Last updated: 28 October 2026
This notice is provided pursuant to EU Regulation 2016/679, the General Data Protection Regulation (hereinafter also the "Regulation"), and Italian Legislative Decree 196/2003, the Personal Data Protection Code (hereinafter also the "Code").
BDR COMPANY SRL (hereinafter also "BOXEUR DES RUES") cares about protecting your personal data and respecting your privacy.
Here is how we do it.
This information concerns you if you are already one of our customers, or if you are simply browsing our website www.boxeurdesrues.com (hereinafter also the "Site"), if you are registered on our Site, or if you have subscribed to our newsletter, including through the page reached via the QR code displayed in our stores.
CONTENTS:
- Who we are
- The Data Protection Officer (DPO)
- Our responsibility
- When and how we collect your personal data
- The types of data we collect
- Why we collect your data
- Use of the Site and management of services
- Fraud prevention
- Customer support
- Marketing
- Tracking pixels in our emails
- Profiling
- What we mean by legal basis
- How we process your data
- Your choices and your rights
- Where your data is stored
- How long we will keep your data
- Third parties that may process your data
Who we are
With regard to the collection and processing of your data in connection with registration on the Site, the sale of products, and marketing and promotional activities, the data controller is BDR COMPANY SRL, Tax Code/VAT No. 07871890963, with registered office at Via Rugabella no. 1, 20122 Milan (MI), Italy. For any information you can write to us at privacy@boxeurdesrues.com.
The Data Protection Officer (DPO)
BOXEUR DES RUES has appointed a Data Protection Officer ("DPO"), whom you can contact on all matters relating to the processing of your personal data and the exercise of your rights: Avv. Alessandro Pontoni, Largo Richini no. 2/A, 20122 Milan, Italy, email a.pontoni@studioprofessionale.mi.it.
Our responsibility
Whether you are already one of our customers, are registered, are simply visiting the Site, or have subscribed to our newsletter, we inform you that your data will be lawfully processed in compliance with the Regulation and the Code, and within the limits set out in this Privacy Policy.
When and how we collect your personal data
We begin collecting data as soon as you access and browse the Site. Data may be collected either because you provide it to us directly, or automatically while you use the Site. We collect your data only from you, through the Site or the page reached via the QR code displayed in our stores: we do not acquire contact lists from third parties. If you choose to register on the Site using your Google account, at your request we receive from Google the profile data needed to create the account (first name, last name and email address).
Here is how collection takes place:
|
Data you provide to us |
Data we collect automatically |
|
|---|---|---|
|
Your identification data (first name, last name, email address and, if you provide them, gender, date of birth, country and language) |
X |
|
|
Website browsing |
X |
|
|
Your phone number |
X (only if you provide it on your own initiative) |
|
|
Use of www.boxeurdesrues.com |
X |
X |
|
Placing purchase orders |
X |
X |
|
Customer service |
X |
X (order number only) |
|
Email marketing communications (newsletters, DEMs, welcome and birthday emails) |
X (only with your explicit prior consent) |
X (email open and click data, collected via tracking pixels only with your prior consent) |
The types of data we collect
Contact details
Your first and last name, the shipping and billing address for the goods purchased, your phone number and your email address.
Identification data
Your IP address, login information, browser type and version, time zone, plug-in types, geolocation information about where you may be located, operating system and its versions, etc.
Data relating to your use of the Site
Your browsing path within the Site (clickstream analysis), the products and services you view, page loading and response times, download errors, length of visit, behaviour and other actions, etc. This data is collected through cookies and similar tools, including the web analytics service Mapp Intelligence provided by Mapp Digital Italy S.r.l. Cookies and tools other than technical ones are used only if you give your consent through the banner on the Site, which you can change at any time. Browsing data is not linked to your email address or to your profile on the email marketing platform. For more information, please see our Cookie Policy.
Data relating to your interaction with our emails
If you have agreed to receive our promotional communications by email, we detect, through the tracking pixels and links contained in the messages, whether and when you opened our emails, how many times, which links you clicked and some technical information (such as your IP address). You will find more details in the section "Tracking pixels in our emails".
What about special categories of data?
We do not collect any special categories of data that may concern you (that is, personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health, or data concerning sex life or sexual orientation).
For what purposes do we process your data?
We may process your data only for specific purposes and, in any case, always where there is a legal basis that allows us to do so. These are the purposes for which we process your data:
Use of the Site and management of services
Your personal data is processed to allow registration on the Site, access to and provision of the services reserved for registered and unregistered users, and the possible submission through the Site of a purchase order for the products available on the Site, with the resulting conclusion of the relevant sales contract with BDR Company Srl, including any related administrative and accounting formalities. In this case, the legal basis is the contract and legitimate interest. In this context we send you service emails relating to your orders, such as order and shipping confirmations.
Fraud prevention
In some cases, to complete your purchase, it may be necessary to carry out additional fraud-prevention checks. You may therefore receive communications, including by email from our dedicated account customercare@boxeurdesrues.com, asking you to send us the authorization code, a copy of your identity document and of the credit card used for the purchase, on which we ask you to obscure the eight middle digits. The data collected in this way will be kept for 1 (one) year from collection for evidentiary purposes, for cooperation with the judicial authorities and to deal with any disputes that may arise. In this case, the legal basis is the contract and the legitimate interest of the Controller. We guarantee that the data collected in this way will be processed in full compliance with applicable personal data protection laws, and that it may need to be shared with third parties that process credit or debit card payments and carry out anti-fraud checks, banks, and judicial authorities.
Customer support
Communicating changes to our services, and customer assistance via live chat, telephone or email, including fixing any bugs. In this case, the legal basis is the contract.
Marketing
Data is processed to send advertising material and newsletters, and to provide commercial information by email (newsletters and DEMs, welcome emails and, if you have given us your date of birth, birthday greeting emails) about Boxeur Des Rues promotional and commercial initiatives. In this case, the legal basis is your consent. This consent also covers the use of tracking pixels in our promotional emails, as described in the section "Tracking pixels in our emails": at any time you can withdraw just your consent to tracking while continuing to receive our emails. Consent is optional, and not giving it has no consequence for the purchase of products. Your data (first name, last name, email address and, if you provided them, gender, date of birth, country and language) is transferred to our provider's email marketing platform only if you have consented to receive our promotional communications, including when you register on the Site or through your Google account.
If you have consented to receive our promotional communications and started a purchase on the Site without completing it, we may send you a reminder email about the products left in your cart. This email is sent through our e-commerce platform and contains no tracking pixels or tracked links. Here too, the legal basis is your consent.
Tracking pixels in our emails
Our promotional emails (newsletters, DEMs, welcome and birthday emails) are sent through our provider's email marketing platform and, unless you have withdrawn your consent to tracking, contain a tracking pixel: a tiny transparent image, hosted on a remote server, which your email program downloads when you open the message with image display enabled. The links contained in the emails are also tracked.
What we detect: whether and when you opened the email, the number of opens, the links you clicked and some technical information, such as your IP address. The pixel is associated with a non-intelligible identifier generated by the platform and does not contain your email address.
Why we do it: to measure the performance of our campaigns (open and click rates) and improve their content and subject lines, and to adjust sending frequency, suspending sends to those who have not opened our emails for 18 months. We do not use this data to profile you or to send you personalised communications.
Legal basis: your consent (Article 122 of the Code and Article 6(1)(a) of the Regulation), included in your consent to receive our promotional communications by email, as provided for by the Guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali) on tracking pixels (decision no. 284 of 17 April 2026).
How you can withdraw consent: at the bottom of every promotional email you will find a link to a page where you can choose either to stop receiving our emails (unsubscribe) or to keep receiving them without tracking pixels, withdrawing only your consent to tracking. Withdrawing consent to tracking entails no limitation: you will continue to receive our communications, but we will no longer detect your opens and clicks. We record each of your choices, with date and time. You can also withdraw consent by writing to privacy@boxeurdesrues.com and, in any case, you can prevent pixels from being downloaded by disabling automatic image display in your email program.
Order-related emails: service emails relating to your orders (for example order and shipping confirmations) are sent through our e-commerce platform and contain no tracking pixels or tracked links.
For how long: individual open and click data is kept for a maximum of 24 months from the sending date of each campaign; after that it is deleted or aggregated anonymously and can no longer be linked to you.
Profiling
We do not carry out profiling: we do not analyse your purchasing, browsing or email-reading habits in order to send you personalised communications or offers. We only carry out statistical analyses on aggregated data, which do not allow you to be identified. Should we decide to carry out profiling in the future, we will update this notice and, where necessary, ask for your specific consent.
In any case, there is no automated decision-making process concerning you.
What we mean by legal basis
Consent
This is the authorisation to process your personal data for a specific purpose.
You can change your mind whenever you like! You can withdraw your consent at any time by emailing us at privacy@boxeurdesrues.com, or by using the link at the bottom of each of our promotional emails, which also allows you to withdraw only your consent to tracking pixels.
If you decide to withdraw your consent and there are no other grounds authorising us to process your personal data, we will stop processing. If, however, another legal basis authorises us, we will continue processing, always respecting your rights.
The contract
Processing your data is necessary for pre-purchase information and for the performance of the related sales contract.
Legitimate interest
Your data may be processed on the basis of our legitimate interests or those of third parties, provided that they do not override your rights and freedoms. Legitimate interests may include:
- providing, developing and improving our services;
- enabling us to improve and modify our services and offers;
- checking the effectiveness of our marketing campaigns, in aggregated and anonymous form;
- improving data protection.
How we process your data
Data is processed mainly by electronic means, except for product shipping activities, which may also be carried out manually.
Your choices and your rights
Your choices
You can decide not to provide us with your data
In that case you can continue browsing our site, but we will not be able to provide you with any service without your personal data.
You can ask us not to use your data for marketing purposes
Before processing begins, we will inform you of any intention to use your data for marketing purposes and (where applicable) of the involvement of third parties. If you have given your consent to this type of activity, you can withdraw it when you receive promotional messages by clicking the dedicated link in each of our communications (which also allows you to withdraw only your consent to tracking pixels) or by emailing us at privacy@boxeurdesrues.com.
Your rights
You can always exercise your rights by emailing us at privacy@boxeurdesrues.com or by contacting our DPO at the details given in the section "Who we are".
You have the right to access information concerning you
This includes the right to ask us for further information about:
- the categories of data we process;
- the purposes of processing;
- the categories of any recipients to whom the data may be disclosed;
- the data retention period or, failing that, the criteria used to determine it;
- your other rights regarding the use of your data.
We will provide the information within one month of your request, unless this would adversely affect the rights and freedoms of others (for example another person's confidentiality or intellectual property rights) or legal obligations prevent us from doing so. We will let you know if we are unable to fulfil your request for these reasons.
You have the right to have your data corrected if it is inaccurate or out of date
You have the right to have your personal data erased (right to be forgotten)
You may at any time ask us to delete the personal data we hold about you, where keeping it is no longer necessary for the purposes of processing.
You have the right to restriction of processing
In the cases provided for by Article 18 of the Regulation, for example if you contest the accuracy of your data, you can ask us to temporarily restrict its processing.
You have the right to transfer your data to another provider (data portability)
We will provide you with a copy of your data in an interoperable format if you wish to transfer it to another provider. At your request, and where technically feasible, we will transfer the data directly to the new provider. We will not carry out any transfer if the portability of your data would also involve disclosing the personal data of other individuals.
You have the right to object to our processing of your personal data
You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest and, without needing to give reasons, to processing for direct marketing purposes.
You have the right to lodge a complaint with the supervisory authority
You can always contact the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) to lodge any complaints. Before doing so, please feel free to contact us! We will be glad to resolve any issues relating to the processing of your personal data.
You have the right to object to the use of your data through automated decisions, including profiling
We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, nor do we send you personalised emails based on your preferences.
We guarantee your rights even when we process your personal data on behalf of third parties
If we process your data on behalf of third parties, we guarantee that requests relating to the exercise of your rights will be forwarded to them without undue delay.
What level of security do we apply when processing your data?
We guarantee that your data is processed with the utmost security: we have adopted appropriate physical, IT and organisational measures to ensure its protection.
We must nevertheless remind you that:
- You must always keep your username and password safe; you are the only person who knows them.
- If you believe your data has been breached, please contact us immediately at privacy@boxeurdesrues.com.
Where is your data stored?
Your data is processed mainly within the European Economic Area (EEA). Some of our providers, or their sub-processors, may also process data outside the EEA (in the United States, the United Kingdom and Australia), sometimes only through remote access for technical support.
In such cases, transfers take place only to countries for which the European Commission has adopted an adequacy decision (Article 45 of the Regulation), including US entities certified under the EU-U.S. Data Privacy Framework, or on the basis of the standard contractual clauses approved by the European Commission (Article 46 of the Regulation), supplemented where necessary by additional measures. You can obtain information on the safeguards adopted by writing to privacy@boxeurdesrues.com.
How long will we keep your data?
We will stop actively processing your data within 12 months of your last use of the service or of the closure of your account, unless legal obligations require us to keep it longer (for example, accounting and tax records relating to purchases are kept for 10 years). For promotional activities directed at you, which you can always ask us to stop, we will keep your data for a maximum of 24 months from your last interaction with us (for example a purchase, logging into your account, updating your preferences or, if you have consented to tracking, opening one of our emails or clicking a link in it), and in any case no longer than until you withdraw your consent. After that period, your data is deleted from the email marketing platform. If you withdraw your consent, we keep only your email address on a suppression list, so as to avoid sending you communications you do not want. Individual email open and click data is kept for a maximum of 24 months from the sending of each campaign and then deleted or aggregated anonymously.
Third parties that may process your data
To run our online business we need to rely on third parties to host applications, communicate with customers, manage emails and payments for your orders, etc. We share your data with them only when necessary to ensure our services work as fully as possible, and in accordance with the security measures and good practices described in this Privacy Policy. These parties act as data processors under a contract pursuant to Article 28 of the Regulation.
In particular, your data may be processed by the following categories of parties:
- the provider of the e-commerce platform and related hosting services (Commerce Software Ireland Ltd., a BigCommerce group company), which also handles order-related and abandoned-cart emails and may process data, directly or through its sub-processors, also in the United States, the United Kingdom and Australia;
- the provider of the email marketing platform and of the Site's web analytics service (Mapp Digital Italy S.r.l.);
- companies that support us in managing the Site and our marketing activities;
- payment and fraud-prevention service providers;
- couriers and logistics operators responsible for delivering products;
- IT and customer-support service providers, consultants.
Some of these parties, such as payment service providers, banks and couriers, may process data as independent data controllers. Your data may also be disclosed to the competent authorities where required by law. The up-to-date list of data processors is available on request at privacy@boxeurdesrues.com.
For more information, contact us at privacy@boxeurdesrues.com.
Thank you!
Thank you for reading this notice, which we have tried to make simple, clear and transparent. In any case, we are always trying to improve: if you have any suggestions, please write to us at privacy@boxeurdesrues.com.
This notice may change in the future: material changes will be communicated to you by email, and the updated version will always be available on the Site, together with the date of the last update.