access controls and internal policies limiting data access to authorized personnel only

  • Regular reviews of our security practices and service providers

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We therefore cannot guarantee absolute security, but we commit to doing everything reasonably within our power to safeguard your information.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The updated version will be published on this page with a new “Last updated” date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

10. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

Email: privacy@lucillabellini.net
Address: [inserire indirizzo o “Tenerife, Canary Islands, Spain”]