Privacy Policy

This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“General Data Protection Regulation”, hereinafter “GDPR”) and the applicable Italian legislation on the protection of personal data, Legislative Decree 196/2003 and subsequent amendments, in particular those introduced by Legislative Decree No. 101/2018.

Types of personal data collected

Browsing data

The processing of personal data of users who visit and browse the website is limited to so-called browsing data, the transmission of which is necessary for the operation of the IT systems and programs required for the functioning of the Site, but which, by their very nature, may, if associated with other data, allow users to be identified.

This includes IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server and other parameters relating to the user’s operating system and IT environment.

These data are used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning. Such data may also be used to ascertain liability in the event of computer crimes against the site, in accordance with the procedures in force with the competent Authorities.

Except for this case, browsing data are stored for no longer than is necessary for the purposes for which they are collected and subsequently processed, in compliance with applicable legislation.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of email to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, participate in surveys or express opinions. By sending emails to the other email addresses indicated on this website, you consent to the processing of the data sent for the purposes and in the manner described in this document.

Optional, explicit and voluntary registration through the forms on the Site entails the acquisition of all data entered in the fields you completed, such as name, surname, email address, telephone number and any other information the user chooses to provide, and processing in accordance with this document.

Purposes of processing

The collected data are used for the following purposes:

Performance of the contract and/or fulfillment of contractual obligations

The collected data will be used to manage payments, handle the user’s contact/information requests and allow registration on the website. They will also be used for the purchase of products and for all obligations connected with the performance of the contractual relationship, including pre- and post-contractual activities; furthermore, they are essential to carry out the operations necessary to fulfill the user’s order.

Compliance with legal obligations

The data will be used to comply with obligations provided for by laws, regulations, national and EU legislation, and orders and provisions of the competent Authorities.

They will also be used to manage the necessary administrative, accounting, civil and tax obligations, taking into account accounting duties and related requirements.

Pursuit of the data controller’s legitimate interest

Data collection is also necessary to prevent fraudulent or harmful activities against the site, to exercise the Controller’s rights (e.g., the right of defense in court), to manage and control risks by preventing possible fraud, insolvency or breaches, and to manage further needs related to warranties, complaints or any other needs following the performance of the contract.

Marketing and statistics

The Controller may use the acquired data to advertise and promote products through the newsletter service or any other commercial and promotional communication relating to products/services of the Controller similar to those already used, subject to your consent by checking the newsletter consent box. The user’s consent is optional and does not in any way affect browsing the Site.

In addition, the use of the acquired data will serve to compile statistics necessary to monitor the progress and development of commercial activity.

Methods of processing

Personal data are processed on paper and electronically through systems implementing security measures aimed at protecting your confidentiality.

All necessary security measures will be adopted to prevent data loss, unlawful or incorrect use, and unauthorized access.

Personal data will not be subject to any further processing beyond what is stated in this document without prior notice and, where required, consent. The Controller undertakes to respect and protect data confidentiality in accordance with the applicable legal provisions.

Legal basis for processing

The provision of data is mandatory for all purposes required by legal and contractual obligations. Any refusal to provide them, in whole or in part, may result in the impossibility to perform the contract or to correctly carry out the necessary related obligations.

Location

Data are processed at Redbox’s operating offices and will not be disclosed outside them. The consumer may obtain information about the place to which their data have been transferred and a copy of such data by writing to Redbox, with registered office in Rome – Via Laurentina, 191 Km 27.200 – 00071 Pomezia (RM), Tax Code and VAT No. IT10585591000.

Data retention period

Data are processed and stored for the time required by the purposes for which they were collected, i.e., until the performance of the sales contract has been completed and the purposes attributable to the Controller’s legitimate interest have been satisfied.

All the above data and other data constituting the legal relationship with Redbox will also be retained after termination of the legal relationship in order to fulfill all obligations connected with or arising from the conclusion of the contractual relationship itself and for tax, judicial and defense needs, for a maximum of 2 years from termination of the legal relationship.

User rights

Users may request the removal, deletion, anonymization or blocking of data and any other operation useful to guarantee their confidentiality.