Privacy Policy

1. Introduction

SlowTEA Alliance (STA) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website or contact us through our online contact form.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for the processing of personal data is:

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the email address above.

3. Personal Data We Collect

When you contact us through our website, we may collect the following personal data:

• Full name
• Email address
• Country of residence or professional activity
• Organization or company name, if provided
• Professional role or capacity
• The subject and content of your message
• Any additional information you voluntarily include in your communication

Contacting us is voluntary. Fields marked as required are needed to submit the form; without them, you can contact us by email instead.

Certain technical information, such as your IP address, browser type and access logs, may also be processed as necessary for the operation and security of the website, including measures to prevent spam and automated abuse.

To limit repeated contact form submissions, our anti-spam protection uses a one-way hash derived from the IP address and the time of the most recent submission attempt. These technical records are kept on the server and do not contain your name, email address or message.

4. Purposes of Processing

We process personal data for the following purposes:

• To receive and respond to enquiries concerning SlowTEA Alliance, its mission, activities and programmes
• To communicate with individuals, professionals, organizations and institutions interested in our work
• To manage and follow up on correspondence
• To maintain the security and proper functioning of our website
• To comply with applicable legal obligations

The information you provide will be used to respond to your enquiry and manage any related follow-up communication.

We do not use such information for unrelated purposes without an appropriate legal basis.

Technical data is used to keep the website secure and prevent spam or automated abuse.

5. Legal Basis for Processing

We process contact details and messages on the basis of our legitimate interest in responding to enquiries you initiate and managing the related follow-up (Article 6(1)(f) GDPR).

Our legitimate interest in protecting the website against spam and abuse is the basis for processing technical security data (Article 6(1)(f) GDPR). We do not use form submissions for marketing.

6. Data Sharing and Service Providers

We do not sell personal data.

Personal data may be accessible to service providers who support the operation of our website and communications, such as hosting providers, contact form services and email providers, where necessary for the purposes described in this Policy.

Contact enquiries are also stored in a restricted administrative dashboard hosted on assoteinfusi.it, accessible only to authorised operators. A protected server queue retains a copy until transfer to that dashboard succeeds.

Such providers may process personal data on our behalf or in accordance with their own applicable responsibilities. We take appropriate steps to ensure that personal data is handled in accordance with applicable data protection requirements.

We may also disclose personal data where required by law or where necessary to establish, exercise or defend legal claims.

7. International Data Transfers

The website is hosted in Italy. Messages delivered to Gmail may be processed outside the European Economic Area. Google describes its adequacy-based transfer arrangements, including the EU–US Data Privacy Framework, and standard contractual clauses in its data transfer frameworks.

8. Data Retention

Enquiries are retained for the time needed to respond and complete the related follow-up, then deleted unless a legal obligation requires longer retention.

Anti-spam identifiers cease to be used after one minute. Expired entries are automatically removed on the next valid form submission attempt; no form messages are stored in these records.

9. Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

10. Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data
• Request the correction of inaccurate personal data
• Request the deletion of personal data
• Request the restriction of certain processing activities
• Object to certain processing activities
• Request data portability, where applicable

The availability and scope of these rights depend on the applicable legislation and the circumstances of the processing.

To exercise your rights, please contact us at info@slowtea-alliance.org. We may need to verify your identity before responding.

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante) or your competent supervisory authority.

11. Cookies and Similar Technologies

This courtesy website does not set cookies or use local storage, session storage, analytics tools, advertising trackers or browser fingerprinting.

Images, styles and scripts are served from this website, and the pages use system fonts. Social media links are ordinary links, not embedded widgets; opening one takes you to an external website whose own privacy and cookie policies apply.

The contact form does not create cookies or save the information you enter in browser storage. Its anti-spam checks operate on the server and do not use external CAPTCHA services or browser tracking identifiers.

The decorative ladybug animation uses mouse position within the page solely to move the image. This information is not retained or transmitted to the server.

There are no optional cookies or tracking features to enable in this version of the website. If we introduce non-essential cookies or tracking technologies, we will update this Policy and obtain any required consent before activating them.

12. Links to External Websites

Our website may contain links to third-party websites. SlowTEA Alliance is not responsible for the privacy practices or content of external websites.

We encourage visitors to consult the privacy policies of any third-party websites they access.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, website functionality or applicable legal requirements.

The latest version will be published on this page, together with the date of the most recent update.

14. Contact

If you have any questions about this Privacy Policy or how SlowTEA Alliance processes personal data, please contact us: