How we handle your data

In short

Trivioquadrivio collects your personal data only when you give it to us, when you fill in the contact form, subscribe to our newsletter, register for an event. We don’t sell it, we don’t pass it to third parties for profiling, and we use it only for what you’ve asked us to do.

To know which data we have about you, change it or delete it, write to info@triq.it.

Data Controller

Data controller is Trivioquadrivio Srl, registered office at Via Carroccio 6, 20123 Milan (MI), Italy.

For any inquiry on your data: info@triq.it.

What data we collect

Contact form

When you reach out via the website form we collect: name, email, subject, message. We also store the source IP address for anti-spam purposes.

Newsletter

To send you our monthly newsletter we only collect your email. You can unsubscribe at any time via the link at the bottom of every email.

Event registration

For open-door events we collect: name, email, organisation. For paid events we also collect billing data required by tax law.

Browsing data

The website automatically records technical data (browser, OS, pages visited) to ensure proper functioning and aggregate analytics. See our Cookie Policy for details.

Why we process your data

• To reply to you, legal basis: explicit consent (contact form) or contract performance (event registration);
• To send our newsletter, legal basis: explicit consent;
• To meet legal obligations, invoicing, tax requirements;
• To improve the website, aggregated, anonymous analytics, legal basis: legitimate interest.

How long we keep it

• Contact form: 24 months from last contact;
• Newsletter: until you unsubscribe;
• Event registration: 5 years for tax obligations (paid events), 24 months for free events;
• Browsing data: see Cookie Policy.

Who we share it with

Your data stays with us. We share it only with the technical providers we need to run our services:

• Hostinger, website hosting (EU servers);
• Mailchimp / newsletter provider, email delivery (EU/US servers under EU standard contractual clauses);
• Google Analytics, anonymous aggregated analytics (see Cookie Policy);
• Accountant and legal advisors, only for regulatory obligations.

Each one is appointed as Data Processor where required. We don’t transfer your data outside the EU without proper safeguards (EU standard contractual clauses).

Your rights

You have the right to:

• ask us which data we hold (access);
• ask for correction of inaccurate data;
• ask for deletion of your data (“right to be forgotten”);
• ask for processing limitation;
• withdraw consent at any time (e.g. for newsletter);
• ask for data portability in machine-readable format;
• file a complaint with the Italian DPA (garanteprivacy.it) if you believe processing is unlawful.

Security

The website is served via HTTPS. Admin account passwords are stored as hashes. The database lives on a managed EU server with daily encrypted backups. Nothing is foolproof, but we commit to reasonable technical measures.

Changes to this policy

If we change something material, we’ll flag it on the website. The date at the top always reflects the latest update.