top of page

Cookie Policy

This Cookie Policy describes the use of cookies and similar technologies by the website www.gembox.com of Gembox S.r.l.s., with registered office at Viale Giuseppe Mazzini, 132 – 00195 Rome (RM), VAT No. 17621751001 madeinitaly@gembox.it (hereinafter the “Data Controller” or the “Website”), in compliance with Regulation (EU) 2016/679 (“GDPR”), Legislative Decree no. 196/2003 as amended by Legislative Decree no. 101/2018, and the applicable Italian legislation on the protection of personal data.

This notice forms an integral part of the Website’s Privacy Policy.

1. What cookies are

Cookies are small text files that the websites visited send to the user’s device (computer, tablet, smartphone), where they are stored and then transmitted back to the same websites on the next visit.

Cookies allow the proper technical functioning of the Website, ensure browsing security, session management, the handling of registration and access to restricted areas, shopping cart and purchase procedures, as well as the loading of external content and the activation of statistical and marketing tools, subject to the user’s consent where required.

2. Types of cookies used

2.1 Technical cookies (necessary)

The Website uses technical cookies necessary for the functioning of the Wix platform, consent management through the cookie banner, browsing, access to any restricted areas of the Website, shopping cart management, checkout, and user preferences.

These cookies allow, for example:

  • navigation between pages;

  • the proper loading of content;

  • the storage of consent preferences;

  • infrastructure security;

  • user authentication;

  • login and logout session management;

  • storage of shopping cart contents;

  • the correct execution of purchase and payment steps;

  • prevention of unauthorized access, fraud, and abuse.

These cookies do not require the user’s prior consent under the applicable legislation, as they are strictly necessary for the functioning of the Website or for the provision of services expressly requested by the user.

 

2.2 Cookies relating to Website registration and restricted area

Where the Website allows the creation of a personal account, access to restricted areas, viewing order history, management of personal details and shipping addresses, or other functions reserved for registered users, technical and session cookies may be used in order to:

  • identify the authenticated user;

  • keep the session active during browsing;

  • associate the user profile with saved preferences;

  • ensure access security;

  • enable the correct use of functions reserved for registered users.

These cookies are essential for the functioning of the account and any restricted area and, therefore, do not require the user’s prior consent.

2.3 Cookies related to online purchases

Where the Website allows the purchase of products or services online, strictly necessary technical cookies may be used in order to:

  • store the products selected in the shopping cart;

  • allow the correct transition between the various checkout stages;

  • associate the cart with the user or browsing session;

  • manage currency, language, and purchase preferences;

  • prevent errors during the payment procedure;

  • ensure transaction security.

These cookies are necessary for the provision of the service requested by the user and do not require prior consent.

It should be noted that cookies, as technical tools for the functioning of the Website, are not normally intended for the processing of special categories of personal data pursuant to Article 9 GDPR. Any special data or additional information voluntarily entered by the user in the context of purchases, order notes, or contacts with customer service are not governed by this Cookie Policy, but rather by the Website’s Privacy Policy.

2.4 Third-party cookies for payments: Stripe and PayPal

For the management of online payments, the Website may integrate third-party services such as Stripe and PayPal.

The use of these tools may involve the installation of technical cookies and, in some cases, additional tracking technologies directly by the respective providers, especially when the user selects a specific payment method or is redirected to the relevant platform.

Such cookies may be used, for example, to:

  • enable the correct execution of the payment;

  • ensure transaction security;

  • prevent fraud and unlawful use;

  • authenticate the user with the relevant payment provider;

  • store technical settings related to the payment.

Cookies strictly necessary for the functioning of the payment service fall within the category of necessary technical cookies when the relevant payment method is expressly selected by the user during the checkout process.

The processing of personal data carried out directly by Stripe and PayPal takes place in accordance with their respective privacy notices:

Stripe:
https://stripe.com/it/privacy

PayPal:
https://www.paypal.com/it/legalhub/privacy-full

2.5 Analytical cookies – Google Analytics

The Website may use Google Analytics, a web analysis service provided by Google, in order to collect aggregated information or, where not configured in a fully anonymized way, information relating to the use of the Website by users, such as for example:

  • number of visitors;

  • pages visited;

  • time spent on the Website;

  • traffic source;

  • interactions with content;

  • devices and browsers used.

Where Google Analytics is configured in a way that involves the use of cookies that are not strictly technical, its use is subject to the user’s prior consent expressed through the cookie banner.

In the absence of consent, such cookies will not be installed.

Google Privacy Policy:
https://policies.google.com/privacy

Information on Google Analytics:
https://support.google.com/analytics

 

2.6 Google Tag Manager

The Website may use Google Tag Manager, a service provided by Google that allows tags and scripts installed on the Website to be managed through a single interface.

Google Tag Manager, in itself, is not generally used to directly profile the user, but it enables the loading and management of other technical, statistical, or marketing tools, including any third-party services.

The activation of any non-technical tags managed through Google Tag Manager takes place only upon the user’s prior consent, where required by the applicable legislation.

Google Privacy Policy:
https://policies.google.com/privacy

Information on Google Tag Manager:
https://support.google.com/tagmanager

2.7 Third-party cookies (Instagram Feed)

The Website may integrate an Instagram feed through an application provided by the Wix platform or through tools compatible with the platform.

The loading of the Instagram feed is subject to the user’s consent expressed through the cookie banner. In the absence of consent, the content is not loaded and no third-party cookies relating to that service are installed.

Where the user gives consent, interaction with the feed may involve the processing of personal data by Meta Platforms Ireland Limited, including the possible installation of cookies and the transfer of data to countries located outside the European Union.

Instagram Privacy Policy:
https://privacycenter.instagram.com/policy

 

2.8 Wix platform

The Website is created and hosted on the Wix.com Ltd. platform, which may set technical cookies necessary for the functioning of the infrastructure, consent management, Website security, user registration and authentication, as well as the correct execution of any enabled e-commerce functions.

Wix Privacy Policy:
https://www.wix.com/about/privacy

 

2.9 External links

The icons or links on the Website that refer, for example, to Facebook, Instagram, WhatsApp, Google Maps, PayPal, or other external websites are simple external links, unless otherwise specified.

No embedded social plugins are present other than any content expressly indicated in this Cookie Policy.

Any cookies from external platforms may be installed only when the user voluntarily decides to access the relevant websites or services.

Providers’ privacy notices:

Facebook:
https://www.facebook.com/privacy/policy

Instagram:
https://privacycenter.instagram.com/policy

WhatsApp:
https://www.whatsapp.com/legal/privacy-policy-eea

Google Maps:
https://policies.google.com/privacy

PayPal:
https://www.paypal.com/it/legalhub/privacy-full

 

3. Consent management

Upon first access to the Website, the user is shown a cookie banner that allows them to:

  • accept all cookies;

  • reject non-necessary cookies;

  • manage preferences in a granular manner.

Necessary technical cookies, including those essential for the functioning of the Website, the Wix platform, any restricted area, the shopping cart, checkout, and security services, are installed regardless of consent, as they are necessary.

Non-technical analytical cookies, third-party cookies, and any additional tracking tools are activated only after consent has been given, where required.

The Instagram feed, Google Analytics where configured in a non-technical mode, and any additional tags managed through Google Tag Manager that are not technical, are activated only after consent has been given.

The user may modify or withdraw consent at any time through the cookie management tool available on the Website.

 

4. How to disable cookies from the browser

The user may also manage or disable cookies through their browser settings.

Disabling technical cookies may compromise the proper functioning of the Website, the restricted area, the shopping cart, the purchase procedure, and authentication systems.

Below are the links to the guides for the main browsers:

Chrome:
https://support.google.com/chrome/answer/95647

Firefox:
https://support.mozilla.org/it/kb/Gestione%20dei%20cookie

Safari:
https://support.apple.com/it-it/guide/safari/sfri11471

Edge:
https://support.microsoft.com/it-it/help/4027947

 

5. Transfer of data to third countries

The use of services provided by Wix, Meta, Google, Stripe, and PayPal may involve the transfer of personal data to countries located outside the European Economic Area.

Such transfers take place in compliance with the safeguards provided for by Regulation (EU) 2016/679 and on the basis of any legal instruments adopted by the respective providers for the lawfulness of international data transfers.

 

6. User rights

The user may exercise the rights provided for by Articles 15 et seq. of the GDPR, including:

  • right of access;

  • right to rectification;

  • right to erasure;

  • right to restriction of processing;

  • right to object;

  • right to data portability, where applicable;

  • right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

  • right to lodge a complaint with the Italian Data Protection Authority.

The user may exercise such rights by contacting the Data Controller at the contact details indicated in the Website’s Privacy Policy.

 

7. Changes to the Cookie Policy

The Data Controller reserves the right to amend this Cookie Policy at any time, including as a result of legislative changes, updates to the services used on the Website, or technical developments of the platform.

Any changes will be published on this page and will take effect from the update date indicated above.

Last updated: 07/04/2026

Gembox S.r.l.s P.IVA: 17621751001

bottom of page