Privacy notice

Data controller

The data controller is Edoardo Rinaldi, contactable at hello@tramaproof.com.

Trama is not yet incorporated. Until the company is registered the controller is the founder in a personal capacity, and this notice will be updated with the company name, registered office and VAT number at that point.

Data we collect

Through the design-partner form we collect the company name, the contact name and the work email address, together with the role and the message where these are provided. We also record which language version of the site was used and the date of submission.

No other personal data is collected from visitors. The application records no IP addresses, device identifiers or browsing behaviour. Our hosting and network providers process connection data, including IP addresses, transiently for service delivery and security.

Cookies and analytics

This website sets no cookies and uses no analytics, advertising or tracking services. Web fonts are served from our own infrastructure, so visiting a page discloses nothing to a third-party provider.

Purpose and legal basis

The data is used to respond to enquiries about the design-partner programme and, where discussions continue, to evaluate a working relationship. It is not used for marketing lists or profiling, and it is neither sold nor disclosed to third parties for their own purposes.

The legal bases are Article 6(1)(b) GDPR, for steps taken at the request of the data subject prior to entering into a contract, and Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries addressed to us.

Processors and processing locations

All processing takes place within the European Union. The same requirement governs the Trama platform itself.

We use a small number of specialist providers, each bound by a data processing agreement. The current list of named providers is available on request and forms part of the contractual documentation for customers.

• Managed database platform — Ireland
• Website hosting and content delivery — Germany
• Object storage for documents and published artefacts — Italy
• DNS and transactional email delivery — European Union

Retention

Data submitted through the form is retained for as long as it remains relevant to the enquiry and to any discussions that follow, and is erased on request. Where no contact results, the record is removed.

Rights of the data subject

You may request access to the personal data we hold about you, its rectification or erasure, the restriction of processing and its transmission in a portable format. Where processing relies on our legitimate interest, you may object to it.

Requests should be sent to hello@tramaproof.com and are answered within one month, in accordance with Article 12(3) GDPR. No account or form is required. You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

Data processed on behalf of our customers

Where Trama contacts a supplier at the request of a brand using the platform, that brand determines what is collected and why and acts as controller; Trama acts as processor on its instructions. Requests concerning that data are best addressed to the brand directly. If sent to us, we forward them to the brand and act on our side without undue delay.

Changes to this notice

This notice is updated whenever the service or the processing described here changes. The date of the current version is shown above.