Passer au contenu Passer au pied de page

. Data Controller

The data controller is:

Trireme Spresso
Website: www.triremespresso.com
Contact email: info@triremespresso.com

 


2. Types of data collected

Through the website www.triremespresso.com the following categories of data may be collected and processed:

  1. Browsing data

    • IP address
    • Date and time of access
    • Pages visited
    • Browser and device used
    • Any technical logs generated by the system
  2. Data provided voluntarily by the user
    Through contact forms, information request forms, newsletter subscriptions, or direct email submissions, the following may be collected:

    • First and last name
    • Email address
    • Phone number (if there is a dedicated field)
    • Any other information freely included in the message
  3. Cookies and similar technologies
    The website may use technical cookies and, subject to consent, profiling cookies and/or third-party cookies (e.g. for statistical analysis or multimedia functionality).
    For more information, see the"Cookies"section and the dedicatedCookie Policy.


3. Purpose of processing

Personal data collected through the website www.triremespresso.com is processed for the following purposes:

  1. Handling contact and assistance requests

    • Responding to requests for information sent via contact forms or email
    • Provide pre- and post-sales assistance, information on services, quotes, collaborations
  2. Technical management and site security

    • Enable the correct use of the website and its features
    • Ensure system security, prevent or detect fraudulent activity or abuse
    • Perform technical maintenance
  3. Marketing activities (subject to consent)

    • Sending newsletters and promotional communications relating to Trireme Spresso services
    • Communication of updates on news, offers, events, and initiatives
      (The user may revoke their consent at any time by using the unsubscribe link in the emails or by writing to the Data Controller.)
  4. Anonymous and aggregated statistical analyses

    • Collection of anonymous statistical information on the use of the site (most visited pages, time spent on the site, approximate geographical location, etc.)
    • Improvement of user experience and content offered

4. Legal basis for processing

The processing of personal data is based on the following legal grounds, pursuant to Regulation (EU) 2016/679 ("GDPR"):

  1. Execution of pre-contractual or contractual measures

    • When processing is necessary to manage user requests for information, quotes, contacts, and assistance.
  2. Compliance with legal obligations

    • When processing is necessary to comply with obligations under laws, regulations, or EU regulations.
  3. Consent of the data subject

    • For marketing activities, sending newsletters, and use of non-technical or profiling cookies, where required.
  4. Legitimate interest of the Data Controller

    • For the technical management and security of the site, prevention of fraud and abuse, protection of the rights of the Owner.

5. Processing methods

Personal data is processed using electronic and/or paper-based tools, with organizational and logical methods strictly related to the purposes indicated.

The Data Controller shall implement appropriate technical and organizational security measures to:

  • Ensuring data confidentiality, integrity, and availability
  • Prevent unauthorized access, disclosure, modification, or destruction of data

6. Data retention

Personal data will be stored for the time strictly necessary to achieve the purposes for which it was collected and, in particular:

  • Contact details: for the time necessary to manage the request and, subsequently, for a period not exceeding 24 months, unless further contractual relations arise.
  • Data for marketing purposes: until the user revokes consent and, in any case, no later than 24 months after the last significant interaction.
  • Browsing data: for the period necessary for technical, security, and statistical analysis purposes, according to the configurations of the server and any analysis services (e.g., system logs).

Once these terms have expired, the data will be deleted or anonymized in an irreversible manner, except where legal obligations require further retention periods.


7. Communication and dissemination of data

Personal data may be disclosed to:

  • Collaborators and employees of the Data Controller, duly authorized and trained
  • External service providers(e.g., IT service providers, hosting providers, newsletter platforms, consultants) acting as data processors pursuant to Article 28 of the GDPR.
  • Public authorities and supervisory bodies, if required by law or by orders from the authorities

The data will not be disclosed or published, unless explicitly provided for in specific sections of the website or in additional dedicated information notices.


8. Transfer of data to third countries

If the use of certain services (e.g., newsletter services, statistical analysis, or hosting) involves the transfer of data to countries outside the European Economic Area (EEA), the Data Controller will ensure that such transfer takes place in compliance with the GDPR, in the presence of:

  • Adequacy decisions by the European Commission, or
  • Standard contractual clauses approved by the European Commission, or
  • Other appropriate safeguards provided for in the Regulation.

More detailed information may be requested by writing to the Data Controller at the addresses indicated.


9. Rights of the data subject

As a data subject, you may exercise your rights under Articles 15-22 of the GDPR at any time, including:

  • Right of access: obtain confirmation as to whether or not personal data concerning him/her are being processed and, if so, receive a copy of the data being processed.
  • Right to rectification: obtain the correction of inaccurate personal data or the integration of incomplete data.
  • Right to erasure (“right to be forgotten”): obtain the erasure of personal data when the conditions laid down by law are met.
  • Right to restriction of processing: request that data be stored only, without further use, in the cases provided for by the GDPR.
  • Right to data portability: receive personal data in a structured, commonly used, and machine-readable format and transmit it to another controller, where technically feasible.
  • Right to object: object at any time to processing based on the legitimate interest of the Controller or carried out for direct marketing purposes.
  • Right to withdraw consent: withdraw consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal.

To exercise their rights, users can send a request to the Data Controller at the following email address: info@triremespresso.com 


10. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data violates current legislation, you have the right to lodge a complaint with the competent Data Protection Authority, in accordance with the procedures indicated on the Authority's official website.


11. Cookies

The website www.triremespresso.com uses technical cookies to enable the website to function correctly and, subject to the user's consent, may use:

  • Profiling cookies
  • Third-party cookies (e.g., for traffic analysis services, multimedia content, social media, etc.)

When you first access the site, a banner is displayed that allows you to:

  • Accept all cookies
  • Reject unnecessary cookies
  • Customize your preferences

For more detailed information on the types of cookies used, their purposes, and how to manage or revoke consent, users are invited to consult the dedicatedCookie Policy.


12. Mandatory provision of data

  • The provision of data requested in contact forms isnecessaryin order to respond to user requests. Failure to provide such data will make it impossible to obtain the requested information.
  • The provision of data for marketing purposes (subscription to the newsletter, sending of promotional communications) isoptional. Failure to provide such data will not affect the use of the main services of the website, but will prevent the receipt of promotional communications.

13. Automated decision-making processes and profiling

As a rule, the Data Controller does not use automated decision-making processes that produce legal effects on the user or similarly significantly affect him/her.

Any profiling activities for marketing purposes based on browsing behavior or preferences expressed will only be carried out with the user's explicit consent and in compliance with the provisions of the GDPR. Further details, where applicable, will be provided in specific information notices or in the Cookie Policy.


14. Links to third-party websites

The website www.triremespresso.com may contain links to third-party websites, for which the Owner is not responsible for the content, personal data processing policies, and security measures adopted.

Users are advised to carefully read the relevant privacy policies before providing personal data on such external websites.


15. Changes to this Privacy Policy

The Data Controller reserves the right to modify or update this Privacy Policy at any time, including in compliance with any regulatory changes or changes in the organization of processing.

Changes will be published on this page with an indication of the date of the last update. Users are therefore invited to consult this section periodically.


16. Contacts

For any questions, requests for clarification, or to exercise your rights regarding personal data protection, you can contact the Data Controller at the following addresses: