Last updated: 28 September 2026

Privacy & Cookie Policy

This policy explains how we process the personal data of visitors to stramba.yachts and of people who contact us through the form on this website, in accordance with Regulation (EU) 2016/679 (the "GDPR") and Italian Legislative Decree 196/2003 as amended.

1. Data controller

STRAMBA S.r.l., VAT no. IT04156810402, registered in Riccione (RN), Italy ("STRAMBA", "we" or the "Controller").

For any request concerning your personal data, please contact us through the contact form on this website, writing "Privacy request" in your message, or by post to the Controller's registered office.

2. What data we process

Data you provide through the contact form: full name, email address, phone number (optional), the interests you select (test sail, purchase, events, Futura Crew, press/partner), preferred date or port, and the content of your message.

Browsing data: the systems that run this website automatically collect some technical data (for example IP address, browser type, date and time of the request, pages visited). This data is used only to operate the website and protect it from abuse, not to identify or profile you.

Please do not include in your message any special categories of data (for example health information) that are not needed for your request.

3. Why we process it and on what legal basis

• To answer your requests and organise test sails, meetings and events, or provide purchase information: processing is necessary to take steps at your request before a possible contract (Art. 6(1)(b) GDPR).
• To send you updates about Futura, the test sail calendar and events (Futura Crew): only if you choose to by ticking the optional box, based on your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time without affecting any other processing.
• Website security and operation, and prevention of abuse and spam: our legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations and, where necessary, establishing or defending legal claims (Art. 6(1)(c) and 6(1)(f) GDPR).

4. Do you have to provide your data?

Your name and email are needed so that we can reply: without them we cannot handle your request. All other form fields, and consent to receive updates, are optional.

5. How we process your data

Data is processed electronically, with appropriate technical and organisational security measures, and only by people authorised by the Controller. We do not carry out profiling or decisions based solely on automated processing.

6. Who we share your data with

We never sell or publish your data. It may be processed on our behalf, as data processors, by technical service providers:

• Cloudflare, Inc. — website hosting and network protection;
• Web3Forms — a service that receives the form data and forwards it to the Controller by email;
• the Controller's email provider, where requests are received and handled.

Data may also be accessed by the Controller's advisers and collaborators bound by confidentiality, and by public authorities where required by law.

7. Transfers outside the European Union

Some of the providers listed above may process data outside the European Economic Area, for example in the United States. In such cases the transfer is based on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework, for participating providers) or on the Standard Contractual Clauses approved by the Commission.

8. How long we keep your data

• Form requests: for as long as needed to handle them and then for no longer than 24 months after the last contact, unless a contractual relationship follows (in which case statutory retention periods apply).
• Updates (Futura Crew): until you withdraw your consent.
• Browsing data: for the technical time needed to operate and secure the website, according to the hosting provider's policies.

9. Your rights

At any time you may ask the Controller to access, rectify or erase your data, restrict its processing, receive it in a machine-readable format (portability), object to processing based on legitimate interest, and withdraw your consent to updates (Arts. 15–22 GDPR). To exercise these rights, use the contact details in section 1.

If you believe the processing breaches data protection law, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

10. Cookies

This website does not use profiling, marketing or analytics cookies, and does not embed third-party content that sets them (videos, maps or social media). Fonts, images and videos are served directly from our own domain.

Our hosting provider, Cloudflare, may set technical cookies that are strictly necessary for website security, for example to distinguish human traffic from automated traffic. The law does not require consent for these cookies, which is why this website does not show a cookie banner. You can manage or delete cookies at any time in your browser settings.

11. Changes to this policy

We may update this policy, for example when we add new features to the website. The date of the latest update is shown at the top of this page.