Privacy Policy

1. Data controller

Scopelliti 1887 S.r.l. — Via Fata Morgana 52, 89125 Reggio Calabria (RC) — VAT no. IT02038170805. To exercise your rights you may write to the contacts given on this site.

2. Data we process

• Account data — first name, surname, email address (list owners and guests).
• List data — chosen products, messages, contributions.
• Video greetings and photographs — where a guest chooses to record or upload them: footage showing the guest’s face and voice, and photographs (including post-event photographs). Processed as ordinary audiovisual content, with no biometric recognition whatsoever.
• Access via email link — the guest’s email address, for passwordless sign-in and to resume a draft contribution.
• Concierge requests — name, email, phone (optional) and the text of your message, when you write to us from the form on the Concierge page.
• Browsing data — in aggregated form only and subject to consent (see the Cookie Policy).

3. Purposes and legal bases

• Provision of the service, including passwordless sign-in via email link (performance of a contract, art. 6(1)(b)).
• Video greetings and photographs published for the recipients: the data subject’s explicit consent (art. 6(1)(a)), which may be withdrawn at any time.
• The Aldo artificial-intelligence assistant (advice on the catalogue): the conversation is retained only with your explicit consent (art. 6(1)(a)), which may be withdrawn at any time from the assistant’s panel; without consent the conversation is not retained. See § 4.
• Replying to requests written to the concierge: pre-contractual measures taken at your request (Art. 6.1.b). We use your contact details only to reply, and we keep the request for 12 months, after which it is deleted automatically.
• Newsletter and communications, only with explicit consent.
• Security and legal compliance (legal obligation / legitimate interest).

4. The “Aldo” artificial-intelligence assistant

Aldo is an artificial-intelligence system, not a person. Its answers are generated automatically by a generative model and may contain inaccuracies: always check the details of each piece on its product page. We state this visibly every time you open the assistant, as required by art. 50 of Regulation (EU) 2024/1689 (AI Act).

Aldo recommends pieces from our catalogue: it takes no automated decision producing legal effects concerning you or similarly significantly affecting you (art. 22 GDPR). No piece enters your list without your explicit confirmation, and no purchase is ever started by the assistant.

The conversation is retained only with your consent, which you may withdraw at any time from Aldo’s panel, as easily as you gave it (art. 7(3) GDPR). From withdrawal onwards no conversation is retained; those already saved are deleted automatically within 30 days. We ask you not to enter special categories of data (art. 9 GDPR) or third-party data into the chat.

5. Video greetings, photographs and the camera

Recording a video greeting uses your device’s camera and microphone only after your explicit consent and the browser’s permission: nothing is captured or sent without your confirmation. The video shows your face and your voice and is processed as ordinary audiovisual content — we carry out no facial or voice recognition, nor any other form of biometric identification. You may remove a video greeting or a photograph before sending it: removal also deletes the file from our archives. The augmented reality (AR) experience uses the camera locally on the device only, without sending images to our servers.

6. Retention

We retain data for as long as necessary for the purposes described and for legal obligations, then delete or anonymise it. In particular: list and contribution data for the duration of the service and the applicable statutory periods; video greetings and photographs for a maximum of 12 months from upload, save for earlier deletion at your request or through the removal function; browsing data for the periods stated in the Cookie Policy. Conversations with the Aldo assistant, where you authorise their retention, are kept for a maximum of 30 days and then deleted automatically; they are removed in any case if you delete your account. Requests written to the concierge are kept for 12 months from the day they reach us, then deleted automatically: only boutique staff can read them, and the text you wrote to us cannot be edited by anyone.

7. Processors and transfers

We use external suppliers. The following act as data processors on our behalf: Google (Firebase: authentication, database, media storage and hosting); Google Cloud Vertex AI for the Aldo assistant, with processing in the European region europe-west1; Brevo for sending service emails, with servers in the European Union; and, subject to consent, Google Analytics 4 for aggregated browsing statistics. The onboarding map relies on Google Maps and Places, which receive your IP address and the text you type to search for a city. Payments are executed by PayPal, which receives the amount, the order reference and the description of the items purchased, and which also processes this data for its own purposes, including fraud prevention. Some of these services may involve transfers outside the European Union: these are made to suppliers certified under the EU-US Data Privacy Framework or, where it does not apply, on the basis of the European Commission’s Standard Contractual Clauses. The durations of measurement cookies are stated in the Cookie Policy.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction of processing and data portability, you may object to processing, and you may withdraw consent at any time (including consent to video greetings and photographs). We will respond within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

9. Cookies

The use of cookies and similar technologies is described in the Cookie Policy, where you can also manage your preferences.