Legal document · Last updated October 2026
Privacy policy
This policy explains how we process the personal data of people who visit podbox.it and of people who contact Podbox, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
Data controller
The Bone Agency Srl, Via Nino Bixio 7, 20025 Legnano (MI), Italy — VAT and tax code 11061800964. Operating address: Podbox, Viale Leonardo da Vinci 43, 20090 Trezzano sul Naviglio (MI), Italy. Contact: info@podbox.it, phone +39 351 760 2922.
What data we collect
Data you provide. Your name, phone number or email, the name of your business or website and the content of your message, when you fill in a form on the site, message us on WhatsApp, call us or send an email.
Browsing data. IP addresses, access times, pages visited and technical data about your device, collected in the server logs for the operation and security of the site.
Cookies and tracking tools. Described in the cookie policy, including the conditions for statistics, marketing and behaviour analysis tools (heatmaps).
Why we process it and on what legal basis
Replying to requests and managing bookings — steps taken before entering into a contract and performance of a contract (Art. 6.1.b GDPR).
Administrative, accounting and tax obligations — legal obligation (Art. 6.1.c GDPR).
Site security and abuse prevention — legitimate interest of the controller (Art. 6.1.f GDPR).
Usage statistics, marketing and browsing behaviour analysis (Google Analytics 4, Meta Pixel, OpenAI Ads Pixel, Microsoft Clarity for heatmaps and session recordings) and the Google Maps map on the Contact page — only with your explicit consent given through the banner (Art. 6.1.a GDPR). If you do not give consent, these tools are not loaded and they collect no data.
Third-party tools
WhatsApp (Meta Platforms Ireland Ltd). If you choose to contact us on WhatsApp, the conversation is handled on Meta’s platform under its own privacy policy. Your number and the content you send are also processed by Meta outside the European Union, on the basis of standard contractual clauses.
Request measurement for OpenAI (ChatGPT Ads). Only if you have consented to marketing cookies, when you submit a form we may send OpenAI your email, phone number and name in encrypted form (hash), directly from our server, to measure the results of our advertising campaigns. The data is never sent in plain text and is not used for any other purpose.
Contact forms (Fluent Forms). The data you send through the forms is stored in this site’s database and used only to reply to you.
Hosting. The site is hosted by a provider acting as data processor under Art. 28 GDPR. The up-to-date list of processors is available on request at info@podbox.it.
Tools activated only with consent: Google Analytics 4 (Google Ireland Ltd), Meta Pixel (Meta Platforms Ireland Ltd), OpenAI Ads Pixel (OpenAI), Google Maps (Google Ireland Ltd), Microsoft Clarity (Microsoft Ireland Operations Ltd) for heatmaps, session recordings and behaviour analysis. Details of the cookies used by each are in the cookie policy.
How long we keep data
Contact requests and quotes: up to 24 months from the last contact. Contract, accounting and tax data: 10 years. Server logs: up to 12 months. Cookie consent records: up to 12 months. Data collected by statistics and marketing tools: for the periods stated in the cookie policy.
Who we share data with
With providers acting as data processors (hosting, technical maintenance, form tools and any measurement tools activated) and, where required by law, with administrative advisers and authorities. No data is published or sold.
Transfers outside the European Union
Some providers (Meta, Google, Microsoft, OpenAI) may process data in the United States. These transfers take place on the basis of the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
Your rights
You can exercise the rights set out in Articles 15-22 GDPR at any time: access, rectification, erasure, restriction, portability and objection. You can withdraw any consent you have given, including consent to cookies, without affecting the lawfulness of earlier processing. Write to info@podbox.it: we reply within 30 days. If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Minors
The site and services are not aimed at children under 14 and we do not knowingly collect their data.
Updates
This policy may be updated: the date at the top shows the latest revision. Significant changes are announced on the site.
This is a translation for information purposes. In case of discrepancy, the Italian version prevails.