Last updated: 28 September 2026

Privacy & Cookie Policy

This policy explains how we process the personal data of visitors to stramba.blue and of people who contact us through the form on this website, in accordance with Regulation (EU) 2016/679 (the "GDPR") and Italian Legislative Decree 196/2003 as amended.

1. Data controller

STRAMBA S.r.l., VAT no. IT04156810402, registered in Riccione (RN), Italy ("STRAMBA", "we" or the "Controller").

For any request concerning your personal data, please contact us through the contact form on this website, writing "Privacy request" in your message, or by post to the Controller's registered office.

2. What data we process

Data you provide through the contact form: full name, email address, company and phone number (optional), the profile you select (investor, shipowner, yacht client, partner, press) and the content of your message.

Browsing data: the systems that run this website automatically collect some technical data (for example IP address, browser type, date and time of the request, pages visited). This data is used only to operate the website and protect it from abuse, not to identify or profile you.

Please do not include in your message any special categories of data (for example health information) that are not needed for your request.

3. Why we process it and on what legal basis

• To answer your messages and, where relevant, take steps at your request before a possible contract (Art. 6(1)(b) GDPR), or pursue our legitimate interest in responding to business enquiries from investors, partners and press (Art. 6(1)(f) GDPR).
• Website security and operation, and prevention of abuse and spam: our legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations and, where necessary, establishing or defending legal claims (Art. 6(1)(c) and 6(1)(f) GDPR).

4. Do you have to provide your data?

Your name and email are needed so that we can reply: without them we cannot handle your request. All other form fields are optional.

5. How we process your data

Data is processed electronically, with appropriate technical and organisational security measures, and only by people authorised by the Controller. We do not carry out profiling or decisions based solely on automated processing.

6. Who we share your data with

We never sell or publish your data. It may be processed on our behalf, as data processors, by technical service providers:

• Cloudflare, Inc. — website hosting and network protection;
• Web3Forms — a service that receives the form data and forwards it to the Controller by email;
• the Controller's email provider, where requests are received and handled;
• YouTube (Google) — our videos are hosted on YouTube. On the home page the video loads, in privacy-enhanced mode, and starts muted when it scrolls into view; at that moment your browser connects to YouTube, which may set cookies according to its own policy.

Data may also be accessed by the Controller's advisers and collaborators bound by confidentiality, and by public authorities where required by law.

7. Transfers outside the European Union

Some of the providers listed above may process data outside the European Economic Area, for example in the United States. In such cases the transfer is based on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for participating providers) or on the Standard Contractual Clauses approved by the Commission.

8. How long we keep your data

• Form requests: for as long as needed to handle them and then for no longer than 24 months after the last contact, unless a contractual relationship follows (in which case statutory retention periods apply).
• Browsing data: for the technical time needed to operate and secure the website, according to the hosting provider's policies.

9. Your rights

At any time you may ask the Controller to access, rectify or erase your data, restrict its processing, receive it in a machine-readable format (portability) and object to processing based on legitimate interest (Arts. 15–22 GDPR). To exercise these rights, use the contact details in section 1.

If you believe the processing breaches data protection law, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

10. Cookies

This website does not use profiling, marketing or analytics cookies, and does not embed third-party content that sets them until you choose to play a video (see section 6). Fonts, images and videos are served directly from our own domain.

Our hosting provider, Cloudflare, may set technical cookies that are strictly necessary for website security, for example to distinguish human traffic from automated traffic. The law does not require consent for these cookies, which is why this website does not show a cookie banner. You can manage or delete cookies at any time in your browser settings.

11. Changes to this policy

We may update this policy, for example when we add new features to the website. The date of the latest update is shown at the top of this page.