Privacy Policy

This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR").

Last updated: 2026.

PartyLab ("we") respects your privacy and is committed to protecting the personal data we collect through this website and while you use our photobooth service at events. This notice explains what data we collect, why we process it, and what rights you have.

Data Controller

The Data Controller for the data collected through PartyLab is PartyLab di Stefano Ferrara, VAT number IT01455990323, with registered office in Via Francesco Crispi 23, Trieste (TS), Italy, and can be contacted at info@partylab.me.

Data collected through the contact form

When you fill out the "Request information" form, we collect your name, email, phone number (optional), the subject of your request, and the message you write. We use this data only to reply to you and organize your event, never for marketing purposes towards third parties. The form is protected by Cloudflare Turnstile to block automated submissions: Cloudflare may process your IP address in accordance with its own privacy policy.

Data collected during the event (photobooth)

If you take part in an event with PartyLab, you take (or upload) a photo that we transform with artificial intelligence into a different style. The original photo and the result are uploaded to secure storage (Supabase). The transformation is carried out through the Replicate platform, which processes the request using OpenAI's image generation model (ChatGPT/gpt-image): your photo is therefore also processed by OpenAI solely for the purpose of generating the result. According to the policies published by these providers, the data is not used to train their AI models. If requested, we send you the result by email. You can also leave a rating and a comment on the result.

Images generated with artificial intelligence are labeled as such, in accordance with applicable regulations on transparency for AI-generated content.

Photos (original and result) are automatically deleted from our storage after 60 days from the moment they are taken. Replicate and OpenAI, acting as data sub-processors, may retain technical copies for a limited period independent of ours (for example, for security and abuse-prevention purposes), in accordance with their respective privacy policies.

Transfer of data to non-EU countries

Replicate and OpenAI are based in the United States. Processing photos through these providers therefore involves a transfer of personal data outside the European Economic Area. This transfer takes place on the basis of the safeguards provided for by Regulation (EU) 2016/679 (e.g. standard contractual clauses adopted by the providers). You can request more information about these safeguards by writing to us at the contacts indicated below.

Cookies and statistical analysis

This website uses Cloudflare Web Analytics, which does not use cookies and does not individually track visitors.

If you sign up for our newsletter (from the form on the homepage, or the optional checkbox shown when you receive your photo by email) we only collect your email address, to send you updates, news and offers about PartyLab. Signing up is always optional: it is never a condition for receiving your photo or using the service, and it is based solely on your free and specific consent, separate from any other processing described in this notice. You can withdraw your consent at any time via the unsubscribe link included in every email, with a single click and without needing to register. Even after unsubscribing, we keep your address on a suppression list, for the sole purpose of not signing you up again by mistake.

Legal basis and purposes

We process your data to follow up on your request or the requested service, to comply with legal obligations, and, where applicable, on the basis of your consent, for example, for participation in the photobooth and the generation of the AI photo, and for the use of analytics cookies where applicable. If you are under 18, participation in the photobooth requires the consent of a parent or guardian.

Retention

Contact form data is kept until you request its deletion or until it is no longer necessary. Event photos follow the 60-day retention period indicated above, without prejudice to the technical retention by third-party providers described in the previous paragraph.

Data security

We adopt appropriate technical and organizational measures to protect your personal data against loss, destruction, unauthorized access, alteration, or disclosure. No system can guarantee absolute security, but we are committed to maintaining adequate standards and updating them over time.

Your rights

You can ask us at any time to access your data, correct it, delete it, restrict its processing, or object to it, as well as the right to data portability where applicable. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it), or with your local supervisory authority if located outside Italy.

Contact

For questions about this notice or to exercise your rights, write to us at info@partylab.me.