Privacy notice

1. Controller and contacts

The data controller is Giuseppe Stillitano, operating under the trebarrasette® trademark, with registered office at Cd.a Trapezzoli Nord, 89134 Reggio di Calabria (RC), Italy, VAT no. 03258120801.

For information and requests relating to personal data: hello@trebarrasette.com.

2. Scope of this notice

This notice covers the trebarrasette.com website, the landing pages and campaign forms that refer to it, and the handling of enquiries and sign-ups received through these channels.

Any initiatives with additional purposes or processing methods are accompanied by specific information before data are collected.

3. Information and project enquiries

We process the data you share through forms or correspondence: first name, last name, email, company or project, website, description of the request, services of interest, timelines and budget range.

We use them to reply, understand your needs, assess the project and prepare any proposals.

The legal basis is taking pre-contractual steps at the data subject’s request, where applicable. For general correspondence and dealings with company contacts, the legal basis is our legitimate interest in handling enquiries and professional relationships.

Providing the data marked as mandatory is necessary to handle the request; other data are optional.

Enquiries that do not lead to a contractual relationship are kept for [proposal: 24 months from the last meaningful exchange]. Data relating to contractual relationships follow the terms applicable to managing the relationship, legal obligations and any protection of rights.

4. Collaboration proposals and Freelance Hub

We process first name, last name, email, location, portfolio, links to professional profiles, skills, experience, project information and any further content you choose to share.

We use these data to assess the collaboration proposal and manage any pre-contractual contacts, on the basis of pre-contractual steps requested by the data subject.

For the initial assessment we keep the profile for [proposal: up to 12 months from receipt, unless the need to keep it ends earlier].

With the separate consent provided in the form, we may keep the profile for future opportunities and contact you about collaborations consistent with your skills. For this purpose retention is [proposal: 24 months from consent or from a later voluntary profile update], unless withdrawn earlier.

Consent for future opportunities is optional and can be withdrawn by writing to hello@trebarrasette.com.

Please do not include unnecessary sensitive information or confidential materials belonging to third parties.

5. Newsletter and promotional communications

If you subscribe, we use the email address and any identifying data provided to send you content, updates, initiatives and promotional communications relating to trebarrasette.

The legal basis is consent. Subscription is optional and does not affect your ability to send enquiries or collaboration proposals.

The newsletter is managed through Brevo. You can withdraw consent using the unsubscribe link in the emails or by writing to hello@trebarrasette.com.

[Proposed configuration to verify: we do not use individual tracking of newsletter opens and clicks.]

We keep sending data until you unsubscribe and periodically review inactive contacts to assess whether they still need to be kept [proposal: every 24 months, with inactivity criteria to be defined without assuming open and click tracking].

After unsubscribing, minimal information may be kept to honour the objection and document consent, with limited access and for [period or criterion to be defined].

6. Website statistics

With your consent we use PostHog Cloud, EU region, to analyse pages visited and selected events, such as clicks on contact actions and successful form submissions.

Pseudonymous identifiers and technical information about navigation, the device and the browser may be processed. We do not intentionally send names, emails, phone numbers or form contents to PostHog, and we do not associate events with contacts stored in Brevo.

Session recording is disabled.

The legal basis is consent, which you can refuse or withdraw through “Cookie preferences”. Refusal does not prevent browsing or submitting forms.

Event data are kept for [actual duration to configure and verify in PostHog]. Retention periods for tools stored on the device are set out in the Cookie Policy.

7. Operation and security

To provide the website and prevent abuse, technical data such as IP addresses, request times and error logs may be processed, limited to what is necessary for operation and security.

The legal basis is our legitimate interest in ensuring the availability and protection of the service.

The website is hosted by [hosting provider]. Logs are kept for [actual duration or criterion].

8. Recipients and providers

Data are accessible to authorised people at trebarrasette in connection with their respective activities.

We use providers for hosting and infrastructure, form and contact management, sending communications and statistics. Form data are stored in Brevo; for statistics we use PostHog.

When they process data on our behalf, providers act as processors under the applicable agreements. Data may also be disclosed where required by law or necessary to protect rights.

[Add any email services, form copies and automation tools actually used.]

9. International transfers

Using providers may involve processing or access from countries outside the European Economic Area. Where this occurs, those transfers must rely on the safeguards provided by the GDPR.

[Complete by stating the actual transfers and the relevant mechanism: an applicable adequacy decision, or standard contractual clauses and additional measures, according to the providers’ agreements.]

You can request information on the applicable safeguards by writing to hello@trebarrasette.com.

10. Rights

Where provided by law, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interest and, at any time, to direct marketing.

You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, write to hello@trebarrasette.com. We reply within the time limits set by law, normally within one month.

You may also lodge a complaint with the Italian Data Protection Authority (Garante): https://www.garanteprivacy.it.

11. Updates

This notice is updated when the processing described changes. Any new purposes are communicated before the related processing starts, collecting a new consent where required.