This Privacy Notice explains how TriwerWorks Ltd ("we", "us") processes personal data when you visit our website triwerworks.com or contact us. The privacy notices for our campaign websites (for example gratis-aperitivo.de, gratis-getraenkekarten.de and gratis-poster.com) are published on those websites. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Cyprus Law 125(I)/2018 on the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of such Data.
The controller responsible for the processing of your personal data is:
We have not appointed a data protection officer, as we are not required to do so. You can reach us on all data protection matters at the email address above.
Our website is hosted on the content delivery network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA ("Cloudflare"). When you access our website, your browser automatically transmits technical data to the web server, which is recorded in server log files: the IP address of your device, date and time of the request, the requested page or file, the referring URL, the browser type and version, the operating system and the transferred data volume.
This data is processed to deliver the website to your device, to ensure the stability and security of our systems, and to detect and prevent attacks and abuse. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and reliable operation of our website). Log data is kept only for as long as is necessary for these purposes and is then deleted. Cloudflare processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Cloudflare operates data centres worldwide, including in the United States. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, and the data processing agreement also incorporates the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR).
Our website does not set cookies. We do not use web analytics, tracking pixels, advertising technologies or embedded third-party content such as social media plug-ins or external fonts, and we do not create user profiles.
When you navigate from a project page back to the home page, our navigation script stores a single technical value ("scrollTo") in the local storage of your browser so that the home page can scroll to the section you selected. This value contains no personal data, is not transmitted to us or to anyone else, and is deleted immediately after use. It is strictly necessary for the function you requested, so no consent is required. You can block or delete local storage at any time in your browser settings.
You can contact us through the contact form on our home page. The form asks for your name, your email address and a message, and optionally your company, your phone number and the topic you would like to talk about. We use this data solely to handle your enquiry and any follow-up correspondence. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract with you or steps prior to entering into a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries addressed to us).
The contact form is operated for us by Formspree, Inc., USA ("Formspree"). When you submit the form, the data you entered is sent to Formspree, stored in our Formspree inbox and forwarded to our email mailbox. Formspree also processes technical data (such as your IP address and the time of submission) to deliver the message and to prevent spam and abuse. Formspree is located in the United States, so your data is transferred to a third country. This transfer is based on the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). Further information is available in Formspree's privacy policy at formspree.io/legal/privacy-policy.
We delete enquiries once they have been fully dealt with and no further correspondence is required, unless we are obliged to retain them for longer, for example because they became part of a contract.
If you contact us by email, we process the personal data contained in your message (in particular your name, email address and the content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries relating to a contract or pre-contractual steps and otherwise Art. 6(1)(f) GDPR. Emails are deleted once the matter has been fully dealt with and no statutory retention obligation applies.
We share personal data only where this is necessary for the purposes described in this notice, namely with:
We do not sell personal data and we do not share it with third parties for their own marketing purposes.
Our hosting and contact form providers are located in the United States, and their processing may take place there. The transfers to Cloudflare and to Formspree are safeguarded as described in sections 2 and 3 (EU-U.S. Data Privacy Framework certification and standard contractual clauses). Apart from this, we do not transfer personal data outside the European Economic Area.
We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as we are required to do so by law. The specific retention periods are stated in the respective sections above. Once the purpose no longer applies and no retention obligation exists, the data is deleted.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Our website is delivered exclusively over encrypted connections (HTTPS), access to personal data is limited to persons who need it for the purposes described here, and our processors are contractually bound to equivalent security standards.
Under the GDPR and the Cyprus Law 125(I)/2018, you have the following rights with regard to your personal data:
To exercise these rights, please contact us at . We will respond without undue delay and in any event within one month of receiving your request.
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes applicable law. The supervisory authority responsible for us is:
Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
Website: www.dataprotection.gov.cy
You may also contact the supervisory authority of the EU member state in which you live or work.
For any questions about this notice or the processing of your personal data, please contact:
Postal business-to-business advertising as part of joint marketing campaigns, including the dispatch of information and promotional material to hospitality businesses.
Business address of the venue, other publicly available contact details (such as telephone number and email address), industry data and opt-out information.
The data is obtained exclusively from publicly accessible sources such as business directories, company websites and Google Maps listings.
Art. 6(1)(f) GDPR (legitimate interest in postal direct marketing in the business-to-business sector). You may object to processing for direct marketing purposes at any time.
External service providers (such as printers, lettershops and postal service providers) engaged to carry out the postal mailing.
The data is deleted no later than 6 months after the end of the campaign, or added to a suppression list to prevent future advertising contact.
You have the right of access, the right to rectification, erasure and restriction of processing, the right to object, and the right to lodge a complaint with a data protection supervisory authority.
You may object to the processing of your data for direct marketing purposes at any time, without any formal requirements, by email or by post to either of the addresses stated above.
The essence of the joint controllership arrangement pursuant to Art. 26 GDPR is available on request.
We may update this Privacy Notice from time to time to reflect changes in our practices, in the services we use or in the law. The current version is always available on this page, together with the date of the last update.
Last updated: 7 September 2026