Privacy Policy


As Giochi In Scatola SRL (hereafter, "Data Controller") we are committed to protecting the privacy of all those who relate in various ways to our company. This means that we will protect the personal information of all visitors who access our website (which we will call, the "Services").

This Privacy Policy ("Privacy Policy") explains how the Data Controller collects, shares and uses your personal information. You will also find information about how you can exercise your privacy rights. By using our Services you agree that the Data Controller uses your personal information as described in this Privacy Policy. The terms "we," "us," or "our(s)" are intended to refer to the Data Controller and any terms not defined in this Privacy Policy are defined in our General Terms and Conditions.


Purpose of processing and legal basis

The personal information we may collect about you serves three purposes:

    Execution of pre-contractual measures requested by you and performance of a contract;
    Marketing activities aimed at sending newsletters for presentation of news about products and services;
    Profiling activities.
    Execution of pre-contractual and contractual measures

You may provide us with your personal information to purchase one of our products through the site and process your order.

For example:

    Registration Information: When you create an account on this site, register, or fill out forms with respect to the Services, we collect information about you, including your name, address, phone number, email address, and the password you create.
    This information will be used to:
        generate your account in order to allow you to place Orders in accordance with our Terms and Conditions;
        identify you when you access your account;
        contact you to receive opinions and reviews about our Services (after-sales activities);
        notify you of changes or updates on order processing.
    Transaction Information: We collect information related to your Orders. Payment transactions are contracted to our payment processors and we do not store your credit card information in our systems. We also collect delivery details (e.g., your physical address) to complete each Order.
    This information will be used to:
        process your Order and invoice you accordingly (although this site never stores your credit card information in its systems);
        communicate your Order to the Courier;
        update you on the status of your Order;
        respond to inquiries about your Order and resolve problems;
        conduct analysis and research to develop and improve our Services; and
        protect you and the Services by attempting to detect and prevent fraud or other acts in violation of our Terms and Conditions or policies relating to the Services.
    Inquiries and Comments: on the "Contact Us" page, the owner collects your email address, as well as the content of the message, to respond to any inquiries or comments you may have or to resolve an issue.

This information will be used to:

    respond to your requests for information;
    publish reviews you send us about our services anonymously;
    conduct analysis and research to improve and develop our Services.

For the processing of data for the purposes referred to in A points 1, 2 and 3, your consent is not required as the processing is necessary for the performance of a contract to which you are a party or the execution of pre-contractual measures taken at your request (Art. 6 paragraph 1 letter b) of the GDPR) in addition to responding to compliance with legal obligations (Art. 6 paragraph 1 letter c) of the GDPR). The provision of data by users for these purposes is compulsory and any refusal to provide data will result in the impossibility of account creation and thus related online purchases.

    Marketing activities

You may sign up to receive our newsletter and so we may use your e-mail address to send you commercial information and news about products and initiatives organized by the owner.

If you do not want us to use your information in this way or if you generally change your mind about receiving marketing communications, you can unsubscribe at any time by using the unsubscribe feature in the communications you receive or by editing your profile. If you choose to unsubscribe from receiving marketing communications, we will keep a record of your preferences so that we do not bother you with unwanted marketing activities in the future.

For the processing of data for marketing purposes, through the sending of marketing communications by e-mail by the owner and/or third party companies, the owner will require your consent, as the legal basis for the processing (Art. 6 paragraph 1 lett.a) of the GDPR). Providing your data for this purpose is optional and the only consequence of not providing it is not receiving the newsletter.

C. Profiling activities

Profiling means any automated processing of personal data consisting of the use of such data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects of that natural person's professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements (GDPR Art. 4(4)).

When you access our Services, we may collect certain information from your browsing and directly from your device to profile you for the purpose of proposing targeted offers that may be of interest to you.

What data do we collect and through what tools?

    Activity Information: We collect information about your use of the Services and information about you from the content you create and the notifications or messages you post or send or that emerge from searches you watch or interact with.
    This information will be used to:
        provide you with better service;
        provide you with suggestions about products we think you might want to buy;


    Cookies and similar technologies: We use cookies and similar tracking technology to collect and use personal information about you (including but not limited to your Internet Protocol (IP) address, your device ID, your browser type when, how often, and for how long you interact with the Services), including for the purpose of facilitating advertising related to your respective interests.
    This information will be used to:
        measure and analyze the use and effectiveness of our Services;
        personalize and optimize advertising targeting for our Services on other websites and platforms; and
        provide location services if you choose to share your location.

Like many websites and online services, we use cookies and other technologies to record your interaction with our Services. Cookies also help us manage a range of features and content, as well as store searches and resubmit your information when you place an Order. For more information about the types of cookies and similar technologies we use, the reasons, and respective ways to control them see our Cookie Policy.

Profiling data will be processed not only by the owner but also by third party companies such as Giochinscatola srl as the Data Processor to provide us with support and advice for the development of our e-commerce site's revenue.


Information we obtain from third party sources.

From time to time, we may receive personal information from third party sources, including advertising networks, but only if we have verified that the third party has received your consent to process the information or otherwise has legal permission or is legally required to share your personal information with us. This information might include your likely demographic group.

For example:

    Analytical Reports and Surveys for Market Research: We collect information from affiliated third parties about how you respond to and interact with our marketing campaigns in order to personalize our marketing and Services.
    We may also receive aggregate information in the form of audience segments from third-party sources to display targeted advertising on sites operated by companies such as Facebook and Google.

The processing of your personal data for profiling activities must be based on your explicit consent (art. 22 paragraph 2 letter c) of the GDPR) as well as the communication of such data to third parties.

The e-commerce service is organized in such a way as to automatically provide for the profiling of the user who registers his or her account in order to optimize the service according to the declared or inferred tastes and preferences; therefore, failure to provide data for profiling purposes will result in the impossibility of interacting with the services of the site and in particular to purchase the owner's products.

You will be able at any time to obtain details of all data used for profiling (art. 15 of the GDPR) in addition to your right to object at any time to profiling carried out for direct marketing purposes by writing directly to the owner at the e-mail address or by using the appropriate tools that you can find in your Personal Area on the site.

With whom do we share personal information?

In the delivery of the Services, depending on the circumstances, we may share your personal information with the following entities:

    Couriers to process and deliver your Order;
    Third parties who perform various activities to promote and support our Services. These include customer support agents, website support and hosting providers, marketing service providers, partners who handle our email marketing and push notifications such as Nosto, companies such as Sendinblue who send you messages when your Order is inbound, delivery companies who deliver your Order to you, market research companies, and payment processing providers who process payment card transactions; the aforementioned third parties may be located inside or outside your country of residence.
    With respect to any of our company's assets, should we enter into a joint venture, purchase another company, or in the event of a sale or merger with another business entity, your information may be disclosed or transferred to the target company, or to new business partners or shareholders or their agents and advisors. In these circumstances, we will always inform the relevant entities that they must process your personal information only for the purposes disclosed in this Privacy Policy.
    Any public safety or regulatory body, government agency, judicial authority or other third party, if we believe that disclosure is necessary (i) under applicable laws or regulations, (ii) to exercise establish or defend our legal rights, or (iii) to protect your vital interests or those of other persons.
    Any other person, provided they have given your consent to disclosure. We will not sell, distribute in any capacity your personal information, except with your prior consent or where required by law.


International Data Transfers

We may transfer your personal information to countries other than your country of residence, but never outside the EU. This website's servers operate in Germany.


No information may be provided to the Controller by persons under the age of 16 without the prior consent of a parent.


We attach great importance to keeping your personal information secure. We therefore take appropriate technical and organizational measures/industry standard technology to protect your data from unauthorized access and unlawful processing, accidental loss, destruction and damage.

The security measures we use are designed to provide a level of security protection appropriate to the risk in processing your personal information. If you have chosen a password that allows you to access certain parts of the Services, you are responsible for keeping it confidential. We advise you not to share your password with anyone and to use a unique password for our Services. We will not be responsible for unauthorized transactions made using your name and password.

Data Retention.

Data is retained for as long as is strictly necessary to provide the service requested or required by law and then deleted, unless further retention requirements are required by law.

Data collected for marketing purposes will be retained until we receive your objection to processing or withdrawal of consent.

Data collected for profiling purposes will be retained until the contractual relationship between the parties is maintained.

 Your data protection rights

The Data Controller respects your privacy and data protection rights. The following is a summary of your rights with respect to your personal information held by the Data Controller:

o The Data Controller provides you with the tools to access, analyze, or update your personal information at any time through your account. If you wish to request deletion of your personal information, you may do so by contacting us using the contact details provided in the "Contact Us" section.

o You can object to the processing of your personal information, ask us to restrict the processing of your personal information, or request that it be transferred to a third party. Again, you can exercise the above rights by contacting us and using the contact details provided under the heading "Contact Us."

o You have the right to opt out of receiving marketing communications we send you at any time. You can exercise this right by using the unsubscribe feature to receive communications or by editing your profile.

o Similarly, if we collect and process your personal information based on your consent, you can revoke your consent at any time. Revocation of your consent does not affect the lawfulness of processing we conducted prior to your revocation, nor does it affect the processing of your personal information conducted in connection with any other lawful basis for processing other than consent.

o You have the right to complain to a data protection supervisory authority about the collection and use of your personal information.

We respond to all requests we receive from individuals who wish to exercise their data rights in accordance with applicable data protection laws.

Links to third-party sites

Our website may, from time to time, contain links to and from the websites of our partners, advertisers and affiliates or an indeterminate number of websites that may offer useful information to our visitors. We provide these links to you only as a convenience, and the inclusion of links does not imply endorsement of the relevant website by the Data Controller. If you access the link or one or more of the websites, please note that the referring companies have their own privacy policies and we will not be responsible for their policies or the linked websites. Please check these policies before submitting personal information to those websites.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to ongoing legal, technical, or business developments. When we update our Privacy Policy, we take appropriate steps to inform you in line with the importance of the changes we make. We will obtain your consent toward any material changes to the Privacy Policy if required by applicable data protection laws.

We encourage you to periodically review this page to stay up-to-date on the latest information regarding our privacy practices.

Is there a data protection officer (RTD) ?

GiochinScatola SRL is a Data Protection Officer (RTD). You can contact our RTD at

How to Contact Us

If you have any questions or concerns about this Privacy Policy, please feel free to contact us:

By email to:

By writing to us at:

Box Games SRL

The data controller of your personal information is the entity Giochinscatola SRL.