Privacy policy

1. Data controller

Fortune Venture S.r.l., Italian VAT and tax number 02507630974, registered office at Viale XX Settembre, 200, 50019 Sesto Fiorentino (FI), Italy. VolpeBox is the brand it trades under. Email: hello@volpebox.com

2. What we collect

• Requests from the Contact form: name, email address, sector, optional city and the message. If the sending server is unavailable, the form opens the visitor's own email client with the request already written: in that case the data travels as an ordinary email.
• Emails sent directly to hello@volpebox.com: whatever the sender chooses to write.
• Server logs: IP address, date and time, requested page, browser. They keep the site running and protect it from abuse.
• Visit statistics, only if you agree: with Google Analytics we collect pages viewed, where you came from, device type and a random browser identifier (cookies _ga and _ga_<identifier>, two years). If you refuse, or until you choose, Google Analytics is not loaded and none of this data exists.

3. What we do NOT collect

We use no profiling cookies, we do no advertising, we sell no data and we build no profiles. The site loads no maps, videos or third-party widgets, and the typefaces are served by the site itself. The only external service is Google Analytics, and it starts only with your consent: how it works and how to withdraw it is on the cookie preferences page.

4. Purposes and legal basis

• Answering requests and preparing a quote: pre-contractual measures at the request of the data subject (art. 6.1.b GDPR).
• Running and protecting the site: legitimate interest of the controller (art. 6.1.f GDPR).
• Measuring visits with Google Analytics: consent of the data subject (art. 6.1.a GDPR), given through the banner and withdrawable at any time.

5. Recipients

Data is processed by the controller and by the hosting provider that serves the site and the email, acting as processor, within the European Union. It is never sold or passed to third parties.

If you consent to measurement, visit data is also processed by Google Ireland Limited as processor, and may be transferred to the United States on the basis of the EU-US adequacy decision of 10 July 2023.

6. Retention

• Requests and correspondence: as long as needed to reply and, if a working relationship follows, for its duration and for subsequent legal obligations.
• Server logs: twelve months at most.
• Visit statistics: as set by the retention settings of the Google Analytics property, and in any case until consent is withdrawn.

7. Your rights

You may request access to your data, rectification, erasure, restriction, portability and object to processing (articles 15-22 GDPR) by writing to hello@volpebox.com. You have the right to lodge a complaint with the Italian data protection authority (Garante).

8. Changes

This notice may change when the site changes. The date at the top says when it was last updated.