PRIVACY POLICY

Strajbox  ·  Last updated October 2026

INTRODUCTION

This Privacy Policy relates to Strajbox and its affiliates (“Strajbox”, “we”, “our”, “us”). Strajbox is committed to absolute protection of your personal information in accordance with your fundamental right to privacy as embedded in Article 8 of the Charter of Fundamental Rights of European Union, 2010/C 83/02, 2009 (the Charter), and this policy explains how and why we process your data. This policy governs our methods of data collection, processing, usage and practice on Strajbox website. The foregoing and many other legal reasons is why we treat any data relating to an identified or identifiable individual or that is linked or linkable to them by us as “personal data,”. This, by implication, means that data that directly identifies you — such as your name — is personal data, and also data that does not directly identify you, but that can reasonably be used to identify you — such as the IP Address — is personal data.
This Privacy Policy covers how Strajbox or its affiliates handle personal data whether you interact with us on our websites, through dedicated apps or in person (including by phone. This Privacy Policy is in accordance with the European Union General Data Protection Regulation, 2016 (“GDPR”), regulations, guidelines and directives made pursuant to the GDPR (“Applicable Laws”) and is binding on all data subjects whose Personal Data we process.You accept this Privacy Policy and hereby give Strajbox consent to collect, store, process, and use your Personal Data to the extent permitted under Applicable Laws by clicking on the “Accept” button. You have the right to withdraw your consent at any time, provided that we do not have another lawful basis to keep processing your Personal Data.
We may update this Privacy Policy from time to time and you would be informed of such changes by the revision of the policy date on the website and provision of additional notice(s) (such as adding a statement to the homepages of our website or by sending you an email notification.
We encourage you to review the Privacy Policy whenever you interact with us to stay informed about our information practices and the ways you can help protect your privacy.

1.  LAWFUL BASIS FOR PROCESSING YOUR INFORMATION

All Personal Data that we collect and process is justified by at least one of the lawful processing that:
You have given consent to the processing;

• You have given consent to the processing;
• Processing is necessary for the performance of a contract to which you are a party or to take steps to enter into a contract;
• Processing is necessary for compliance with legal and regulatory obligations to which we are subject;
• Processing is necessary in order to protect your vital interests or another natural person; and
• Processing is necessary for the performance of a task carried out in the public interest.
• Processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and freedoms, are not incompatible with any of the above lawful bases, or beyond your reasonable processing expectations.

2.  TYPES OF PERSONAL DATA WE PROCESS

We may collect and process the following information about you:

• Information that you provide to us, for example: name, email address, company or brand name, phone number, service interest, description of service requested, when you fill out a contact or web form, or if you register to receive alerts or updates.
• When you provide your Personal Data while signing up for a service or purchasing a product.
• Personal Data that we obtain or learn, such as information about the browser or device you use to access this site, how you use this site and the pages you visit, traffic and location data
• When you contact our customer support, whether by phone, email, or chat.
• We may also ask you for information if you experience problems when using this site. We may also ask you to complete surveys for research purposes, although you don’t have to respond to these.

3.  USE OF YOUR PERSONAL DATA

We may use your Personal Data as follows:

• Provide, maintain, and improve our services.
• Provide and deliver the products and services you request, process transactions, and send you related information, including confirmations.
• Verify your identity and prevent fraud.
• Send you technical notices, updates, security alerts and support, and administrative messages in line with our transaction with you.
• Respond to your comments, questions, and requests, and provide customer service.
• Communicate with you about products, services, offers, promotions, rewards, and events offered by Strajbox and others, and provide news and information we think will be of interest to you.
• Monitor and analyse trends, usage and activities in connection with our services.
• Personalize and improve the services and provide advertisements, content or features that match user profiles or interests.
• Link or combine with information we get from others to help understand your needs and provide you with better service.
• Carry out any other purpose for which the Personal Data was collected.

4.  DISCLOSURE OF YOUR PERSONAL DATA

Strajbox will disclose your Personal Data to third parties in the following circumstances:

• With your consent or based on our contract with you, we may provide such Personal Data to affiliated companies or other trusted businesses or persons or with other third-parties such as email service providers that perform marketing services on Strajbox’s behalf for the purpose of processing Personal Data on our behalf. We require that these parties agree to process such Personal Data based on our instructions and in compliance with the Applicable Laws and any other appropriate confidentiality and security measures. Where they no longer need your Personal Data to fulfil this service, they will dispose of the details in line with Applicable Laws.
• In response to a request for Personal Data, if we are required by, or we believe disclosure is in accordance with any Applicable Law.
• With relevant regulatory authorities, law enforcement officials, a court order, and investigators, in line with our legal obligation.
• In connection with, or during negotiations of, any merger, sale of Strajbox’s assets, financing or acquisition of all or a portion of our business to another company on the basis of your existing contract with us or consent; and
• With your consent or at your direction, including if we notify you that the Personal Data you provide will be shared in a particular manner and you provide such Personal Data.

5.  STORAGE AND TRANSFER OF YOUR PERSONAL DATA

We process Personal Data in both digital and physical formats. Physical records are secured in a fireproof safe, while digital data is stored on cloud platforms with data centres located both within and outside France.
By accessing or using our Services or otherwise providing information to us, you consent to the processing and transfer of your information within France and to other countries where we or our service providers operate. Where data is transferred outside France, we ensure that the recipient country has data protection laws that are adequate and comparable to those in France.
Note that where your data is transferred to other countries there might be an increased risk to your personal information, particularly where such jurisdiction is not subject to the same level of protection as in France. These risks may include:

• Increased exposure to unauthorized access or misuse due to weaker enforcement mechanisms.
• Lack of enforceable data subject rights, such as the right to access, rectify, or delete personal data.
• Limited recourse for data breaches, meaning individuals may find it difficult to seek legal remedies.
• Potential government surveillance without adequate safeguards or oversight.
• Inadequate technical and organizational measures by recipients to secure data.

We take reasonable steps to mitigate these risks, including through the use of contractual safeguards (such as Standard Contractual Clauses), security measures, and by ensuring that third parties processing data on our behalf adhere to high data protection standards.

6.  SECURITY

Strajbox takes reasonable measures to help protect all Personal Data about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Additionally, Strajbox implements policies designed to protect the confidentiality and security of your Personal Data. We have also taken measures to comply with the provision of security facilities for the protection of your Personal Data through the set-up of firewalls, limited access to specified authorized individuals, encryption and continuous capacity building for relevant personnel. We therefore have digital and physical security measures to limit and eliminate possibilities of data privacy breach incidents. We implement appropriate technical and organizational measures, as required by Applicable Laws, to protect Personal Data. These include encryption of data in transit and at rest, role-based access control, multi-factor authentication, regular security testing, audit logging, employee training on data protection, and clearly defined data retention policies.

7.  PERSONAL DATA RETENTION PERIOD

We maintain Personal Data no longer than we need to use it in accordance with the Applicable Laws on Data Retention. In some circumstances, we may retain your Personal Data for longer periods if it is in accordance with regulatory, legal, tax or accounting obligations. In all cases, where your Personal Data is no longer required or you request for deletion, we will ensure it is disposed of in a secure manner, subject to applicable law.

8.  YOUR RIGHTS AS A DATA SUBJECT

At any point while we are in possession of or processing your Personal Data, you, the data subject, have the following rights, including the right to:

• Withdraw your consent at any time of our processing of your data.
• Request access to a copy of the information that we hold about you in a commonly structured format.
• Lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if you have a reason to believe that your rights have been violated at (https://www.cnil.fr/en)
• Correct your incomplete or inaccurate data in our possession.
• Request for the erasure of your data from our records.
• Restrict our processing activities on your data.
• Request that your data in our possession be transferred to another organisation.
• Object to certain types of processing such as direct marketing.
• Object to automated processing, including profiling.

9.  BREACH/PRIVACY VIOLATION

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data, Strajbox shall within 72 (Seventy-Two) hours of having knowledge of such breach report the details of the breach to the Commission. Furthermore, where we ascertain that such breach is detrimental to your rights and freedoms in relation to your Personal Data, we, as soon as reasonably practicable upon knowing the occurrence of such breach take steps to inform you of the incident, the risk to your rights and freedoms resulting therefrom and any course of action to remedy said breach.

10.  QUESTIONS OR CONCERNS

If you have any questions or concerns about this Privacy Policy or would like to contact us for any reason, you can contact us at hello@strajbox.com.

COOKIES POLICY

Strajbox  ·  www.strajbox.com
Are you exposed to third party cookies when navigating our websites?

Our website may contain links to third-party websites that have their own privacy and cookie policies, over which we have no control. We recommend that you review the privacy policy, cookie policy and terms and conditions of any third-party website before accessing or using it.

What is the relevant legislation?

Relevant European Union Legislation
‍Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (the ePrivacy Directive), published in the Official Journal of the European Union on 31 July 2002, as amended.
Article 8 of the Charter of Fundamental Rights of the European Union (2010/C 83/02), which establishes the fundamental right to the protection of personal data.