Privacy Policy

Privacy Policy of store.visionbox.it

Last Update: February 2023
This page has been translated with automated translation systems. For any dispute the original Italian version is authentic.

Data Controller

The data controller is Visionbox.it srl Benefit | Fully paid-up share capital € 30.000 i.v. – viale Napoli, 83 – 61121 Pesaro (PU) – Italy – VAT no. 02641190414

Data Controller’s email address:  privacy@visionbox.it

What this policy is about

Your privacy is important to us. This is why we want to be transparent in the way we collect, use and share information about you. The purpose of this information, provided pursuant to Article 13 of EU Regulation 2016/679 – General Data Protection Regulation (“Regulation”), is to help you understand:

This privacy policy applies to the information we collect about you when you use our products or services or interact with www.visionbox.it unless you receive a different privacy policy. This policy also explains your choices regarding the information we collect about you, including how you can object to certain uses of your information and how you can access and update this information. If you do not agree with this policy, do not access, use or interact with www.visionbox.it and the products or services it offers.

In this policy, when we refer to “Visionbox Store”, “we”, “this Site” or “the Site”, we mean Visionbox.it srl Benefit | Fully paid-up share capital € 30.000 i.v. – viale Napoli, 83 – 61121 Pesaro (PU) – Italy – VAT no. 02641190414, which controls the information collected by Visionbox.it when using its Services.

What information we collect about you

We collect information about you when you provide it, when you use our services, or when other sources provide it to us, as described below.

Information provided by you

We collect information about you when you enter it into our contact forms or provide it directly to us.

The collection of personal data based on the consent of the data subject will be carried out using the “Consent Forms” that will keep the documentation relating to the consent provided by the individual. Individual consents will always be stored and documented in our systems. Given the nature of the consent, if the storage of such information is not technically provided for, the consent will, in any case, be made explicit by the User through a checkbox that does not allow the sending of the request and the consequent processing of data in the event of undeclared consent.

Information collected automatically when you use our services

Device and connection information: We collect information about your computer, smartphone, tablet or other device used to access the Site. This information includes connection type, browser, screen resolution, IP address and referral URL/abandonment page. We use this information to monitor site entry statistics and provide the best possible service that reflects the expectations of users who use the site.

Cookies and other tracking technologies: www.store.visionbox.it and our third-party partners, such as analytics, use cookies and other tracking technologies (e.g. web beacons, pixel tags) to provide functionality and/or remember your preferences, such as the language of the site.
For more information, you can refer to the cookie policy on this site, which includes instructions on how you can control or opt out of cookies and other tracking technologies that we use.

How we use the information we collect

How we use the information we collect depends in part on what services you use, how you use them, and any preferences you give us. Below are the specific purposes for which we use the information we collect about you.

Contacting the User and responding to requests

By filling in the contact form with their Data, the user consents to their use to respond to requests for information, quotes or requests of any other nature indicated by the header of the form or by the subject of the request itself.

Personal data collected: Name, surname, email address, company name, telephone number

Traffic optimisation and distribution

This type of service allows this Application to distribute its content through servers located in the territory and to optimise the performance of the same. The Personal Data processed depends on the characteristics and method of implementation of these services, which by their nature filter the communications between this Application and the User’s browser.

Given the distributed nature of this system, it is difficult to determine where content, which may contain User Personal Data, is transferred.

Cloudflare (Cloudflare Inc.)
Cloudflare is a traffic optimisation and distribution service provided by Cloudflare Inc.
Cloudflare’s integration methods provide that this filters all the traffic of this Application, that is, the communications between this Application and the User’s browser, also allowing the collection of statistical data on it.

Personal Data collected:  Tracking Tools; various types of Data as specified by the privacy policy of the service.

Place of processing: United States – Privacy Policy.

Displaying content from external platforms

This type of service enables Users to view content hosted on external platforms directly from the pages of this Application and to interact with them.

This type of service may still collect traffic data for the web pages where the service is installed, even when Users do not use it.

Google Fonts (Google Ireland Limited)
Google Fonts is a font library service provided by Google Ireland Limited that allows this Application to incorporate content of this kind on its pages.

Personal Data collected:  Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy.

Security and SPAM protection

This type of service analyses the traffic from this Website, potentially containing User Personal Data, in order to filter it from traffic, messages and content recognised as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc.

Your use of the reCAPTCHA system is subject to Google’s privacy policy and terms of use.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Statistics

The services in this section enable the Data Controller to monitor and analyse traffic data and are used to keep track of the User’s browsing behaviour.

Google Analytics (Google Inc.)
Google Analytics is a statistical service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and personalise the ads of its advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data centre or server. To learn more, you can consult the official Google documentation.

Personal Data collected: city; Usage data; browser information; device information; latitude (of the city); longitude (of the city); number of Users; session statistics; Tracking Tools.

Place of processing: Ireland – Privacy Policy – Opt Out.


Mouseflow, ApS
Mouseflow is a heat mapping and session logging service provided by Mouseflow, ApS.
Mouseflow respects the generic “Do Not Track” headers. This means that the browser can instruct the script not to collect any User data. This is a setting that is available in all major browsers.

Personal Data collected: Cookies, Usage Data and various types of Data as specified by the privacy policy of the service.

Place of processing: USA – Privacy Policy – Opt Out.

Tag management

This type of service is functional to the centralised management of the tags or scripts used on this Site.
The use of these services involves the flow of User Data through them and, where appropriate, their retention.

Google Tag Manager (Google Inc.)
Google Tag Manager is a tag management service provided by Google LLC.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Marketing

This type of service allows you to use the User Data for commercial communication purposes in different forms of advertising, such as banners, also in relation to the interests of the User.
This does not mean that all Personal Data are used for this purpose. Data and conditions of use are indicated below.
Some of the services indicated below may use Cookies to identify the User or use the technique of behavioural retargeting: that is, display advertising tailored to the interests and behaviour of the User, also detected outside this Site. For more information, we suggest you check the privacy policies of the respective services.
In addition to the opt-out options offered by the following services, the User can opt out of receiving cookies related to a third-party service, by visiting the opt-out page of the Network Advertising Initiative.

DoubleClick for Publishers (Google Inc.)
DoubleClick for Publishers is an advertising service provided by Google Inc. with which the Data Controller may conduct advertising campaigns in conjunction with external advertising networks with which the Data Controller, unless otherwise specified herein, has no direct relationship.
Users who do not wish to be tracked by the different advertising networks may use Youronlinechoices. For an understanding of the use of the data by Google, please consult the Google partner policy.
This service uses the “Doubleclick” Cookie, which tracks the use of this Site and the User’s behaviour in relation to the advertisements, products and services offered.
The User may decide at any time not to use the Doubleclick Cookie by deactivating it.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Managing contacts and sending messages

This type of service enables us to manage a database of email contacts, telephone contacts or any other type of contact used to communicate with the User.

These services may also enable us to collect data relating to the date and time the messages are displayed by the User, as well as the interaction of the User with them, such as information on clicks on links inserted in the messages.

SendinBlue Email (SendinBlue SAS)
SendinBlue is an address management and email-sending service provided by SendinBlue SAS.

Personal Data collected: Usage Data; email; Tracking Tools.

Place of processing: France – Privacy Policy.

Protecting legitimate business interests and legal rights

Where required by law or where we deem it necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal, compliance, regulatory or review and disclosure requests.

Legal basis of data processing

We use the data collected about you if any of the following conditions apply:

  • you have given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be authorised to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (“opts out”) of such processing. However, this does not apply where the processing of Personal Data is governed by European legislation on the protection of Personal Data;
  • the processing is necessary for the performance of a contract with the User and/or the performance of pre-contractual measures; il trattamento è necessario all’esecuzione di un contratto con l’Utente e/o all’esecuzione di misure precontrattuali;
  • the processing is necessary for the performance of a legal obligation to which the Data Controller is subject;
  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public powers vested in the Data Controller;
  • the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.

However, it is always possible to ask the Data Controller to clarify the specific legal basis of all processing and, in particular, to specify whether the processing is based on the law, provided for by a contract or necessary for the conclusion of a contract.

How we share the information we collect

Storage and security

We use data hosting service providers in France to host the information we collect and take all technical measures to protect your data. However, no security system is impenetrable and, given the nature of the Internet, we cannot guarantee that data, during transmission over the Internet or while it is stored in our systems, is absolutely protected from intrusion by others. You can request more information about this; we will respond within a reasonable time.

How long we keep information for

We retain personal data for as long as we deem necessary to fulfil the purpose for which the personal data was collected, also considering our need to answer your questions or resolve any problems, to comply with legal requirements under applicable laws, to participate in any complaints/legal claims and for protection purposes.
This means that we may retain your personal data for a reasonable period of time that does not exceed 38 months, after your last interaction with us. When the personal data we have collected is no longer needed, we will securely delete it. We may process the data for statistical purposes, but in such cases, the data will be made anonymous.
You can always request the interruption of the Processing or the deletion of the Data.

Inactive accounts

Inactive accounts are those that have not been logged in or not placed an order for 36 months. After this period the collected data will be permanently deleted.

Pending orders

Pending orders are not paid and may be abandoned by the customer.
Cancellation period: never or on specific request of the user

Wrong orders

Incorrect orders are not paid and may be dropped by the customer.
Cancellation period: never or on specific request of the user

Orders cancelled

Cancelled orders have not been paid and may have been cancelled by the store owner or customer.
Cancellation period: never or on specific request of the customer

Completed orders

For administrative and accounting purposes, the personal data contained in completed orders are not made anonymous unless specifically requested by the user who placed the order.

 

Location of the data processing

Unless otherwise specified, the Data are processed at the Data Controller’s operational facilities and in any other place where the parties involved in the processing are based. For more information, write to privacy@visionbox.it.

How you can access your data and how you can control it

We provide all our users with access to their personal information. Users can correct, update or delete such personal information by contacting the Data Controller at privacy@visionbox.it or through the contact form on this site. These changes may take up to 48 hours to take effect. We respond to all requests within 30 days.

Control and deactivation of Cookies

You can find the instructions for controlling and deactivating Cookies in the appropriate section of the website “Cookie Policy”.

Data portability

Data portability is the option to obtain some of the information about you in a format that can be transferred from one service provider to another. Depending on the context, this may not apply to all the information we have collected. If you request it, we will provide you with a file containing your information.

How we transfer the information we collect internationally

Your Data is not disclosed, transferred or sold to third parties. If the transfer is necessary, it will only take place with your consent and taking all the necessary measures to protect them.

Other important information

Legal defence

Your personal data may be used by the Data Controller in court or in the preparatory stages to its eventual establishment for the defence against abuse in the use of this Site or related services by you.
The User declares to be aware that the Data Controller may be required to disclose the Data at the request of public authorities.

Specific information

Upon request from the User, in addition to the information contained in this privacy policy, this Site may provide Users with additional and contextual information about specific services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Site and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User IP address.

Do Not Track

Do Not Track (“DNT”) is an optional browser setting that allows you to express your tracking preferences for advertising and other third parties. We do not use technologies that recognise the presence of DNT in your browser.

Information not contained in this policy

More information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact information provided.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time, informing Users of any changes through this page. Therefore, please consult this page often and check the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Site and may request that the Data Controller remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that time.

Our policy regarding children under the age of 16

Our services are not aimed at children under the age of 16. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that a child under the age of 16 has provided us with personal information, we will delete that information. If you notice that a child has provided us with personal information, please contact our support services.

Contact information

Your information is controlled by Visionbox.it srl Benefit | Fully paid-up share capital € 30.000 i.v. – viale Napoli, 83 – 61121 Pesaro (PU) – Italy – VAT no. 02641190414. If you have questions or concerns about how your information is handled, please direct your request to:

Visionbox.it srl Benefit | Fully paid-up share capital € 30.000 i.v. – viale Napoli, 83 – 61121 Pesaro (PU) – Italia – P.IVA/Vat n° 02641190414
privacy@visionbox.it