Privacy Policy

1. Data Controller

Federica Ziliani

Via Ronchi Fosdondo 16

42015 Correggio (RE)

Italy

VAT number (Partita IVA): IT 03134250350

Email: info@trailoffice.com

Website: trailoffice.com

Telephone: +39 340 608 8460

2. Definitions

The definitions set out in Article 4 of the General Data Protection Regulation (GDPR) apply. These include, in particular, personal data, processing, controller, processor, recipient, consent, profiling and transfer to a third country.

3. Purposes and Legal Bases

Provision of the website, stability and security: Article 6(1)(f) GDPR.

Communication through the contact form and by email: Article 6(1)(b) GDPR and, for general enquiries, Article 6(1)(f) GDPR.

Newsletter distribution and management of prospective customers: Article 6(1)(a) GDPR.

Audience measurement using Google Analytics: Article 6(1)(a) GDPR, together with the applicable rules on storing or accessing information on a user’s device.

Embedding external media from YouTube and Instagram: Article 6(1)(a) GDPR.

Affiliate marketing through Awin, Amazon and UpPromote: Article 6(1)(a) GDPR, together with applicable cookie and ePrivacy rules; Article 6(1)(f) GDPR may apply to commission accounting where appropriate.

Payment processing in the online shop through PayPal and Squarespace Payments: Article 6(1)(b) GDPR.

4. Hosting and Platform

The website is operated using Squarespace. Squarespace provides hosting, content management, security functions and basic statistical functions as a processor. Personal data may be transferred to third countries. Such transfers are based, where applicable, on a data processing agreement, adequacy decisions, the European Commission’s Standard Contractual Clauses and supplementary safeguards.

5. Log Data

When the website is accessed, we and our hosting provider process technical log data. This may include the date and time of access, the requested resource, referrer information, browser and device information, a shortened IP address where technically possible, and status codes. Processing is necessary for operation and security. The legal basis is Article 6(1)(f) GDPR. Data is deleted when it is no longer required for these purposes, unless statutory retention obligations apply.

6. Cookies and Similar Technologies

We use technically necessary cookies to provide essential website functions. Non-essential cookies and similar technologies for analytics, marketing and external media are used only after consent has been obtained through the cookie banner. You may change or withdraw your selection at any time through the cookie settings. The legal basis is Article 6(1)(a) GDPR together with the applicable Italian and EU rules governing access to or storage of information on a user’s device. Without consent, certain content or services may not function.

See also: Cookie Policy.

7. Contact

When you contact us through a form or by email, we process the information you provide in order to respond and to deal with any follow-up questions. Mandatory fields are identified as such. The legal basis is Article 6(1)(b) GDPR where the communication relates to a contract or pre-contractual steps, and Article 6(1)(f) GDPR for general enquiries. Technical service providers may receive the data where this is necessary to provide their services.

8. Newsletter via Squarespace

We offer an email newsletter. Registration uses a double opt-in procedure. The email address is required; first name and interests may be provided voluntarily for content personalisation. Squarespace is used for newsletter registration, distribution and list management and processes personal data on our behalf. Data may be transferred to third countries. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example through the unsubscribe link in each email or by contacting us using the details above. We record subscriptions, unsubscriptions and the related consent for compliance purposes.

9. Google Analytics

Subject to your consent, we use Google Analytics 4. Google uses cookies and similar technologies to analyse use of the website. We use the resulting reports to evaluate and improve our services. Data may be transferred to Google locations in third countries. Transfers are based, where applicable, on an adequacy decision, Standard Contractual Clauses and additional safeguards. IP addresses are processed in shortened form where supported. The legal basis is Article 6(1)(a) GDPR together with applicable cookie and ePrivacy rules. You may change or withdraw your consent at any time through the cookie settings. No analytics processing takes place before consent.

10. External Content

YouTube: We embed videos from YouTube. A connection to YouTube is established only after you have consented. YouTube may then process data such as your IP address, device information, referrer information and cookies. Where available, we use privacy-enhanced mode. The legal basis is Article 6(1)(a) GDPR.

Instagram: We embed content from Instagram. After consent, Instagram may process personal data and set cookies or use similar technologies. The legal basis is Article 6(1)(a) GDPR.

11. Affiliate Programmes

Amazon Associates: We use affiliate links and advertising materials from Amazon. Subject to consent, Amazon may use cookies and similar technologies to attribute orders and calculate commissions. The legal basis is Article 6(1)(a) GDPR together with applicable cookie and ePrivacy rules. Article 6(1)(f) GDPR may apply to commission accounting where appropriate.

Awin: We use affiliate links and tracking parameters from Awin. Subject to consent, Awin may use cookies and process usage data to attribute transactions. The legal basis is Article 6(1)(a) GDPR together with applicable cookie and ePrivacy rules. Article 6(1)(f) GDPR may apply to commission accounting where appropriate.

UpPromote: We use affiliate links through UpPromote. Subject to consent, cookies or similar technologies may be used and clicks and purchases may be recorded for commission accounting. The legal basis is Article 6(1)(a) GDPR together with applicable cookie and ePrivacy rules. Article 6(1)(f) GDPR may apply to commission accounting where appropriate.

Transparency notice: Affiliate links are labelled as such or are clear from the context. They do not create additional costs for you. We may receive a commission.

12. Payment Service Providers

PayPal: If you choose PayPal in the online shop, the information required to process the payment is transferred to PayPal. This may include order information, payment amount, payment method, customer information and, depending on the service selected, information used by PayPal for identity or credit checks. The legal basis is Article 6(1)(b) GDPR. Further information is available in PayPal’s privacy statement.

Squarespace Payments: We may also use Squarespace Payments, a service provided by Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland. Squarespace processes payment data, order information and technical data to execute payments securely and prevent fraud. Data may be transferred to affiliated companies outside the European Economic Area, including in the United States. The legal basis is Article 6(1)(b) GDPR. Further information is available in Squarespace’s privacy statement.

13. Recipients of Personal Data

Recipients may include Squarespace for hosting, platform services, newsletter distribution and payment processing; Google for analytics; PayPal for payment processing; and Amazon, Awin and UpPromote for affiliate services. Where a provider acts as a processor, a data processing agreement is concluded in accordance with Article 28 GDPR.

14. Transfers to Third Countries

The services named above may involve transfers of personal data to countries outside the European Economic Area. Where required, we ensure that an appropriate level of protection is provided through an adequacy decision of the European Commission, Standard Contractual Clauses and appropriate supplementary safeguards.

15. Retention Period

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Statutory retention requirements remain unaffected. After the applicable period expires, the data is deleted or anonymised unless further retention is legally required.

16. Requirement to Provide Data

You are not generally required to provide personal data. However, certain information is necessary to enter into a contract or use specific functions. Without that information, those functions or services may not be available.

17. Automated Decision-Making

We do not carry out decision-making based solely on automated processing that produces legal effects or similarly significantly affects you. Profiling takes place only where described in this Privacy Policy and, where required, on the basis of your consent.

18. Your Rights

Subject to the applicable legal requirements, you have the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR, data portability under Article 20 GDPR and objection under Article 21 GDPR. Where processing is based on consent, you may withdraw that consent at any time with effect for the future under Article 7(3) GDPR. To exercise your rights, use the contact details stated above.

19. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Italy, the competent national authority is the Garante per la protezione dei dati personali. You may also contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

20. Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk. These measures may include access controls, encryption where available, role and permission concepts, logging and regular reviews.

21. Amendments

We may update this Privacy Policy when legal requirements, service providers or website functions change. The current version will be made available on this website.

Business Information