Privacy Notice
This English translation is provided for convenience only. The Italian version is the legally binding one and prevails in case of any discrepancy. Read the Italian version.
Notice provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and of Italian Legislative Decree No. 196/2003 as amended by Italian Legislative Decree No. 101/2018.
1. Data controller
NITEADVISOR S.R.L., with registered office at Strada De Soraporta 16, 38036 San Giovanni di Fassa – Sèn Jan (TN), VAT no. 02676050228, PEC (certified email) niteadvisor@pec.it, email privacy@tailorevent.com ("Experia"). Experia operates the Tailor Event platform, intended for venue managers and event organisers ("Operators"), and the Experia app intended for the public, for which a separate notice is provided.
2. Our roles
Experia is the data controller for the data of Operators, their staff and visitors to the website (account, contract, payments, use of the platform, support, security).
Experia is the data processor pursuant to Article 28 GDPR, on behalf of the Operator acting as data controller, for the data of the venue's customers that the Operator uploads or manages through the platform (contacts, messages, segmentations, ticket buyers, attendance statistics). The terms of that relationship are set out in the Data Processing Agreement annexed to the Terms and Conditions. For this data, requests from data subjects must be addressed to the Operator; Experia assists the Operator.
3. Data processed, purposes and legal bases
| Data | Purposes | Legal basis |
|---|---|---|
| Identification and contact data of the Operator and the team (name, email, telephone, role), credentials, venue data (name, address, contacts, website, Google Maps link) | Creating and managing the account, providing the service, support | Contract (Art. 6(1)(b)) |
| Billing and payment data (through Stripe; Experia does not store card numbers) | Invoicing, collection of payments, accounting and tax obligations | Contract; legal obligation (Art. 6(1)(c)) |
| Content uploaded and generated (logos, photos, texts, videos, venue profile, editorial plans), settings, feedback | Generating content with artificial intelligence systems, publishing on the channels indicated by the Operator, personalising the service | Contract |
| Access tokens for connected channels (Meta, TikTok, Google, WhatsApp Business) | Publishing and reading statistics on behalf of the Operator | Contract |
| Usage data and technical logs (IP address, device identifiers, actions on the platform, errors) | Security, abuse prevention, diagnostics, service improvement | Legitimate interest (Art. 6(1)(f)) |
| Data derived from public sources indicated by the Operator (venue website, Google listing), Art. 14 | Pre-filling the venue profile, at the Operator's request | Contract; for any third-party data that may be present, legitimate interest, with retention limited to 24 hours for unconfirmed data |
| Statistical data and feedback in aggregated or pseudonymised form | Improving the platform's recommendation models and templates | Legitimate interest; the Operator may object by writing to privacy@tailorevent.com |
| Cookies and tracking tools | See the Cookie Policy | Consent (Art. 6(1)(a)) for non-essential ones |
| Service communications (transactional emails, in-app and push notifications) | Informing about activities, deadlines, status of content | Contract |
| Experia's commercial communications | Only with prior consent, which may be withdrawn at any time | Consent |
4. Artificial intelligence systems
The platform uses generative artificial intelligence systems provided by third parties (including OpenAI and Anthropic) to produce texts, images, videos, editorial plans, recommendations and automatic replies. Only the data necessary for each individual processing operation is transmitted to the providers (venue description, approved content, instructions); no data of the venue's end customers and no payment data are transmitted. The providers act as our processors and, under their respective agreements, do not use the data to train their own models.
Generated content is marked in a machine-readable format as generated with AI, pursuant to Article 50 of Regulation (EU) 2024/1689. No decision producing legal or similarly significant effects on natural persons is taken solely by automated means (Article 22 GDPR).
More information is available on the "How Tailor Event's AI works" page.
5. Recipients and processors
The data is processed by Experia's authorised personnel and by providers appointed as data processors: hosting and database (Vercel Inc., Neon Inc.), media storage (Vercel Blob), payments (Stripe Payments Europe Ltd), AI model providers (section 4), email delivery (Resend, Inc.), error monitoring (Sentry), analytics (Google Ireland Ltd).
The platforms on which the Operator publishes (Meta, TikTok, Google) and the messaging services (WhatsApp Business) process the data as independent controllers in accordance with their own policies, by virtue of the authorisations granted by the Operator.
The up-to-date list of sub-processors is published on the dedicated page. The data may be disclosed to authorities, advisers and professionals where necessary to comply with legal obligations or to protect Experia's rights.
6. Transfers outside the EU
Some providers have their registered office or servers in the United States: the transfer takes place on the basis of the adequacy decision relating to the EU-US Data Privacy Framework for certified providers or of the standard contractual clauses adopted by the European Commission, with supplementary measures where necessary. We do not transfer personal data to countries without an adequacy decision without safeguards pursuant to Articles 46-49 GDPR. A copy of the safeguards is available on request.
7. Retention
| Data | Retention |
|---|---|
| Account and venue data | Duration of the contract and 12 months after termination, unless there are disputes |
| Accounting and tax data | 10 years |
| Acceptance of the Terms and legal documents | Duration of the contract plus 10 years, in pseudonymised form after the account is deleted |
| Cookie consents | 24 months |
| Data acquired from public sources and not confirmed by the Operator | 24 hours |
| Snapshots of the context of AI processing | 90 days |
| IP addresses in the team action logs | Anonymised after 6 months |
| Log of publication attempts | 180 days |
| Generated content not used | According to the retention policy indicated on the platform |
Content published on the Operator's channels remains subject to the policies of those channels.
8. Data subject rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent (without prejudice to processing carried out before withdrawal), by writing to privacy@tailorevent.com or from the Account → Privacy section of the platform, where you can download your data and request the deletion of your account. We respond within 30 days. You may lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority) (www.garanteprivacy.it).
9. Whether providing data is mandatory
Providing the data marked as mandatory is necessary to provide the service; failure to provide it prevents registration or the use of the corresponding functions. The service is reserved for adults acting on behalf of a professional business.
10. Security
We adopt appropriate technical and organisational measures: encryption in transit and at rest, role-based access control, segregation of data by customer, activity logging, monitoring, backups, and a breach management procedure with notification to the authority within 72 hours where required.
11. Changes
Changes to this notice are published on this page with a new version and date; significant changes are flagged on the platform.
Version 1 of 19/09/2026.