Last updated: 17th nov. 2025

This Privacy & Cookie Policy explains how Blanche s.r.l. (“we,” “our,” “us”) collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is:

Blanche s.r.l.
Email: info@cineunderground.com

2. Data We Collect

We may collect the following categories of personal data:

Data provided voluntarily

  • Name, surname
  • Email address
  • Billing details
  • Shipping details (if applicable)
  • Order information and purchase history
  • Account information (if users create an account)
  • Replies sent through our contact or support forms

Automatically collected data

  • IP address
  • Browser and device information
  • Pages visited, session duration and navigation data
  • Cookie identifiers and tracking information

3. Purposes and Legal Bases of Processing

We process your personal data for the following purposes:

  • E-commerce and order management (WooCommerce) – to enable shopping features, process orders, manage payments, deliver products, and provide customer support.
    Legal basis: Art. 6(1)(b) GDPR – Performance of a contract; and Art. 6(1)(f) GDPR – Legitimate interest (fraud prevention and security).
  • Payment processing (PayPal) – to process secure online payments.
    Legal basis: Art. 6(1)(b) GDPR – Performance of a contract.
  • Analytics (Google Analytics) – to analyze website traffic and improve user experience.
    Legal basis: Art. 6(1)(a) GDPR – Consent.
  • Marketing & advertising (Meta Pixel) – to deliver personalized ads and measure campaign effectiveness.
    Legal basis: Art. 6(1)(a) GDPR – Consent.
  • Email marketing (Mailchimp) – to send newsletters and promotional offers if you subscribe.
    Legal basis: Art. 6(1)(a) GDPR – Consent.
  • Website operation & security – to ensure the website functions correctly and securely.
    Legal basis: Art. 6(1)(f) GDPR – Legitimate interest.

You can withdraw your consent at any time.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies.

Types of cookies used

  • Strictly necessary cookies – essential for website and shop functionality (e.g., shopping cart, login session). No consent is required.
  • Analytics cookies (Google Analytics) – used to measure traffic and performance.
  • Marketing cookies (Meta Pixel) – used for personalized advertising.

Consent via cookie banner

On your first visit, a cookie banner allows you to:

  • Accept all cookies
  • Reject all non-essential cookies
  • Customize preferences

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

5. Third-Party Services

We use trusted third-party providers that may process personal data on our behalf:

6. International Data Transfers

Some service providers may transfer personal data outside the European Economic Area (EEA), particularly to the United States.

Where applicable, such transfers rely on:

  • The EU–US Data Privacy Framework, or
  • Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law.

Examples:

Customer accounts: retained until the account is deleted.

Order and invoicing data: retained according to tax and accounting regulations.

Marketing data: retained until you withdraw your consent.

8. Your Rights Under GDPR

You have the right to:

  • Access your data (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Request deletion (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time (Art. 7 GDPR)

To exercise these rights, please contact us at info@cineunderground.com.
You also have the right to lodge a complaint with your local Data Protection Authority.

9. Security

We use appropriate technical and organizational measures to protect your personal data in line with Article 32 GDPR.

10. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. Updates will be posted on this page with a new “last updated” date.

11. Contact Us

If you have any questions about this Privacy & Cookie Policy, please contact:

Blanche s.r.l.
Email: info@cineunderground.com