Who the data controller is

The data controller is SelfieBoost di Castellone Marco, Via Piacenza 30, 20093 Cologno Monzese (MI), Italy, VAT no. 07785760963. For any questions about your data, you can write to hello@selfieboost.it or call +39 333 505 9246.

This policy explains what data we collect when you visit selfieboost.it or contact us, why we do so and what your rights are, pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR).

In brief

If you browse without accepting cookies, we do not use any analytics or advertising tools.
If you contact us, we use your data only to reply to you and prepare your quote.
Photos you upload to the AI demos are used only to generate the image: we do not keep them.
Hand tracking and the interactive mosaic run only in your browser: camera images never leave your device.
In the Parole in figura demo, if you turn on the microphone, your browser's speech recognition converts your voice into text: in Chrome, this service is provided by Google. We do not save the text.
We do not sell your data or pass it to third parties for their marketing.

What data we process and why

1. Browsing the site

The site is hosted by Netlify. Like any web server, it logs technical data about visits (IP address, browser, pages requested, date and time) to run the service and protect it from abuse. Legal basis: the controller's legitimate interest in the security and operation of the site (Art. 6(1)(f) GDPR). Logs are kept by the provider for the period set out in its terms.

Fonts are hosted directly on our site: your browser does not contact third-party servers to display them.

2. Contact and quote requests

If you email us, call us, or contact us on WhatsApp or social media, we process the data you give us (name, contact details, company, date and location of the event, number of guests, requests) to reply to you and prepare a proposal. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

When you submit the “Tell us about your event” form, the data you enter (name, contact person, contact details, date, times, venue, number of guests, type of event and requirements) reaches us by email and is stored in the site's systems (Netlify) to handle your request. Emails are sent via the Resend service: you also receive one, with a summary of what you wrote.

The online quote calculator is part of the site: the event data and your contact details are used to calculate the price, send us the request and email you the summary. The request is stored in the site's systems (Netlify) and emails are sent via the Resend service. To find the venue and calculate the distance from our base, we use OpenStreetMap services (Nominatim and OSRM), which receive only the address searched; the map is also provided by OpenStreetMap.

While you fill in the quote, we save a draft of your choices and of the contact details you have already entered, even if you do not submit it: this helps us understand where the calculator could be improved and, if you left your email, lets us write to you a few times at most with the summary and possibly a discount code to resume your request (legitimate interest in following up on a quote request you started). You can ask us at any time to stop sending messages and to delete the draft, by replying to one of our emails or writing to hello@selfieboost.it. Unsubmitted drafts are automatically deleted after 30 days.

We keep requests that do not become a booking for a maximum of 24 months, so that we can respond to any follow-ups.

3. Clients and contracts

If you book an event with us, we process the data needed for the contract, invoicing and tax obligations. Legal basis: performance of the contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR). Accounting records are kept for 10 years, as required by law. They may be shared with our accountant and invoicing service providers.

4. Artificial intelligence demos

On some pages you can try our AI experiences by uploading or taking a photo. The photo is sent to an image-generation service (Google Gemini API; alternatively OpenAI, if enabled) solely to create the result you see. SelfieBoost keeps neither the original photo nor the generated one: they remain only on your device, if you choose to save them. The provider processes the image in accordance with its own terms for API services. If you ask to receive the result by email, the image is sent once to your address via our email delivery service (Resend) and is not kept; we keep your address, the date and the chosen concept as proof of the request and, only if you ticked the optional box, to send you SelfieBoost news. Legal basis: your request and, for news, your consent, which you can withdraw at any time by writing to us.

Legal basis: your request to use the demo (Art. 6(1)(b) GDPR). We do not use the images to recognise people, or for any other purpose.

In the Live messages and Phone Slice interactive demos, your phone connects to a screen via a QR code containing a random code. In Live messages, the optional name and the text you write are stored in the site's systems (Netlify) for no more than one hour and are visible only to the connected screen. In Phone Slice, your phone's movements pass directly between phone and screen and are not saved; to establish the connection, the devices use STUN servers from Cloudflare and Google, which receive the IP address. To limit abuse, we keep only an irreversible code derived from the IP address, which changes every hour.

To limit use of the demo to a few tries per day, we save an anonymous code derived from the IP address using an irreversible function that changes every day. The IP address is not saved.

Hand tracking, the mosaic and the other interactive experiences use the camera only within the browser: images are not sent to any server.

Please do not upload photos of other people without their permission, or of children under 14.

5. Analytics and marketing (only with your consent)

If you accept them in the banner, we use Google Analytics 4 to understand, in aggregate form, how the site is used, and Google Ads to measure the effectiveness of our campaigns. These tools use cookies and browser identifiers. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie preferences” at the bottom of every page. Details are in the cookie policy.

6. Instagram and YouTube content

Instagram reels and YouTube videos load only when you press play. From that moment, Meta or Google receive data about your visit in accordance with their own policies.

7. Photos and contacts collected at events

When we work for a company or an agency, photos taken at the photo booths and any contacts collected through registration forms are processed on behalf of the client organising the event, who is the data controller. In these cases SelfieBoost acts as data processor (Art. 28 GDPR) and the privacy notice for guests is provided by the organiser at the event. Online event galleries remain active for the period agreed with the client.

At weddings and private parties, SelfieBoost is the data controller: the photos are used for prints, the guestbook and the gallery for the couple or the hosts. We publish photos or videos on our channels only with the consent of the people pictured or of the organisers, as agreed.

8. Job applications (Careers)

If you apply via the Careers page or by email, we process the data you send us (name, contact details, city, availability, experience, links to your profiles and your CV, if provided) solely to assess your application and contact you. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

Your CV reaches us as an email attachment and is not saved on the site. We keep applications for a maximum of 12 months and then delete them; you can ask for them to be deleted sooner at any time.

Who may receive the data

The providers that help us deliver our services and process data on our behalf, under confidentiality and security commitments:

Netlify (site hosting)
Google (Analytics, Ads, Gemini API, Gmail and Workspace, if used)
OpenAI (image generation, only if enabled)
Resend (sending emails from the contact form and the quote)
OpenStreetMap (address search, distances and the quote map)
Cloudflare (phone-to-screen connection for the interactive demos and the QR code library)
Meta (Instagram, Facebook, WhatsApp) when you contact us through these channels
our accountant and advisers, for tax obligations

The authorities may also receive data when required by law.

Transfers outside the European Union

Some providers are based in the United States. In these cases, transfers take place on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) for participating companies, or of standard contractual clauses approved by the Commission.

How we protect your data

We use encrypted connections (HTTPS) and protected access to our work tools, and we limit the data we collect to what is necessary. Keys for external services are stored only in the server's protected settings.

Your rights

At any time you can ask us to:

access your data and receive a copy
correct or update it
erase it, where we are not required to keep it
restrict its processing
receive it in a machine-readable format (portability)
object to processing based on legitimate interest
withdraw your consent, without affecting processing already carried out

Write to hello@selfieboost.it: we reply within 30 days. If you believe your data is not being processed correctly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes

We may update this policy when our services or the law change. The date of the last update is shown at the bottom of the page.

Last updated: 11 October 2026

Privacy policy