Skip to content
IT/EN Check availability

Privacy Policy

Notice under Article 13 of EU Regulation 2016/679 (GDPR). Last updated: November 6, 2026. This is a translation: if anything differs, the Italian version prevails.

1. Who handles your data

The data controller is:
Attilio Feder (sole proprietorship)
Via Nazionale, 61 - 25080 Puegnago del Garda, Italy
VAT number IT04404460281
Email: info@tootem.it
Phone: +39 333 4583488

2. What data we collect

  • If you send us a request through the form: the event or couple's name, email, phone number, date, times and venue of the event, the options you choose and the message you write. We also record the date and time you sent it and your IP address.
  • If you confirm an order: the details needed to organize the event, such as the on-site contact person, and the payments received (amount, date and method). We don't collect card numbers.
  • If we ask you for electronic invoicing details: full name or company name, tax code, VAT number, address, recipient code (SDI) or certified email (PEC).
  • If you tell us you're no longer interested in a proposal: the reasons you choose and the notes you write.
  • If you email or call us: your contact details and what you tell us.
  • If you use the chat with Tooty: the messages you write and the replies, which we save and read, and a fingerprint of your IP address that doesn't reveal it. Tooty is an artificial intelligence: please don't share personal data with it.
  • If you try the Photo Booth demo: with your permission, your browser uses the camera and, for the video message, the microphone, but photos and videos stay on your device: we don't receive them and they disappear when you close the page, except what you choose to download. We only record how you use the demo: how many photos, strips, games and video messages you create, how many items you download or print, whether you allowed the camera, how long you use it, the type of device (phone, tablet or computer) and a fingerprint of your IP address that doesn't reveal it.
  • If you accept statistics: Google Analytics collects data about the pages you visit, where you came from and your device, linked to a random identifier.
  • While you browse: the server records technical data for each visit, such as IP address, date and time, requested page and browser type.

We don't ask for health data or other special categories of data: please don't include them in your message.

3. Why we use it

  • To answer your request and prepare a proposal: pre-contractual steps you asked for (Art. 6.1.b GDPR).
  • To manage the order and organize the event: performance of the contract (Art. 6.1.b).
  • To meet tax and accounting obligations: legal obligation (Art. 6.1.c).
  • To answer the questions you ask Tooty: pre-contractual steps you asked for (Art. 6.1.b).
  • To reread chats to improve the service and, if you then send us a request, to link it to your chat so we can help you better: our legitimate interest (Art. 6.1.f). The link is made if the request comes from the same browser or the same IP address within 7 days.
  • To understand how the Photo Booth demo is used, to improve it, and to link it to your request if you send one during the same visit: our legitimate interest (Art. 6.1.f).
  • To record that you're no longer interested in a proposal and why, so we stop writing to you and can improve our offers: our legitimate interest (Art. 6.1.f).
  • To understand how the website is used, with visit statistics: your consent (Art. 6.1.a), which you can withdraw at any time. Without consent, the website works just the same.
  • To protect the website and prevent abuse: our legitimate interest (Art. 6.1.f).

We don't use your data for advertising and we don't make automated decisions.

4. Do you have to give it to us?

No, but we need the form fields marked with an asterisk to reply to you: without them we can't prepare a proposal. The message is optional. Technical browsing data is recorded automatically.

5. Who we share it with

  • Aruba S.p.A., our hosting and email provider, whose servers in Italy store the data.
  • Google Ireland Ltd, which provides Google Analytics, only if you accept statistics.
  • Cookiebot (Usercentrics A/S, Denmark), which runs the cookie banner and records your choice.
  • Anthropic PBC, which provides Tooty's artificial intelligence and receives the chat messages to generate the replies.
  • The attendants who provide the service, who receive the data needed to organize the event.
  • Tax and accounting advisors, for order and payment data.
  • The authorities, when the law requires it.

We don't sell or give your data to third parties.

6. Transfers outside the European Union

To check the distance to the event venue, the name of the place is sent to the OpenStreetMap map service (Nominatim), run by the OpenStreetMap Foundation, based in the United Kingdom: a country the European Commission recognizes as providing an adequate level of protection. Your name and contact details are not sent.

The messages you write to Tooty are sent to Anthropic PBC, in the United States, with the safeguards provided by the GDPR (standard contractual clauses). If you accept statistics, Google Analytics data may be transferred to Google LLC, in the United States, based on the European Commission's adequacy decision (Data Privacy Framework). We make no other transfers outside the European Union.

7. How long we keep it

  • Requests that don't become an order: up to 24 months.
  • Order, payment and invoicing data: 10 years, as required by tax law.
  • IP address of people who send a request: up to 3 days for anti-abuse checks and up to 24 months in the activity log.
  • Chats with Tooty: up to 12 months from the last message, together with the IP address fingerprint. You can ask us to delete them sooner. They also stay in your browser until you close the tab, and Anthropic keeps them for the limited time set out in its terms.
  • Photo Booth demo usage: up to 12 months, together with the IP address fingerprint.
  • Google Analytics statistics: up to 14 months.
  • Technical browsing data: for the limited period set by the hosting provider.

8. Your rights

You can ask us to access, correct or delete your data, to restrict its processing or to receive it in a readable format (portability). You can also object to processing based on our legitimate interest, such as saving chats and demo usage.

To do so, email info@tootem.it or write to the address above: we'll reply within one month. If you believe the processing isn't correct, you can file a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

9. Cookies

We use technical cookies, which don't require your consent:

  • CookieConsent: remembers the choice you made on the cookie banner, for the period set by Cookiebot.
  • tootem_sito: keeps the request form, the chat and the demo log working and secure, and expires when you close your browser.

Only if you accept statistics on the banner do we also use the Google Analytics cookies _ga and _ga_*, which last up to 2 years and are used to tell visitors apart. We don't use them for advertising.

The banner is run by Cookiebot, which records your choice as proof of consent. You can change it at any time with the "Cookie preferences" link at the bottom of every page: if you withdraw your consent, statistics stop and the Google Analytics cookies are deleted.

We don't use profiling cookies. The website's fonts, images and videos come from our own server.

You can block cookies in your browser settings, but without tootem_sito the request form and the chat won't work: in that case you can email us.

10. Changes to this notice

If the way we handle data changes, we update this page and the date at the top.