Privacy Policy
Last updated: 13 November 2026
This notice explains how personal data is processed on andreaappollonidj.com, under Regulation (EU) 2016/679 (GDPR) and Italian privacy law.
1. Data controller
Andrea Appolloni, DJ, Milan, Italy. Privacy contact: info@andreaappollonidj.com.
2. Data collected through the booking form
Name, email address, company (optional), event type, event date (optional), location and the message you write.
To protect the form from abuse, each attempt is also logged with your email address and an irreversible, salted code derived from your connection address. The connection address itself is not stored.
3. Purposes and legal bases
Replying to your enquiry, preparing a quotation and taking the steps you request before a possible agreement — legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR).
If a booking follows, managing the engagement, invoicing and administrative obligations — legal bases: performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).
Protecting the website and the form against spam and abuse — legal basis: legitimate interest (Art. 6(1)(f)).
Measuring, with your consent only, which booking enquiries come from Google ads — legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time from Cookie settings.
No consent checkbox is required to send an enquiry. Your data is not used for marketing and is not sold.
4. How enquiries are stored and managed
Enquiries are saved in the website's database, accessible only to Andrea Appolloni, who personally reads, answers and manages them. They are not publicly readable.
Once a booking is agreed, the personal data strictly necessary for invoicing, accounting and related administrative tasks may be shared with service providers that carry out those activities. Information on these recipients is available on request.
5. Technical service providers
Lovable (website builder, hosting and database), acting as processor. Lovable's privacy policy: https://lovable.dev/privacy.
Cloudflare, which delivers the website on behalf of the hosting.
Google Ads (Google Ireland Ltd.), only if you accept advertising cookies.
Visitor statistics are collected by Lovable without cookies, without storing connection addresses and without identifying visitors (see the Cookie Policy).
6. International transfers
Some providers (such as Google, Cloudflare and Lovable's infrastructure partners) may process data outside the European Economic Area, including in the United States. Such transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
7. Retention
Enquiries are kept for up to 24 months after the last meaningful interaction with you (for example your last message or our last reply), then deleted, unless longer retention is required by law (for example for invoicing records).
Anti-abuse attempt logs are kept only as long as needed to apply the form's limits.
Visitor statistics: detailed data for 90 days, daily summaries for one year.
8. Your rights
You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; where processing is based on consent you can withdraw it at any time without affecting earlier processing. Write to info@andreaappollonidj.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).