Last updated: 12 October 2026
This notice explains how we process the personal data of people who visit www.kaleydo.com (the "Site") and of those who contact us through it. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 (Privacy Code). Kaleydo is a brand of NEC S.r.l.
1. Data controller
NEC S.r.l.
Via Agnolo Poliziano, 8 – 50129 Florence (FI), Italy
VAT ID IT06594960483
Email: info@kaleydo.com
For any request concerning your personal data, please write to the email address above.
2. Data we process
Browsing data. In the course of their normal operation, the systems that run the Site collect some data whose transmission is implicit in the use of Internet protocols: IP address, browser and device type, operating system, pages requested, date and time of the request, and the server response status. This data is used to keep the Site working and secure.
Data you provide voluntarily. We process the data you give us by filling in the forms on the Site:
- Contact and quote request form: first name, last name, email, phone prefix and number, role (wedding planner, private client, company, venue, event organizer, other), event date, location and type, the content of your message, and the form language.
- Company Profile download form: full name, email, role.
- Newsletter sign-up form: email.
- Direct contact by email or phone: the data you choose to share with us.
Please do not include special categories of data (such as health data) in your messages, or data about other people that is not needed for your request.
Cookies and other tracking tools. The Site uses technical cookies and, with your consent, analytics and marketing cookies. Details are in the Cookie Policy.
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to information and quote requests and managing the contacts that follow | Contact form data | Steps taken at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR) |
| Sending the requested Company Profile | Company Profile form data | Steps taken at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR) |
| Sending newsletters and promotional communications about Kaleydo services, projects and events | Email, name, role, language | Consent (Art. 6(1)(a) GDPR), optional and withdrawable at any time |
| Statistical analysis of how the Site is used | Browsing data, online identifiers | Consent (Art. 6(1)(a) GDPR), given through the cookie banner |
| Measuring advertising campaigns and showing ads in line with your interests | Online identifiers, browsing events | Consent (Art. 6(1)(a) GDPR), given through the cookie banner |
| Keeping the Site secure and working properly, preventing spam and abuse | Browsing data, IP address | Legitimate interest of the Controller (Art. 6(1)(f) GDPR) |
| Complying with legal obligations and establishing or defending legal claims | Data needed in the specific case | Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR) |
4. Whether providing data is required
The fields marked as required in the forms are needed to reply to your request: without them we cannot follow it up. Consent to marketing communications is always optional, and refusing it does not affect how we handle your request.
5. How we process data
Data is processed by electronic and, to a limited extent, manual means, with technical and organisational measures suited to protecting it from unauthorised access, loss or disclosure. We do not make decisions based solely on automated processing, including profiling, that produce legal effects on you.
6. How long we keep data
| Data | Retention |
|---|---|
| Contact and quote requests, Company Profile requests | Until you withdraw consent |
| Newsletter and marketing data | Until you withdraw consent or unsubscribe |
| Statistical browsing data | unlimited time |
| Technical and security logs | unlimited time |
| Cookies | For the durations stated in the Cookie Policy |
When these periods end, data is deleted or anonymised.
7. Who receives the data
Data is processed by authorised staff of NEC S.r.l. and by suppliers acting on our behalf as data processors under Art. 28 GDPR. Data is not disseminated.
| Supplier | Service | Location |
|---|---|---|
| All You S.r.l. | Site hosting | European Union |
| Sendinblue SAS (Brevo) | Contact management, sending emails and newsletters | France |
| Google Ireland Limited | Google Analytics 4, Google Tag Manager, Google Ads, reCAPTCHA, Google Fonts | Ireland |
| Meta Platforms Ireland Limited | Meta Pixel | Ireland |
| iubenda s.r.l. | Cookie consent management | Italy |
| Site development and maintenance providers | Technical support | Italy |
Data may also be shared with advisers (legal, tax) and with authorities where the law requires it. An up-to-date list of processors is available on request.
8. Transfers outside the European Economic Area
Some suppliers, Google and Meta in particular, may also process data in the United States. In these cases the transfer relies on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, for certified organisations, or on the Standard Contractual Clauses approved by the European Commission. You can ask for more information by writing to info@kaleydo.com.
9. Your rights
At any time you can exercise the rights set out in Articles 15–22 GDPR:
- access your data and receive a copy;
- ask for it to be corrected or updated;
- ask for it to be erased;
- ask for processing to be restricted;
- receive your data in a structured format and transfer it to another controller (portability);
- object to processing based on legitimate interest and, always, to processing for marketing purposes;
- withdraw your consent, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights, write to info@kaleydo.com: we reply within one month of the request. You can also unsubscribe from the newsletter using the link in every email, and change your cookie preferences from the Site's banner.
If you believe the processing breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the supervisory authority of the EU country where you live or work.
10. Minors
The Site and Kaleydo's services are not directed at people under 18, and we do not knowingly collect their data.
11. Links to social media profiles
The Site links to Kaleydo's profiles on Facebook, Instagram, LinkedIn and YouTube. These are plain links: the platforms process your data only if you open them, under their own privacy notices.
12. Changes to this notice
We may update this notice to reflect changes in the law or in the Site. The version in force is always the one published on this page, with the last-updated date shown at the top.