ITEN — versione italiana Contact us

LEGAL

Privacy Policy

Last updated: · TALBOX SRLS

About this notice

This is an English translation of the Italian privacy notice. It is provided for convenience only: the Italian version is the legally binding one, and it prevails in case of any difference.

This notice explains how we process the personal data of people who visit talbox.it and of people who write to us by email. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Italian Privacy Code), as amended by Legislative Decree 101/2018.

This notice covers the talbox.it website and the TALBOX TikTok publishing tool (talbox.it/postara/), described below. Our product websites (for example PRINTSERVIS, WedInItaly, KLEPA, Animacara) each have their own privacy policy, which applies when you visit or use them.

Data controller

The data controller is TALBOX SRLS, with registered office at Milano (MI), Italia.

  • VAT number: IT02793380201
  • Tax code: 02793380201
  • REA (Economic and Administrative Index): MN-342465

Contact details

For any question about this notice or your data you can contact us:

We have not appointed a Data Protection Officer (DPO), because it is not mandatory for our activity under Article 37 GDPR. You can use the contact details above for any request.

What data we process

Browsing data

The website is static and hosted on Google Firebase Hosting. Like any web server, the hosting service automatically logs some technical data for each request:

  • IP address;
  • user agent (browser and operating system type);
  • address of the page or file requested;
  • date and time of the request.

We use this data to run the website and protect it from abuse. We do not use it to identify you or to profile you.

Data you send us by email

The website has no contact form. The Contact page only shows our contact details: if you write to us, you do so from your own email program. If you send us an email (or a certified email, PEC), we process:

  • your email address;
  • your name, if it appears in the message or in the address;
  • the text of your message, any attachments and any personal data you choose to include in them.

Please do not include special categories of data (for example health data) or other people's data in your message unless necessary.

TikTok publishing tool

At talbox.it/postara/ TALBOX runs a private, password-protected tool that we use to publish videos to the TikTok accounts of our brands. It uses TikTok's official APIs (Login Kit and Content Posting API). When a TikTok account is connected, with the consent given on TikTok's authorization screen, we process:

  • the account identifier (open_id), display name and profile picture (user.info.basic scope);
  • the access tokens issued by TikTok, needed to publish (video.publish and video.upload scopes);
  • the videos you choose to publish, with their caption and privacy settings.

We use no database: the name, picture and tokens are kept only in an encrypted session cookie (__session) in your browser, which expires after 7 days. Videos pass through our server to TikTok in chunks at the moment of upload and are not stored. We do not read the account's videos, messages, followers or any other data beyond what is listed above.

You can disconnect the account at any time with the "Disconnect" button (the tokens are revoked with TikTok and the cookie is deleted) or from the TikTok app, under Settings and privacy → Security and permissions → App and services permissions. For any request write to talboxsrls@gmail.com.

Cookies

By default the website uses only one technical cookie, which remembers your cookie choices. Google Analytics 4 analytics cookies are set only if you give your consent. You will find all the details in the Cookie Policy, linked at the bottom of every page.

Fonts, images and scripts are hosted on our own servers: the website makes no requests to Google Fonts or other external CDNs.

Purpose Data Legal basis Retention
Running the website and protecting it from attacks and abuse Browsing data (IP, user agent, URL requested, date and time) Legitimate interest in the security and functioning of the website (Art. 6(1)(f) GDPR) According to Google Cloud Logging settings, at most 30 days
Replying to your email and handling your request Email address, name, message text and attachments Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR) 24 months from the last exchange of messages
Managing any contractual relationship arising from the contact Contact details and correspondence Performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR) For the duration of the relationship and then for the periods required by law (for example 10 years for accounting records, Art. 2220 of the Italian Civil Code)
Publishing videos to TikTok with the TALBOX tool TikTok open_id, display name and profile picture, access tokens, videos to publish Performance of the service requested by whoever connects the account (Art. 6(1)(b) GDPR) and consent given on TikTok Session cookie: 7 days or until disconnection. Videos: not stored
Remembering your cookie choices Technical cookie cc_cookie Legal obligation to collect and record consent (Art. 6(1)(c) GDPR and Art. 122 Italian Privacy Code) 6 months
Aggregated statistics on website use Cookies _ga and _ga_<ID>, website usage data, IP processed without being stored Consent (Art. 6(1)(a) GDPR and Art. 122 Italian Privacy Code) Cookies: 13 months. Statistical data: according to the period set in Google Analytics, at most 14 months

When these periods end, the data is deleted or anonymised. We may keep it longer only if needed to defend our rights in legal proceedings, and only for as long as necessary.

We do not use your data for marketing, we do not sell it, and we do not make decisions based solely on automated processing, including profiling (Art. 22 GDPR).

Do you have to give us your data?

  • Browsing data: it is needed to show you the website. Without it the website cannot work.
  • Emails you send us: writing to us is optional. Without an email address we cannot reply to you.
  • Analytics cookies: they are optional. If you refuse them, the website works exactly the same.

Who we share the data with

The data is processed by us and by the technical providers we use. These providers act as data processors (Art. 28 GDPR) and process the data only to provide their service to us:

  • Google Ireland Ltd and Google LLC (Firebase Hosting and Google Cloud): host the website and log the technical browsing data.
  • Google Ireland Ltd and Google LLC (Gmail): provide the talboxsrls@gmail.com mailbox where we receive and keep the emails you send us.
  • TikTok Technology Limited (Ireland) and TikTok group companies: receive the videos and publishing requests sent through the TALBOX TikTok tool, as independent controllers under their own privacy policy.
  • Google Ireland Ltd (Google Analytics 4): collects website usage statistics, only if you have consented to analytics cookies.

The data may also be disclosed to public authorities where required by law or by an order of an authority. We do not publish the data.

You can ask for the up-to-date list of processors by writing to talboxsrls@gmail.com.

Transfers outside the European Union

Google LLC is based in the United States, and Google group providers may process data in the United States. In these cases the transfer takes place with the safeguards provided by the GDPR:

  • the European Commission adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), for providers certified under it;
  • alternatively or additionally, the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

You can ask us for information about these safeguards by writing to talboxsrls@gmail.com.

How we protect the data

We process the data with IT tools and apply technical and organisational measures appropriate to the risk (Art. 32 GDPR), including:

  • encrypted HTTPS connection across the whole website;
  • access to data limited to the people who need it, with personal credentials;
  • providers offering adequate security guarantees;
  • collection of only the data needed and retention for limited periods.

Your rights

At any time you can:

  • access your data and find out how we process it (Art. 15 GDPR);
  • have it corrected if it is wrong or incomplete (Art. 16);
  • have it deleted, in the cases provided by law (Art. 17);
  • restrict its processing, in the cases provided by law (Art. 18);
  • receive it in a structured format and transmit it to another controller, where processing is based on consent or contract and is automated (Art. 20);
  • object to processing based on our legitimate interest, on grounds relating to your particular situation (Art. 21);
  • withdraw your consent to analytics cookies, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3)). You can do this from the "Cookie preferences" link at the bottom of every page.

You also have the right not to be subject to decisions based solely on automated processing (Art. 22). As stated above, we do not make such decisions.

How to exercise your rights

Write to talboxsrls@gmail.com or to the certified email address talboxsrls@pec.it. We will reply without undue delay and in any case within one month of your request. This period may be extended by two further months if the request is complex: in that case we will tell you within the first month. Exercising your rights is free of charge. If we have reasonable doubts about your identity, we may ask for the information needed to confirm it.

Complaint to the supervisory authority

If you believe that the processing of your data breaches the law, you can lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it (si apre in una nuova scheda)), or with the supervisory authority of the EU country where you live or work, or bring the matter before the courts.

Children

The website is not directed at children under 14 and we do not knowingly collect their data. If a child under 14 has sent us personal data, the person with parental responsibility can write to talboxsrls@gmail.com and we will delete it.

Changes to this notice

We may update this notice, for example if the services used by the website or the law change. The version in force is always published on this page, with the date of the last update. If changes concern processing based on consent, we will ask for your consent again where needed.

Last update

29 October 2026