Privacy Policy -

Last updated: 25 October 2026

This Privacy Policy explains how B-Side Photographers collects and uses personal data when you visit weddingphotographersmarrakech.com (the “website”), contact us, or book us as your wedding photographers. We follow the EU General Data Protection Regulation (GDPR) and Italian data protection law.

1. Who we are

B-Side Photographers is the wedding photography studio of Veronica and Gian Domenico. They are joint data controllers (Art. 26 GDPR) and decide together how personal data is used:

Gian Domenico Cosentino, VAT number IT01951030996
Veronica Onofri, VAT number IT02409930993

Postal address: Via Francesco Pozzo 30r, 16145 Genova (GE), Italy.

For any question about your personal data, write to [email protected]. We have not appointed a Data Protection Officer, as the law does not require one for a business of our size.

2. What data we collect

Enquiry form. When you fill in our contact form, we receive the details you choose to share: usually your name, email address, phone number (optional), wedding date, location or venue, and your message.
Emails and messages. If you write to us directly, we receive your email address and whatever you include in your message.
Booking and client data. If you book us, we also process what we need for the contract, invoicing and the wedding day: names, billing address, tax details, payment records and the wedding schedule.
Photographs. As wedding photographers, we take pictures of the couple, their guests and the event.
Technical data. Like every website, ours receives your IP address, browser type and the pages you visit. Our hosting, security and content delivery services use this data to keep the website running and safe.
Cookies. We use cookies as explained in our Cookie Policy. Cookies that are not strictly necessary are only set if you accept them in the cookie banner.

We do not ask for special categories of data (such as health or religious beliefs). Please do not send them to us.

3. Why we use your data and on what legal basis

To answer your enquiry and prepare a proposal: steps taken at your request before a contract (Art. 6(1)(b) GDPR).
To carry out our contract: photographing your wedding and delivering your images (Art. 6(1)(b) GDPR).
To meet legal obligations, such as invoicing and keeping tax records (Art. 6(1)(c) GDPR).
To keep the website secure, block spam and attacks, and make it load fast: our legitimate interest (Art. 6(1)(f) GDPR).
To measure visits, only if we enable analytics and only with your consent through the cookie banner (Art. 6(1)(a) GDPR).
To show your photographs in our portfolio, website or social media, only with your consent (Art. 6(1)(a) GDPR). See section 5.

We never sell your personal data, and we do not use it for automated decision-making or profiling.

4. Who receives your data

Your data is seen by Veronica and Gian Domenico. We also use trusted service providers who process data on our behalf, only for the purposes above:

Hostinger: website hosting and our email mailbox.
Cloudflare: domain name service, content delivery and protection against attacks and bots.
Google: one of the email inboxes where enquiries are forwarded (Gmail) and, if enabled with your consent, website statistics.
Wordfence (Defiant Inc.): website security firewall, which checks IP addresses to block malicious traffic.
Our accountant, for invoices and tax records of booked weddings.

We may also disclose data when the law requires it, for example to public authorities.

5. Wedding photographs

The photographs we take on your wedding day are delivered to you as agreed in our contract. We only publish pictures of you or your guests on our website, portfolio or social media if you have agreed to it. You can withdraw that consent at any time by writing to us, and we will remove the pictures from our own channels within a reasonable time. Withdrawing consent does not affect publications made before it.

6. Transfers outside the European Union

Some of our providers (such as Cloudflare, Google and Defiant) are based in the United States or may process data there. When this happens, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

7. How long we keep your data

Enquiries that do not lead to a booking: up to 2 years from our last contact, then deleted.
Contracts, invoices and accounting records: 10 years, as required by Italian law.
Your wedding photographs: we keep a backup archive for 2 years after delivery, so we can help you if you lose your copy.
Security logs: for a short time, normally no longer than a few months.
Cookies: as shown in the Cookie Policy.

8. Your rights

You have the right to:

access your personal data and receive a copy;
correct data that is wrong or incomplete;
ask us to delete your data, when there is no legal reason to keep it;
restrict or object to certain uses of your data;
receive the data you gave us in a common format (data portability);
withdraw your consent at any time, without affecting what was done before.

To use these rights, write to [email protected]. We will reply within one month. You can also file a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

9. Security

We protect your data with an encrypted connection (HTTPS), a security firewall, two-factor authentication on our admin accounts, regular updates and daily backups. No system is completely secure, but we work to keep the risk as low as possible.