GDPR Information

Last updated: June 4, 2026

Compliance with EU Regulation 2016/679 (GDPR)

ReversoBox is committed to respecting the General Data Protection Regulation (GDPR) and to ensuring maximum transparency in the processing of users' personal data.

1. Identity and Contact Details of the Controller

Data Controller: ReversoBox
Email: info@reversobox.com

2. Purpose and Legal Basis for Processing

Personal data is processed for the following purposes, in compliance with Art. 6 of the GDPR:

• Information requests: based on the consent of the data subject (Art. 6.1.a GDPR)
• Contractual obligations: for the preparation of quotes and management of any contracts (Art. 6.1.b GDPR)
• Website security: based on the legitimate interest of the controller (Art. 6.1.f GDPR)

3. Categories of Personal Data Processed

The data processed includes:

• Identifying data (name, surname, email)
• Browsing data (IP address, browser type, timestamp)

No special categories of data referred to in Art. 9 GDPR are processed (e.g., data relating to health, sexual orientation, political opinions).

4. Recipients of Personal Data

Personal data may be communicated to:

• Technical service providers (hosting, website maintenance)
• Public authorities, upon request and within the limits provided by law

Data is not transferred to third countries outside the European Union.

5. Retention Period

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected:

• Information requests: up to 24 months from receipt
• Browsing data: for the time strictly necessary for website security

6. Data Subject Rights (Arts. 15-22 GDPR)

The data subject has the right to:

• Access (Art. 15): obtain confirmation of the existence of their data and receive a copy
• Rectification (Art. 16): request correction of inaccurate data
• Erasure (Art. 17): request deletion of data ("right to be forgotten")
• Restriction (Art. 18): restrict processing in specific cases
• Portability (Art. 20): receive data in a structured format and transfer it to another controller
• Objection (Art. 21): object to processing based on legitimate interest
• Withdrawal of consent (Art. 7.3): withdraw consent at any time

To exercise these rights, contact: info@reversobox.com

7. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the competent supervisory authority:

Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza Venezia, 11 - 00187 Rome, Italy
Email: garante@gpdp.it
Website: www.garanteprivacy.it

8. Security Measures

ReversoBox adopts adequate technical and organizational measures to ensure a level of security appropriate to the risk, in compliance with Arts. 32-34 of the GDPR, including:

• Encryption of data in transit (HTTPS)
• Access control to IT systems
• Backup and disaster recovery procedures
• Staff training on secure data processing

9. Changes to the Information Notice

This information notice may be updated periodically. The most recent version is always available on this page with indication of the last update date.