Privacy Policy

The Data Controller is Honeyside di Daniele Molinari, VAT IT08510780722, REA BA-631501.

Contact e-mail address: info@molinari.dev

For any request relating to the processing of your personal data, you may write to the Controller at the address indicated above.

In connection with the use of the application and website, the following categories of data are collected:

• Name, surname and initials — provided upon access with an invite code or via the RSVP form on the website.

• Email address and phone number — optionally provided via the RSVP form.

• RSVP data — information about attendance, number of guests, dietary requirements, shuttle needs and return time, and reason for declining.

• Photos and videos — multimedia content uploaded by the user to the app gallery. Such content is visible to all registered guests.

• Chat messages — messages sent in the shared chat among guests.

• Quiz answers — choices made in the app's bets/quiz.

• Push notification tokens — device identifier used for sending notifications (Expo Push Token).

• Technical data — IP address, device type and operating system, automatically detected upon access.

Data is processed for the following purposes:

• Managing RSVPs and event organisation — legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

• Communicating with guests via push notifications (event updates, news, menu availability) — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR) or consent of the data subject where required.

• Sharing photos and videos in the shared gallery — legal basis: consent of the data subject, expressed through voluntary upload of content (Art. 6(1)(a) GDPR).

• Quiz/game features and guest chat — legal basis: consent expressed through voluntary participation (Art. 6(1)(a) GDPR).

• Service security and prevention of misuse — legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

Data is processed using computer and electronic tools, with logic strictly related to the stated purposes. Data is stored on dedicated servers located in the European Union.

Photos and videos up to 15 MB are stored directly in the database. Larger files are archived via GridFS, a MongoDB file storage system.

Push notifications are sent via the Expo Push Notification Service, a service operated by Expo (650 Industries, Inc.), subject to its own privacy policy.

The Controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

Guests' personal data is retained for the period strictly necessary for the organisation and celebration of the event.

Following the conclusion of the wedding (29 August 2026), data may be retained for a period not exceeding 12 months, unless otherwise required by law or for the Controller's legal protection.

Multimedia content (photos and videos) uploaded by users may be retained for a longer period for documentary purposes, subject to specific consent from the data subjects.

Users may at any time request early deletion of their data as described in section 7.

Personal data is not transferred, sold or communicated to third parties for marketing or profiling purposes.

Data may be shared with:

• Technical providers managing the service infrastructure (hosting, database, push notifications), who act as Data Processors under Art. 28 GDPR.

• Photos and videos uploaded to the gallery are visible to all guests registered on the app. By uploading content, the user explicitly accepts such sharing.

• Chat messages are visible to all guests registered on the app.

Data is not transferred to third countries outside the European Economic Area, except as necessary for the operation of the Expo Push service (USA), for which adequate safeguards are in place pursuant to Arts. 46–47 GDPR.

Under Arts. 15–22 GDPR, every data subject has the right to:

• Access — obtain confirmation that personal data concerning them is being processed and access such data.

• Rectification — obtain correction of inaccurate or incomplete data.

• Erasure (right to be forgotten) — request deletion of their personal data. In the ReD Sposi app, this feature is available directly from the "More" screen → "Danger Zone" → "Delete my account".

• Restriction of processing — request restriction of processing in certain cases.

• Data portability — receive their data in a structured, commonly used format.

• Objection — object to the processing of their data at any time.

• Withdrawal of consent — withdraw consent previously given at any time, without prejudice to the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to: info@molinari.dev

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

The website uses only technical cookies necessary for proper browsing (e.g. language management). No profiling or third-party cookies are used for marketing purposes.

The mobile application does not use cookies, but may use secure local storage (Expo SecureStore) to store the user's authentication token on the device.

The Controller reserves the right to make changes to this policy at any time, notifying users via the app or website.

We invite you to periodically consult this page. The date of the last update is indicated at the top of this policy.