Privacy notice

Data controller

The data controller is Edoardo Rinaldi, contactable at hello@tramaproof.com.

Data we collect

Through the two forms we collect the company name, the contact name and the work email address, together with the role and the message where these are provided. Through the readiness check we collect the work email address and the six answers given, with the score they produce. We also record which language version of the site was used and the date of submission.

No other personal data is collected from visitors. The application records no IP addresses, device identifiers or browsing behaviour. Our hosting and network providers process connection data, including IP addresses, transiently for service delivery and security.

Requests for access to the platform

If you press “Request access with Google” on the sign-in page of the platform, we receive from Google your name, your email address and, if your Google account has one, your profile picture. No account is created. We use these data only to answer your request for access.

The legal basis is your request and the steps you ask us to take before a possible contract (Article 6(1)(b) GDPR). We keep the request for 12 months from the date you first sent it, then delete it automatically. The data are stored in the European Union.

Cookies and analytics

This website sets two cookies. “trama_locale” remembers whether you read it in English or Italian: the language is chosen from the country of your connection on your first visit and from your own choice after that, and it expires after a year. “trama_consent” remembers the choice you make in the cookie banner and expires after six months. Neither holds anything else or identifies anybody. The site uses no analytics, advertising or tracking services; if either is ever added, it will run only with your consent, and the cookie page lists every cookie by name. Web fonts are served from our own infrastructure, so visiting a page discloses nothing to a third-party provider.

Purpose and legal basis

The data is used to respond to enquiries about the Design Partner Program, to follow up once on a readiness check result and, where discussions continue, to evaluate a working relationship. It is not used for marketing lists or profiling, and it is neither sold nor disclosed to third parties for their own purposes.

The legal bases are Article 6(1)(b) GDPR, for steps taken at the request of the data subject prior to entering into a contract, and Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries addressed to us.

Processors and processing locations

All processing takes place within the European Union. The same requirement governs the Tramaproof platform itself.

We use a small number of specialist providers, each bound by a data processing agreement. The current list of named providers is available on request and forms part of the contractual documentation for customers.

• Managed database platform — Ireland
• Website hosting and content delivery — Germany
• Object storage for documents and published artefacts — Italy
• DNS and transactional email delivery — European Union

Retention

Data submitted through the forms is retained for as long as it remains relevant to the enquiry and to any discussions that follow, and in any case for no longer than 24 months from the date of submission, after which it is deleted automatically. It is erased earlier on request, and where no contact results the record is removed.

Rights of the data subject

You may request access to the personal data we hold about you, its rectification or erasure, the restriction of processing and its transmission in a portable format. Where processing relies on our legitimate interest, you may object to it.

Requests should be sent to hello@tramaproof.com and are answered within one month, in accordance with Article 12(3) GDPR. No account or form is required. You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

Data processed on behalf of our customers

Where Tramaproof contacts a supplier at the request of a brand using the platform, that brand determines what is collected and why and acts as controller; Tramaproof acts as processor on its instructions. Requests concerning that data are best addressed to the brand directly. If sent to us, we forward them to the brand and act on our side without undue delay.

Changes to this notice

This notice is updated whenever the service or the processing described here changes. The date of the current version is shown above.