What data we process and what it is used for.
1. Controller
Out Of The Box Media GmbH, Manuel Siri, Flahwiesenweg 11, 39040 Vahrn/Varna (BZ), Italy. Phone: +39 324 585 5470. Email: manuel@outofthebox-media.com.
2. Provision of the website
This website is hosted by Vercel. When it is accessed, technically necessary connection data is processed, in particular the IP address, time, requested resource, referrer and browser and device information. This processing serves the secure, stable and efficient provision of the website. Further information can be found in Vercel’s privacy policy.
3. Contact
When you use the contact form, your first name, surname, email address, telephone number and business, as well as the optional website and message, are processed. This information is used exclusively to handle the enquiry and, where applicable, to take steps prior to entering into a contract. The legal basis is Article 6(1)(b) GDPR; for general business enquiries, Article 6(1)(f) GDPR also applies.
The data is transmitted via a server function at Vercel and the transactional email service Brevo, provided by Sendinblue SAS, Paris, France. Brevo processes the form data as a processor in order to deliver the enquiry to Out of the Box Media by email. Submitting the form alone does not add the data to a newsletter mailing list. Further information can be found in Brevo’s privacy policy.
4. Local settings
The Result/System switch stores the selected display mode exclusively in your browser under the key ootb-mode. The choice made in the cookie banner is stored under ootb-consent-v2 locally for no more than 180 days.
5. Consent management
Analytics and marketing tags are loaded only after you have expressly consented in the cookie banner. If you select “Necessary only”, no Google service is called and no connection to Google is established. The legal basis for consent is Article 6(1)(a) GDPR. You can change or withdraw your choice at any time via “Cookie settings” in the footer.
6. Google Tag Manager, Analytics and Ads
Google Tag Manager with container ID GTM-5KBX944S is loaded only after you have given consent and then controls the configured measurement and marketing tags. These may include Google Analytics for reach and usage analysis and Google Ads for campaign and conversion measurement.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In particular, IP address, device and browser information, pages viewed, referrer, interactions, campaign parameters and pseudonymous online identifiers may be processed. Data may be transferred to Google LLC and other Google companies in third countries. Further information can be found in Google’s privacy policy.
Google Consent Mode v2 sets analytics_storage, ad_storage, ad_user_data and ad_personalization to “denied” by default. Only your selection in the cookie banner sets the relevant categories to “granted”.
After the contact form has been sent successfully, the event form_lead_success is made available in the local dataLayer. The event contains neither your name nor email address, phone number, business or message. Configured analytics or advertising tags may receive this event for performance measurement.
7. Google Partner badge
The official Google Partner badge from gstatic.com is displayed on the homepage and linked to the public agency profile. When the graphic is requested, Google receives, for technical reasons, in particular the IP address and browser and device information. The integration provides verifiable evidence of Partner status.
8. Rights
Under the GDPR, data subjects have in particular the rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. They also have the right to lodge a complaint with the competent supervisory authority, in Italy in particular the Garante per la protezione dei dati personali.
Privacy enquiries can be submitted at any time via the email address stated above.