Privacy Policy

The data controller is Sabina Yasirova, sole trader (ditta individuale) established in Italy, trading as The Lake Proposal, at Via Indipendenza 54, 22100 Como (CO), Italy. VAT number (P.IVA) 04300980135, Codice Fiscale YSRSBN93L41Z138E.

For anything in this notice, including any of the requests described below, write to thelakeproposal@gmail.com or call +39 352 084 2465. We have not appointed a Data Protection Officer, as we are not required to.

Only what you type into the contact form: the names you give, your email address, and your message. The form also has one optional field - the date of your proposal. Nothing else on this site collects personal data about you.

Our hosting provider records standard technical information for every visit, such as IP address, browser type and the pages requested, for security and to keep the site running. We do not use this to identify or profile visitors.

We use what you send to answer your enquiry, check availability for your date and discuss a possible booking. The legal basis is Article 6(1)(b) GDPR: steps taken at your request before entering into a contract. The consent checkbox on the form confirms you are sending us this information deliberately.

If a booking goes ahead, your data is then processed to perform that contract and to meet our accounting and tax obligations under Article 6(1)(c). Spam filtering on the form, including the honeypot field and the captcha where enabled, rests on our legitimate interest in keeping the form usable under Article 6(1)(f).

We do not use your data for marketing, we do not send newsletters, and we never sell or rent it to anyone.

Your enquiry passes through a small number of service providers, each acting as a processor on our written instructions and none of them permitted to use your data for their own purposes:

Cloudflare, Inc. hosts this website and, where the captcha is enabled, provides Turnstile. Resend (Plus Five Five, Inc.) delivers the notification email to us. Sanity AS stores a backup copy of your enquiry in our content system, so a message is not lost if the email fails. Google Ireland Limited provides the mailbox the notification arrives in and, if you accept the cookie banner below, processes analytics data about your visit.

Some of these providers are established outside the European Economic Area or process data there. Those transfers are covered by the European Commission's Standard Contractual Clauses, together with the additional safeguards each provider applies.

If your enquiry does not lead to a booking, we delete it within 24 months of your last contact with us. Couples often come back to a conversation months later, which is why the period is not shorter.

If you do book us, we keep the contract and the related records for as long as Italian tax and accounting law requires, which is normally ten years from the end of the relevant financial year.

Video and photographs taken on a shoot are personal data too, both yours and your guests'. How that material may be used, including whether any of it can appear on our website or social accounts, is agreed in writing in the contract for your proposal rather than here. Nothing from a proposal is published without the agreement recorded in that contract, and you can withdraw that agreement for future use at any time by writing to us.

A banner asks first-time visitors whether we may use Google Analytics to understand how the site is used - pages viewed, approximate location by country/city, device type and how visitors found us. Analytics cookies are set only if you click Accept, and your IP address is anonymised before Google processes it. If you click Decline, or simply close the banner, no analytics cookie is set and nothing is sent to Google. You can change your mind at any time by clearing your browser's cookies for this site, which brings the banner back on your next visit.

Google Ireland Limited processes analytics data under the same Standard Contractual Clauses referenced above. We have not enabled Google Signals or advertising features in this property, so analytics data is not linked to your Google account or used for ad personalisation.

Separately, and regardless of your choice above: where the contact form captcha is enabled, Cloudflare Turnstile may set a strictly necessary cookie to tell a person from a bot. A further cookie exists only for our own editors when previewing unpublished changes, and is never set for ordinary visitors.

You can ask us for a copy of the data we hold about you, to correct it if it is wrong, to delete it, to restrict how we use it, or to receive it in a portable format. You can object to processing based on legitimate interest, and where processing rests on consent you can withdraw that consent at any time without affecting what was lawful beforehand.

Write to thelakeproposal@gmail.com and we will respond within one month. There is no charge.

If you believe we have handled your data improperly, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, at garanteprivacy.it, or to the authority in the EU country where you live.

If what we do with your data changes, we will update this page and the date at the top of it. The current version is always at https://thelakeproposal.com/privacy.