Privacy e cookie

Last updated: 4 November 2026

This page explains how Boxevia processes the personal data of visitors to boxevia.it, of people who request a quote and of the online shops that are our clients, under EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

Who processes your data

The data controller is Balkan Group S.R.L., with registered office at Via Sant’Adele 42, 20094 Corsico (MI), Italy, tax code 14959150963. The Boxevia service is operated from the warehouse in Zibido San Giacomo (MI).

For any privacy request, write to info@boxevia.it.

What data we collect and why

Quote request form. Name, email, phone or WhatsApp, online shop address, orders per month and, if you tell us, what you sell. We use them only to reply to you and prepare a quote. Legal basis: pre-contractual measures taken at your request (art. 6.1.b GDPR). We keep them for 12 months if you do not become a client.

Client area and service. Contact person and company details, login data, stock, orders, credit top-ups and invoices. They are needed to provide you with the warehousing and shipping service and for invoicing. Legal basis: contract (art. 6.1.b GDPR) and legal obligations, for example tax obligations (art. 6.1.c GDPR). We keep them for the duration of the contract and then for 10 years for tax and accounting obligations.

Order recipients’ data. Name, address, phone and email of the customers of shops that use Boxevia. We process them on behalf of the shop, which is the controller, as data processor (art. 28 GDPR), only to prepare and ship parcels, send tracking and handle returns.

Browsing data. The server logs technical data such as IP address, browser and pages visited, for the security and operation of the site. Legal basis: legitimate interest (art. 6.1.f GDPR).

Who we share it with

Only with the parties needed for the service, who process it as processors or as independent controllers:

• Aruba S.p.A., which hosts the website and email;
• couriers (BRT, Poste Italiane), to deliver parcels;
• Google Ireland Ltd, for website statistics (Google Analytics) and Google Search Console;
• our accountant, for invoicing.

We do not sell data or use it for advertising. Some providers, such as Google, may process data outside the European Union: in that case the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

Cookies

Technical cookies. They are needed to log in to the client area and for the site to work. They do not require consent.

Statistics cookies. The site uses Google Analytics, by Google Ireland Ltd, to know how many people visit it and which pages they read. These cookies are set only if you accept them in the banner. Legal basis: consent (art. 6.1.a GDPR). You can change your mind at any time via the “Manage consent” link at the bottom of the pages. The full list of cookies is in the Cookie Policy.

We do not use profiling or advertising cookies. The site’s fonts are hosted on our own server.

Your rights

You can ask at any time to access, correct or delete your data, to restrict its use or to receive it in a machine-readable format, and you can object to processing based on legitimate interest. Write to info@boxevia.it: we will reply within 30 days.

If you are a customer of a shop that uses Boxevia, contact the shop first, as it is the controller of your data: we will help it reply to you.

You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).