Privacy & Cookies

Website: cboxcontainers.com (international site) Effective date: 12 October 2026

This notice explains how the CBOX Containers group ("CBOX", "we") handles personal data collected through cboxcontainers.com and in connection with enquiries, quotations, sales, rentals, modifications, delivery, customer accounts and related services. Because CBOX operates from several countries, the CBOX company that handles your request is responsible for your personal data. The table below shows which company that is. Where the GDPR applies, that company is the controller.

One privacy contact serves the whole group: CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands. If you are an EU resident or deal with a CBOX company in the EU, the country notice for that company applies in addition to this one.

• Identity and business contact data: name, organisation, position, address, email address, telephone number.
• Enquiry, quotation, order, rental, delivery, collection, modification, depot, invoice, payment status and customer service records.
• Account credentials and account activity where you use an online account or customer portal.
• Communications, documents and instructions you or your organisation send us.
• Creditworthiness and verification data on your organisation and, for sole traders, on you, obtained from credit reference agencies and public registers.
• Website and device data: IP address, browser type, device identifiers, pages viewed, referring pages, timestamps and cookie or pixel identifiers.
• Marketing preferences and records of consent, objections and unsubscribes.
• Security and audit data needed to protect CBOX, its customers and its systems.

Mostly from you or the organization you represent, through this website, email, telephone and our business systems. We also receive data from CBOX group companies, depots, carriers, payment providers and other parties involved in your order, and from public registers, credit reference agencies and business data providers.

Outside the EU, we rely on the equivalent grounds in local law (see the country notices).

CBOX group companies; depots, carriers, transport and modification partners; payment, finance and credit reference providers; IT hosting, software and support providers (including our CRM, ERP, finance and Microsoft 365 environments); website, communications, analytics and marketing providers activated in line with your cookie choices; insurers, auditors, professional advisers; regulators, courts and law enforcement where required. We do not sell personal data.

CBOX runs shared services for finance, IT and sales support from its international office in Dubai, United Arab Emirates, and uses service providers in the EU, UAE, Australia, the United Kingdom and the United States. Transfers from the EU to countries without an EU adequacy decision are covered by the European Commission Standard Contractual Clauses, concluded between the CBOX group companies and with our providers, together with additional safeguards where required. You can request a copy of the relevant safeguard from the privacy contact.

We keep data for as long as needed for the purpose and the legal retention period of the responsible company. As a guide: contract, invoice and payment records 7 years after the end of the financial year in the EU and the UAE, 7 years in Australia; quotations that do not lead to a contract 2 years; marketing data until you unsubscribe or 2 years after your last interaction; website logs 12 months; consent records as long as the consent is relied on plus 5 years. Afterwards data is deleted or anonymised unless a legal claim requires longer retention.

We apply technical and organisational measures appropriate to the risk, including access controls, multi-factor authentication, logging, encryption in transit, backups, supplier controls and incident management. No internet transmission is completely secure.

Depending on the law that applies to you, you may request access to your data, correction, deletion, restriction, portability, and you may object to processing based on legitimate interest or to direct marketing. Where processing is based on consent you may withdraw it at any time. Where the GDPR applies we answer within one month, extendable by two months for complex requests. We may ask for information to verify your identity. Send requests to CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands.

Every marketing email contains an unsubscribe link. Unsubscribing does not stop operational messages about an enquiry, order, rental, delivery, invoice or account. Cookies and similar technologies are described in the Cookie Policy of the site you are visiting; on cboxcontainers.com the Netherlands Cookie Policy applies.

Please contact CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands first. You may also complain to the data protection authority of the responsible company's country (listed in the country notices) or, in the EU, to the authority of your own country of residence.

We may update this notice; the effective date shows the current version.

Website: cboxcontainers.com/ae and the UAE pages of cboxcontainers.com Effective date: 12 October 2026

This notice explains how CBOX Containers International-FZCO ("CBOX UAE", "we") collects and handles personal data through this website and in connection with enquiries, quotations, sales, rentals, modifications, delivery, customer accounts and related services. It is issued under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). CBOX UAE also performs finance, IT and sales support services for other CBOX group companies; where it does so, the CBOX company in your country remains responsible and this notice applies alongside that company's notice.

CBOX Containers International-FZCO, licence 63047 issued by Dubai Integrated Economic Zones Authority, Office 1201, Magnum Opus Tower, Barsha Heights, Dubai, United Arab Emirates. Privacy contact: CBOX Containers International-FZCO, Office 1201, Magnum Opus Tower, Barsha Heights, Dubai, United Arab Emirates.

• Identity and business contact data: name, organization, position, address, email address, telephone number, and where required for a contract or delivery, Emirates ID or passport details of the signatory or recipient.
• Enquiry, quotation, order, rental, delivery, collection, modification, depot, invoice, payment status and customer service records.
• Account credentials and activity where you use an online account.
• Communications, documents and instructions you or your organization send us.
• Creditworthiness and verification data on your organization and its representatives.
• Website and device data: IP address, browser type, device identifiers, pages viewed, referring pages, timestamps and cookie or pixel identifiers.
• Marketing preferences and records of consent and unsubscribes.
• Security and audit data needed to protect CBOX, its customers and its systems.

You or the organisation you represent, this website, email and telephone, our business systems, CBOX group companies, depots, carriers, payment providers and other parties involved in your order, and public registers, credit reference agencies and business data providers.

Under the PDPL we process personal data with your consent, or without consent where the law allows it, in particular where processing is necessary to perform or conclude a contract with you, to comply with a legal obligation, to protect your interests or the public interest, to establish or defend legal claims, or for a legitimate interest of CBOX that does not override your rights.

CBOX group companies; depots, carriers, transport and modification partners; payment, finance and credit reference providers; IT hosting, software and support providers; website, communications, analytics and marketing providers activated in line with your choices; insurers, auditors, professional advisers; regulators, courts and law enforcement where required. We do not sell personal data.

CBOX operates internationally and transfers personal data to CBOX group companies and providers in the European Union, Australia, the United Kingdom and the United States. Transfers are made to countries that the UAE Data Office recognizes as providing adequate protection, or otherwise under a contract that meets PDPL requirements, with your consent where the law requires it, or where the transfer is necessary to perform a contract with you or for a contract concluded in your interest.

Accounting, VAT, corporate tax and contract records: at least 7 years after the end of the relevant tax period, as required by UAE tax and commercial law. Quotations that do not lead to a contract: 2 years. Marketing data: until you unsubscribe or 2 years after your last interaction. Website logs: 12 months. Consent records: for as long as consent is relied on plus 5 years. Afterwards data is deleted or anonymized unless a legal claim requires longer retention.

We apply technical and organizational measures appropriate to the risk, including access controls, multi-factor authentication, logging, encryption in transit, backups, supplier controls and incident management. We notify the UAE Data Office and, where required, affected individuals of personal data breaches as the PDPL requires.

Subject to the conditions in the PDPL you may request information about our processing and transfers, a copy of your personal data, correction, erasure, restriction, and portability. You may object to processing for direct marketing, to automated decisions that have legal effects on you, and to other processing in the circumstances the PDPL allows. You may withdraw consent at any time; this does not affect earlier lawful processing. We may ask for information to verify your identity and we aim to answer within 30 days. We do not make decisions about you based solely on automated processing.

We send electronic marketing with your consent or to existing business customers about similar products, always with an unsubscribe link. Unsubscribing does not stop operational messages about an enquiry, order, rental, delivery, invoice or account. Cookies are described in the UAE Cookie Policy.

Please contact CBOX Containers International-FZCO, Office 1201, Magnum Opus Tower, Barsha Heights, Dubai, United Arab Emirates first. You may also lodge a complaint with the UAE Data Office.

We may update this notice; the effective date shows the current version.

Website: cboxcontainers.com/ae and the UAE pages of cboxcontainers.com Effective date: 12 October 2026

This policy explains how CBOX UAE uses cookies, pixels, tags, local storage and similar technologies ("cookies"). Cookies may store or read information on your device and may process personal data. Read it together with the UAE Privacy Notice.

On your first visit the cookie banner lets you accept all, reject all, or choose categories. Optional cookies are not set until you choose. You can change or withdraw your choice at any time through the Cookie Settings link at the bottom of every page. Withdrawal does not affect earlier lawful processing. Strictly necessary cookies are used without consent because the website cannot work without them.

The current list of cookies, with name, provider, purpose, category, duration and whether the provider is outside the UAE, is shown in Cookie Settings. It is updated automatically whenever the website changes.

You can also block or delete cookies in your browser; some website functions may then not work. Questions: CBOX Containers International-FZCO, Office 1201, Magnum Opus Tower, Barsha Heights, Dubai, United Arab Emirates.

Website: cboxcontainers.nl (also applies to cboxcontainers.com) Effective date: 12 October 2026

This notice explains how CBOX Containers Netherlands B.V. ("CBOX", "we") processes personal data through this website and in connection with enquiries, quotations, sales, rentals, modifications, delivery, customer accounts and related services, under the General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act (UAVG) and the Dutch Telecommunications Act.

CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands. Chamber of Commerce 56549121, VAT NL852180780B01. Privacy contact: CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands. CBOX Containers Netherlands B.V. is also the controller for cboxcontainers.com visitors who are not served by another CBOX company.

• Identity and business contact data: name, organisation, position, address, email address, telephone number.
• Enquiry, quotation, order, rental, delivery, collection, modification, depot, invoice, payment status and customer service records.
• Account credentials and activity where you use an online account or customer portal.
• Communications, documents and instructions you or your organisation send us.
• Creditworthiness data on your organisation and, for sole traders, on you, from credit reference agencies and the Chamber of Commerce.
• Website and device data: IP address, browser type, device identifiers, pages viewed, referring pages, timestamps and cookie or pixel identifiers.
• Marketing preferences and records of consent, objections and unsubscribes.
• Security and audit data needed to protect CBOX, its customers and its systems.

You or the organisation you represent, this website, email and telephone, our business systems, CBOX group companies, depots, carriers, payment providers and other parties involved in your order, the Chamber of Commerce, credit reference agencies and business data providers.

You may ask the privacy contact for our legitimate interest assessments.

CBOX group companies; depots, carriers, transport and modification partners; payment, finance and credit reference providers; IT hosting, software and support providers (CRM, ERP, finance and Microsoft 365); website, communications, analytics and marketing providers activated in line with your cookie choices; insurers, auditors, professional advisers; regulators, courts and law enforcement where required. Providers that process data on our behalf are bound by processing agreements. We do not sell personal data.

CBOX runs shared services for finance, IT and sales support from its office in Dubai, United Arab Emirates, and uses providers in the UAE, Australia, the United Kingdom and the United States. The United Kingdom is covered by an EU adequacy decision. For the UAE, Australia and other countries without an adequacy decision we use the European Commission Standard Contractual Clauses, concluded between the CBOX group companies and with our providers, together with additional measures where required. For US providers we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses. You can request a copy of the relevant safeguard from the privacy contact.

Contract, invoice and payment records: 7 years after the end of the financial year (Dutch tax retention obligation; 10 years for records relating to immovable property). Quotations that do not lead to a contract: 2 years. Customer account data: for the duration of the relationship plus 7 years. Marketing data: until you unsubscribe or 2 years after your last interaction. Website logs: 12 months. Consent records: as long as consent is relied on plus 5 years. Afterwards data is deleted or anonymised unless a legal claim requires longer retention.

We apply technical and organisational measures appropriate to the risk, including access controls, multi-factor authentication, logging, encryption in transit, backups, supplier controls and incident management. We report data breaches to the Dutch Data Protection Authority and, where required, to you, within the GDPR deadlines.

You may request access, rectification, erasure, restriction and data portability, and you may object to processing based on legitimate interest. You may object at any time to direct marketing, and we will then stop. Where processing is based on consent you may withdraw it at any time without affecting earlier processing. We answer within one month, extendable by two months for complex requests, and may ask for information to verify your identity. We do not make decisions about you based solely on automated processing. Requests: CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands.

Every marketing email contains an unsubscribe link. Unsubscribing does not stop operational messages about an enquiry, order, rental, delivery, invoice or account. Cookies are described in the Netherlands Cookie Policy.

Please contact CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), www.autoriteitpersoonsgegevens.nl.

We may update this notice; the effective date shows the current version.

Website: cboxcontainers.nl and cboxcontainers.com Effective date: 12 October 2026

This policy explains how CBOX Containers Netherlands B.V. uses cookies, pixels, tags, local storage and similar technologies ("cookies") under article 11.7a of the Dutch Telecommunications Act and the GDPR. Read it together with the Privacy Notice.

On your first visit the cookie banner offers Accept all, Reject all and Manage choices, with equal prominence. No optional category is pre-selected and no optional cookie is set before you choose. You can change or withdraw your choice at any time through the Cookie Settings link at the bottom of every page. Refusing is as easy as accepting. Withdrawal does not affect earlier lawful processing. We ask for a new choice when our purposes or providers change materially, and at the latest every 12 months.

We record the consent version, the categories you selected, the timestamp and a consent reference so that we can demonstrate your choice.

The current list of cookies, with name, provider, purpose, category, duration and whether the provider receives data outside the European Economic Area, is shown in Cookie Settings. It is updated automatically whenever the website changes.

You can also block or delete cookies in your browser; some website functions may then not work. Questions: CBOX Containers Netherlands B.V., Vijfhuizerdijk 240, 2141 BL Vijfhuizen, the Netherlands. Complaints may also be lodged with the Dutch Data Protection Authority.

Website: cboxcontainers.be Effective date: 12 October 2026

This notice explains how CBOX Containers Belgium BV ("CBOX", "we") processes personal data through this website and in connection with enquiries, quotations, sales, rentals, modifications, delivery, customer accounts and related services, under the GDPR, the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and the Belgian Electronic Communications Act.

CBOX Containers Belgium BV, Heizegemweg 12, 2030 Antwerp, Belgium. Enterprise number 0694.620.562, VAT BE0694620562. Privacy contact: CBOX Containers Belgium BV, Heizegemweg 12, 2030 Antwerp, Belgium.

• Identity and business contact data: name, organisation, position, address, email address, telephone number.
• Enquiry, quotation, order, rental, delivery, collection, modification, depot, invoice, payment status and customer service records.
• Account credentials and activity where you use an online account or customer portal.
• Communications, documents and instructions you or your organisation send us.
• Creditworthiness data on your organisation and, for sole traders, on you, from credit reference agencies and the Crossroads Bank for Enterprises.
• Website and device data: IP address, browser type, device identifiers, pages viewed, referring pages, timestamps and cookie or pixel identifiers.
• Marketing preferences and records of consent, objections and unsubscribes.
• Security and audit data needed to protect CBOX, its customers and its systems.

You or the organisation you represent, this website, email and telephone, our business systems, CBOX group companies, depots, carriers, payment providers and other parties involved in your order, the Crossroads Bank for Enterprises, credit reference agencies and business data providers.

You may ask the privacy contact for our legitimate interest assessments.

CBOX group companies; depots, carriers, transport and modification partners; payment, finance and credit reference providers; IT hosting, software and support providers (CRM, ERP, finance and Microsoft 365); website, communications, analytics and marketing providers activated in line with your cookie choices; insurers, auditors, professional advisers; regulators, courts and law enforcement where required. Providers that process data on our behalf are bound by processing agreements. We do not sell personal data.

CBOX runs shared services for finance, IT and sales support from its office in Dubai, United Arab Emirates, and uses providers in the Netherlands, the UAE, Australia, the United Kingdom and the United States. The United Kingdom is covered by an EU adequacy decision. For the UAE, Australia and other countries without an adequacy decision we use the European Commission Standard Contractual Clauses, concluded between the CBOX group companies and with our providers, together with additional measures where required. For US providers we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses. You can request a copy of the relevant safeguard from the privacy contact.

Contract, invoice and payment records: 7 years after the end of the financial year (Belgian accounting and VAT retention; 10 years for records relating to immovable property). Quotations that do not lead to a contract: 2 years. Customer account data: for the duration of the relationship plus 7 years. Marketing data: until you unsubscribe or 2 years after your last interaction. Website logs: 12 months. Consent records: as long as consent is relied on plus 5 years. Afterwards data is deleted or anonymised unless a legal claim requires longer retention.

We apply technical and organisational measures appropriate to the risk, including access controls, multi-factor authentication, logging, encryption in transit, backups, supplier controls and incident management. We report data breaches to the Belgian Data Protection Authority and, where required, to you, within the GDPR deadlines.

You may request access, rectification, erasure, restriction and data portability, and you may object to processing based on legitimate interest. You may object at any time to direct marketing, and we will then stop. Where processing is based on consent you may withdraw it at any time without affecting earlier processing. We answer within one month, extendable by two months for complex requests, and may ask for information to verify your identity. We do not make decisions about you based solely on automated processing. Requests: CBOX Containers Belgium BV, Heizegemweg 12, 2030 Antwerp, Belgium.

Every marketing email contains an unsubscribe link. Unsubscribing does not stop operational messages about an enquiry, order, rental, delivery, invoice or account. Cookies are described in the Belgium Cookie Policy.

Please contact CBOX Containers Belgium BV, Heizegemweg 12, 2030 Antwerp, Belgium first. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be.

We may update this notice; the effective date shows the current version.

Website: cboxcontainers.be Effective date: 12 October 2026

This policy explains how CBOX Containers Belgium BV uses cookies, pixels, tags, local storage and similar technologies ("cookies") under article 129 of the Belgian Electronic Communications Act and the GDPR. Read it together with the Privacy Notice.

On your first visit the cookie banner offers Accept all, Reject all and Manage choices, with equal prominence. No optional category is pre-selected and no optional cookie is set before you choose. You can change or withdraw your choice at any time through the Cookie Settings link at the bottom of every page. Refusing is as easy as accepting. Withdrawal does not affect earlier lawful processing. We ask for a new choice when our purposes or providers change materially, and at the latest every 12 months.

We record the consent version, the categories you selected, the timestamp and a consent reference so that we can demonstrate your choice.

The current list of cookies, with name, provider, purpose, category, duration and whether the provider receives data outside the European Economic Area, is shown in Cookie Settings. It is updated automatically whenever the website changes.

You can also block or delete cookies in your browser; some website functions may then not work. Questions: CBOX Containers Belgium BV, Heizegemweg 12, 2030 Antwerp, Belgium. Complaints may also be lodged with the Belgian Data Protection Authority.

Website: cboxcontainers.de Effective date: 12 October 2026

This notice explains how CBOX Containers Germany GMBH ("CBOX", "we") processes personal data through this website and in connection with enquiries, quotations, sales, rentals, modifications, delivery, customer accounts and related services, under the GDPR, the German Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

CBOX Containers Germany GMBH, Porgesring 29, 22113 Hamburg, Deutschland. Handelsregister HRB 33753, Amtsgericht Stendal, VAT ID DE368489713. Privacy contact: CBOX Containers Germany GMBH, Porgesring 29, 22113 Hamburg, Deutschland. Data protection officer: Not appointed.

• Identity and business contact data: name, organisation, position, address, email address, telephone number.
• Enquiry, quotation, order, rental, delivery, collection, modification, depot, invoice, payment status and customer service records.
• Account credentials and activity where you use an online account or customer portal.
• Communications, documents and instructions you or your organisation send us.
• Creditworthiness data on your organisation and, for sole traders, on you, from credit reference agencies and the Handelsregister.
• Website and device data: IP address, browser type, device identifiers, pages viewed, referring pages, timestamps and cookie or pixel identifiers. Server log files are kept for 7 days for security purposes under art. 6(1)(f) GDPR.
• Marketing preferences and records of consent, objections and unsubscribes.
• Security and audit data needed to protect CBOX, its customers and its systems.

You or the organisation you represent, this website, email and telephone, our business systems, CBOX group companies, depots, carriers, payment providers and other parties involved in your order, the Handelsregister, credit reference agencies and business data providers.

You may ask the privacy contact for our legitimate interest assessments.

CBOX group companies; depots, carriers, transport and modification partners; payment, finance and credit reference providers; IT hosting, software and support providers (CRM, ERP, finance and Microsoft 365); website, communications, analytics and marketing providers activated in line with your cookie choices; insurers, auditors, professional advisers; regulators, courts and law enforcement where required. Providers that process data on our behalf are bound by processing agreements under art. 28 GDPR. We do not sell personal data.

CBOX runs shared services for finance, IT and sales support from its office in Dubai, United Arab Emirates, and uses providers in the Netherlands, the UAE, Australia, the United Kingdom and the United States. The United Kingdom is covered by an EU adequacy decision. For the UAE, Australia and other countries without an adequacy decision we use the European Commission Standard Contractual Clauses, concluded between the CBOX group companies and with our providers, together with additional measures where required. For US providers we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses. You can request a copy of the relevant safeguard from the privacy contact.

Accounting records, invoices and booking documents: 10 years; commercial correspondence: 6 years (§ 257 HGB, § 147 AO), each from the end of the calendar year. Quotations that do not lead to a contract: 2 years. Customer account data: for the duration of the relationship plus the statutory periods above. Marketing data: until you unsubscribe or 2 years after your last interaction. Server logs: 7 days. Consent records: as long as consent is relied on plus 3 years (limitation period). Afterwards data is deleted or anonymised unless a legal claim requires longer retention.

We apply technical and organisational measures under art. 32 GDPR appropriate to the risk, including access controls, multi-factor authentication, logging, encryption in transit, backups, supplier controls and incident management. We report data breaches to the competent German supervisory authority and, where required, to you, within the GDPR deadlines.

You may request access (art. 15), rectification (art. 16), erasure (art. 17), restriction (art. 18) and data portability (art. 20), and you may object to processing based on legitimate interest (art. 21). You may object at any time to direct marketing, and we will then stop. Where processing is based on consent you may withdraw it at any time without affecting earlier processing (art. 7(3)). We answer within one month, extendable by two months for complex requests, and may ask for information to verify your identity. We do not make decisions about you based solely on automated processing (art. 22). Requests: CBOX Containers Germany GMBH, Porgesring 29, 22113 Hamburg, Deutschland.

Every marketing email contains an unsubscribe link. Unsubscribing does not stop operational messages about an enquiry, order, rental, delivery, invoice or account. Cookies are described in the Germany Cookie Policy.

Please contact CBOX Containers Germany GMBH, Porgesring 29, 22113 Hamburg, Deutschland first. You also have the right to lodge a complaint with a data protection supervisory authority (art. 77 GDPR), in particular the authority of the German federal state in which CBOX is established: Landesbeauftragte für den Datenschutz Sachsen-Anhalt, Postfach 1947, 39009 Magdeburg, https://datenschutz.sachsen-anhalt.de.

We may update this notice; the effective date shows the current version.

Website: cboxcontainers.de Effective date: 12 October 2026

This policy explains how CBOX Containers Germany GMBH uses cookies, pixels, tags, local storage and similar technologies ("cookies") under § 25 TDDDG and the GDPR. Read it together with the Datenschutzerklärung.

On your first visit the cookie banner offers Accept all, Reject all and Manage choices, with equal prominence. No optional category is pre-selected and no optional cookie is set, and no data is read from your device, before you consent. You can change or withdraw your choice at any time through the Cookie Settings link at the bottom of every page. Refusing is as easy as accepting. Withdrawal does not affect earlier lawful processing. We ask for a new choice when our purposes or providers change materially, and at the latest every 12 months.

We record the consent version, the categories you selected, the timestamp and a consent reference so that we can demonstrate your choice (art. 7(1) GDPR).

The current list of cookies, with name, provider, purpose, category, duration, legal basis and whether the provider receives data outside the European Economic Area, is shown in Cookie Settings. It is updated automatically whenever the website changes.

You can also block or delete cookies in your browser; some website functions may then not work. Questions: CBOX Containers Germany GMBH, Porgesring 29, 22113 Hamburg, Deutschland. Complaints may also be lodged with the competent German supervisory authority.

Website: cboxcontainers.com.au Effective date: 12 October 2026

This policy explains how CBOX Containers Australia Pty Limited (ABN 88 162 495 945) ("CBOX", "we") collects, holds, uses and discloses personal information through this website and in connection with enquiries, quotations, sales, rentals, modifications, delivery, customer accounts and related services. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and by the Spam Act 2003 (Cth) for electronic marketing.

CBOX Containers Australia Pty Limited, 5/30 Templar Place, Bennetts Green NSW 2290, Australia. Privacy contact: CBOX Containers Australia Pty Limited, 5/30 Templar Place, Bennetts Green NSW 2290, Australia.

• Identity and business contact information: name, organisation, position, address, email address, telephone number.
• Enquiry, quotation, order, rental, delivery, collection, modification, depot, invoice, payment status and customer service records.
• Account credentials and activity where you use an online account or customer portal.
• Communications, documents and instructions you or your organisation send us.
• Credit information about your business and, where you are a sole trader or guarantor, about you, obtained from credit reporting bodies and ASIC registers in accordance with Part IIIA of the Privacy Act. Our separate Credit Reporting Policy, available on request, explains how we handle credit information.
• Website and device information: IP address, browser type, device identifiers, pages viewed, referring pages, timestamps and cookie or pixel identifiers.
• Marketing preferences and records of consent, objections and unsubscribes.
• Security and audit information needed to protect CBOX, its customers and its systems.

We do not collect sensitive information unless you provide it and it is reasonably necessary, for example medical details relevant to a site access requirement. You may deal with us anonymously or under a pseudonym for general enquiries, but not for quotations, orders, rentals or accounts.

Directly from you or the organisation you represent, through this website, email and telephone and our business systems; from CBOX group companies, depots, carriers, payment providers and other parties involved in your order; and from ASIC registers, credit reporting bodies and business data providers. If we collect personal information about you from someone else, we take reasonable steps to notify you.

CBOX group companies; depots, carriers, transport and modification partners; payment, finance and credit reporting providers; IT hosting, software and support providers (CRM, ERP, finance and Microsoft 365); website, communications, analytics and marketing providers activated in line with your cookie choices; insurers, auditors, professional advisers; regulators, courts and law enforcement where required. We do not sell personal information.

We disclose personal information to CBOX group companies and service providers located in the Netherlands, the United Arab Emirates (where CBOX runs its shared finance, IT and sales support services), the United Kingdom, the United States and other European Union countries. Before disclosing personal information overseas we take reasonable steps required by APP 8 to ensure the recipient handles it in accordance with the APPs, including contractual data protection obligations with CBOX group companies and providers.

Financial, tax and contract records: 7 years after the transaction (Corporations Act and tax law). Quotations that do not lead to a contract: 2 years. Customer account information: for the duration of the relationship plus 7 years. Marketing information: until you opt out or 2 years after your last interaction. Website logs: 12 months. Consent records: as long as the consent is relied on plus 6 years. When personal information is no longer needed and we are not required to keep it, we take reasonable steps to destroy or de-identify it.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure, including access controls, multi-factor authentication, logging, encryption in transit, backups, supplier controls and incident management. We assess data breaches under the Notifiable Data Breaches scheme and notify the Office of the Australian Information Commissioner and affected individuals where required.

You may ask for access to the personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We respond within 30 days and do not charge for a request, although we may charge reasonable costs for providing copies. If we refuse access or correction we will give written reasons and tell you how to complain. Requests: CBOX Containers Australia Pty Limited, 5/30 Templar Place, Bennetts Green NSW 2290, Australia.

We do not make decisions about you using computer programs without human involvement that could significantly affect your rights or interests.

We send electronic marketing with your consent, including inferred consent from an existing business relationship, and every message includes a functional unsubscribe facility, as the Spam Act requires. We act on opt-outs within 5 business days and never charge for them. Unsubscribing does not stop operational messages about an enquiry, order, rental, delivery, invoice or account. On request we will tell you where we obtained your information.

Cookies, analytics tools and tracking pixels are described in the Australia Cookie Policy.

Send a privacy complaint to CBOX Containers Australia Pty Limited, 5/30 Templar Place, Bennetts Green NSW 2290, Australia with enough detail for us to investigate. We acknowledge complaints within 7 days and aim to respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner, www.oaic.gov.au, or for credit information to the Australian Financial Complaints Authority.

We may update this policy; the effective date shows the current version. A copy is available free of charge on request.

Website: cboxcontainers.com.au Effective date: 12 October 2026

This policy explains how CBOX Containers Australia Pty Limited uses cookies, pixels, tags, local storage and similar technologies ("cookies") and how they may collect personal information under the Privacy Act 1988 (Cth). Read it together with the Privacy Policy.

Advertising and analytics providers may receive online identifiers and interaction data through pixels on our site. Each active provider and its purpose is named in the cookie list, and we handle the information in line with the APPs. Where a provider is located overseas, the Privacy Policy's overseas disclosure section applies.

On your first visit the cookie banner lets you accept all, reject all, or choose categories. Advertising and embedded-content cookies are not set until you choose. You can change or withdraw your choice at any time through the Cookie Settings link at the bottom of every page. Marketing emails are managed separately through their unsubscribe link.

The current list of cookies, with name, provider, purpose, category, duration and whether the provider is located overseas, is shown in Cookie Settings. It is updated automatically whenever the website changes.

You can also block or delete cookies in your browser; some website functions may then not work. Questions: CBOX Containers Australia Pty Limited, 5/30 Templar Place, Bennetts Green NSW 2290, Australia.