Privacy policy

1. Data controller

Amigdala Sagl
Via Silvio Calloni 9
6900 Lugano, Switzerland
CHE-397.084.918 MWST

To exercise your rights or for questions about the processing of your data you can use the contact form on the website.

2. What data we collect

When you send a booking request we collect the details you enter in the form: full name, email address, phone, company, type of event, dates, venue, number of guests and message.

When you use the contact form we collect full name, email address, phone and message.

In both cases we also record the date and time of consent and a cryptographic hash of the IP address, used only to limit repeated submissions and not traceable back to the address itself.

We do not collect data through newsletters, we do not build marketing profiles and we do not carry out profiling.

3. Why we process it and legal basis

We use the data to reply to your request, check the availability of the date and prepare a quote, and to manage any resulting contract. The legal basis is the consent you give by ticking the box before submitting and, if the contract is concluded, the performance of that contract.

The IP hash serves our legitimate interest in protecting the forms from automated submissions and abuse.

4. Who may receive the data

The data is not sold or shared with third parties for marketing purposes. It may be processed, on our behalf and only as far as necessary, by technical providers:

• Google Cloud (portal hosting and file storage), with infrastructure in Europe;
• MongoDB Atlas (database), with infrastructure in Milan;
• Cloudflare (content delivery network, DNS and form antispam verification);
• Resend (sending of notification emails), with infrastructure in Europe.

Booking request emails are delivered to the team addresses set in the website settings. We may also disclose the data where required by law or by an authority.

5. Cookies and Google Analytics

The website sets no cookies before you choose. We use Google Analytics 4, in aggregate form, only if you accept the banner: in that case the measurement cookies (_ga) are set. If you decline, or if you withdraw consent from the "Cookies" button, no Google script is loaded and the cookies already created are deleted.

The form antispam check (Cloudflare Turnstile) may set technical cookies needed to tell a person from an automated program.

You can delete cookies at any time in your browser settings.

6. Photos and guest data during events

During an event the robot captures the photograph and, if the guest chooses email delivery, the email address they enter. Guests see a notice on the display before the shot and may decline the processing: in that case the photograph is discarded.

Photographs and guest email addresses are kept for the retention period set for the event (normally 90 days from the event date, unless otherwise agreed with the client) and then deleted automatically.

The client organising the event is responsible for informing guests about the photo service.

7. Where data is stored and for how long

Data is stored on infrastructure located in the European Union (Google Cloud, Milan region, and MongoDB Atlas, Milan) and is not transferred outside the European Economic Area or Switzerland, except as necessary to deliver emails.

Unconfirmed booking requests and contact form messages are deleted automatically after 24 months. Data relating to a concluded contract is kept for the period required by applicable accounting and tax rules.

The IP hash is kept with the request and follows the same retention period.

8. Your rights

You may at any time request access to your data, obtain rectification or erasure, restrict or object to the processing, and receive the data you provided us in a readable format. You may also withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

We reply within 30 days. If you believe the processing does not comply with the law you may contact the competent supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner, in Italy the Garante per la protezione dei dati personali.

9. Changes to this policy

We may update this policy to reflect changes in the service or in the law. The applicable version is the one published on this page, with the effective date shown above.