Privacy policy

This notice describes the processing of personal data provided on this website under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

CAPBOX LOGISTICS S.R.L., Via I Maggio, 32, 27020 Borgo San Siro (PV), Italy. VAT and tax identification number: 03029780180. Contact: info@capbox.it. Certified email (PEC): capbox@pec.it.

Commercial enquiries

We process the identification, company, job title, contact, region and logistics requirement data provided to respond to the request and assess a proposal. For individuals requesting steps prior to a contract, the legal basis is Article 6(1)(b) of the GDPR. For company representatives, the basis is the legitimate interest in maintaining the requested commercial communication, Article 6(1)(f).

Drivers and transport companies

We process name or registered company name, email, phone number, operating area, vehicle availability and capacity, message and, for drivers, answers about VAT registration and ownership of a van. The purpose is to assess the requested collaboration. The legal basis is taking pre-contractual steps, Article 6(1)(b), or the legitimate interest in assessment and communication with company representatives, Article 6(1)(f).

Submission is voluntary. Required fields are used to assess the request; without them, the form cannot be completed. If you do not have a vehicle available, state this in the relevant field. Do not send identity documents, health information or other sensitive data in the message field.

Browsing and security

Technical data, such as IP address, request time and browser information, may be processed by the infrastructure that serves and protects the website. The form uses temporary monitoring of submission attempts by IP, within a ten-minute window, to reduce abuse. The legal basis is the legitimate interest in the security and availability of the service, Article 6(1)(f).

Recipients and services used

Messages are forwarded to info@capbox.it through Resend. They may be processed by CAPBOX's authorised administrative staff responsible for responding to requests and by the infrastructure, hosting and email providers needed for this purpose. The current version is hosted on OpenAI's Sites platform with Cloudflare infrastructure. Data may also be disclosed to authorities where required by law.

We do not use data submitted through these forms for marketing. The website does not make solely automated decisions with legal effects or create advertising profiles from these submissions.

International transfers

Resend (Plus Five Five, Inc.) stores message content and sending logs in the United States. Selecting Ireland as the sending region does not change this storage location. Its data processing agreement provides for the European Commission's standard contractual clauses for international transfers. See the Resend data processing agreement and its data protection information. You can ask CAPBOX for information about the safeguards applicable to other providers.

Retention period

Driver and transport company applications without a contract: up to 12 months after the last interaction. Commercial enquiries without a contract: up to 24 months after the last interaction. If a contract is concluded, the necessary data will be retained for the contractual relationship and applicable legal periods. Data strictly necessary for the defence of rights may be retained for the relevant period, with access restricted to that purpose.

These periods refer to records retained by CAPBOX, including in the email inbox. Deletion must cover these records. Resend states that messages and logs are retained for 30 days on its Free, Pro and Scale plans, with separate rules for backups and account closure.

Your rights

You can request access, correction, deletion, restriction and, where applicable, data portability. You may also object to processing based on legitimate interest, according to your circumstances. Send your request to info@capbox.it or to the certified email (PEC) above. A response will generally be provided within one month, subject to the GDPR's provisions for extensions.

You have the right to lodge a complaint with the Garante per la protezione dei dati personali or the data protection authority competent for your place of residence, work or the alleged infringement.

Changes

This notice will be updated when the purposes, services used or practices described change. The date at the top of the page identifies the version.