Outronox

PRIVACY POLICY

Last updated: 2 September 2026

This Privacy Policy applies between you, the user of this Website (“User”), and Night Division, the owner and data controller of this Website.

This Website and the services described below are operated under the Outronox brand.

Night Division takes the protection of personal data seriously and processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Italian data protection laws.

1. DEFINITIONS

For the purposes of this Privacy Policy:

Data means any information relating to an identified or identifiable natural person.
Website means www.outronox.com, including its pages, subdirectories, related subdomains and services operated under the Outronox brand.
Services means the services made available through the Website, including the Outronox physical store, digital/VOD services, the Outronox Horror Film Festival, contact forms and related online services.
User means any individual who accesses or uses the Website or Services.
Data Controller means Night Division, wholly owned by Antony Coia.
GDPR means Regulation (EU) 2016/679.

2. DATA CONTROLLER

The Data Controller for the purposes of the GDPR is:

Night Division
Wholly owned by Antony Coia
Registered office:
Via Egidio Lanoce 119
73024 Maglie (LE) – Italy

Contact email: nightdivisionac@gmail.com

3. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data processed through the Website and the Outronox services made available through it, including:

the physical store, including customer accounts, DVD/Blu-ray orders, payments, shipping and customer support;
digital and VOD services, including purchases, access to digital content and related account or transaction information;
the Outronox Horror Film Festival, including submissions, contact forms, selection-related communications and festival administration;
general contact requests, mailing lists and other Website functionality.

This Privacy Policy does not govern third-party websites, platforms or services that may be linked from the Website and that process personal data independently. Users should review the privacy information provided by those third parties.

4. DATA WE MAY COLLECT

The categories of personal data collected depend on the Service used.

4.1 General Website and account data

identification data, such as name and surname;
contact data, such as email address and, where required, telephone number;
account information, login-related data, preferences and settings;
communications sent to Outronox through forms, email or customer support;
technical data, such as IP address, browser type, operating system, device information and security logs;
usage data relating to Website interactions, subject to applicable cookie and consent requirements.

4.2 Physical store data

When a User purchases physical products, Outronox may process:

billing and shipping details;
order history and purchased products;
transaction status, payment reference or similar payment-related information;
shipping, delivery and customer-service information.

Full payment-card details are generally processed directly by the relevant payment provider and are not intended to be stored by Outronox.

4.3 Digital / VOD data

When a User purchases or accesses digital content, Outronox may process:

account and transaction information;
digital purchase or entitlement information;
content-access information and technical access logs where generated by the digital service;
information necessary to provide, protect and support access to purchased or licensed digital content.

4.4 Outronox Horror Film Festival data

When a film, trailer, poster, original score or other eligible work is submitted to the Outronox Horror Film Festival, Outronox may process information including:

the submitter’s name, contact details and professional information;
the title, category, synopsis, credits and other information relating to the submitted work;
names and professional credits of directors, cast, crew or other persons connected with the submitted work where supplied by the submitter;
screener links, private viewing links, passwords or other access information supplied for evaluation;
posters, stills, trailers, audio files, documents and other submission materials;
declarations, permissions, consents and information relating to rights in the submitted work;
communications relating to submission status, eligibility, selection, awards and festival participation.

Private screener links, passwords and non-public submission materials are used for festival administration and evaluation and are not intended for public disclosure.

If a submitted work is selected, nominated or awarded, professional information and promotional materials such as the work title, filmmaker name, credits, poster, stills, trailer, synopsis and selection or award status may be published through Outronox channels in connection with the Festival and its promotion, subject to the applicable Festival Rules and the rights granted by the submitter.

4.5 Data relating to third parties

Where a User or festival submitter provides personal data relating to another person, the person providing that data is responsible for ensuring that they are authorized to provide it and that any required information or consent has been obtained.

Users should avoid providing personal data that is not necessary for the relevant Service.

5. HOW DATA IS COLLECTED

Personal data may be collected:

directly from the User when an account is created, an order is placed, a form is completed, a festival submission is made or Outronox is contacted;
automatically through technical systems necessary to operate and secure the Website;
through cookies or similar technologies, where permitted and subject to the User’s consent where required;
from a representative or submitter who provides information on behalf of another person in connection with a festival submission or business relationship.

6. PURPOSES AND LEGAL BASIS OF PROCESSING

Personal data may be processed for the following purposes and legal bases:

Website operation, security and fraud prevention – based on Outronox’s legitimate interest in operating and protecting the Website and its Services.
Customer accounts and physical orders – processing necessary to perform a contract, take steps requested before entering into a contract, and comply with legal obligations.
Digital / VOD purchases and access – processing necessary to perform a contract and provide purchased or licensed digital content.
Festival submissions and administration – processing necessary to manage the submission, evaluate eligibility, communicate with the submitter and administer participation in the Festival, based on contractual or pre-contractual steps and, where applicable, legitimate interests.
Festival publicity and publication of selected works – processing necessary to administer and promote the Festival in accordance with the Festival Rules, contractual arrangements, legitimate interests and, where required, consent.
Customer service, contact requests and communications – based on steps requested by the User, performance of a contract or legitimate interests in responding to enquiries.
Accounting, tax, legal and regulatory compliance – based on compliance with legal obligations.
Defence or exercise of legal claims – based on legitimate interests and applicable law.
Marketing communications – based on consent where consent is required. Consent may be withdrawn at any time.
Analytics and non-essential cookies – based on consent where required by applicable law.

Where processing is necessary to perform a contract or to take requested pre-contractual steps, failure to provide the required data may prevent Outronox from providing the relevant Service, processing an order or accepting and administering a festival submission.

7. DATA RETENTION

Personal data is retained only for as long as necessary for the purposes for which it was collected and for any additional period required to comply with legal, accounting, tax or regulatory obligations, or to establish, exercise or defend legal claims.

In particular:

account data may be retained while the account remains active and for a reasonable period thereafter where necessary;
orders, invoices, transactions and accounting records are retained for the periods required by applicable law;
digital / VOD transaction and entitlement information may be retained for as long as necessary to provide access, support purchases, prevent abuse and comply with legal obligations;
festival submission data may be retained for the relevant festival edition and for a reasonable administrative period thereafter, including where necessary for records, rights management, disputes, selections, awards or future verification;
marketing data is retained until consent is withdrawn or the data is no longer required for the relevant marketing purpose;
technical and security logs are retained only for a period reasonably necessary for security, troubleshooting and fraud prevention.

Data that is no longer required will be deleted, anonymized or otherwise handled in accordance with applicable law.

8. DATA SHARING AND THIRD PARTIES

Personal data may be disclosed to third parties only where necessary for the purposes described in this Privacy Policy, including:

payment service providers;
hosting, cloud and infrastructure providers;
website, form, database, security and technical-service providers;
shipping, postal and logistics providers for physical orders;
digital-content or VOD technology providers where used;
email, communication or newsletter service providers;
professional advisers, accountants, legal advisers or public authorities where required;
persons involved in the administration and evaluation of festival submissions where access is necessary for their role.

Depending on the service and their legal role, such recipients may act as data processors on behalf of Night Division or as independent data controllers. Where required, appropriate data-processing agreements and safeguards are used.

Personal data is not sold to third parties.

9. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, Outronox will use an appropriate transfer mechanism where required by the GDPR, such as an adequacy decision, Standard Contractual Clauses or another lawful safeguard.

10. USER RIGHTS

Subject to the conditions and limitations provided by the GDPR, Users may have the right to:

access their personal data;
request rectification or updating of inaccurate data;
request erasure of personal data;
request restriction of processing;
object to processing based on legitimate interests;
request data portability where applicable;
withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
lodge a complaint with a competent supervisory authority, including the Italian Garante per la protezione dei dati personali.

Requests may be submitted to the Data Controller using the contact details provided in this Privacy Policy. Outronox may request information reasonably necessary to verify the identity of the person making the request.

11. AUTOMATED DECISION-MAKING

Unless expressly stated otherwise, Outronox does not use solely automated decision-making that produces legal effects or similarly significant effects on Users.

12. SECURITY

Night Division implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, destruction or disclosure.

Access to non-public data, including private festival submission materials, is limited to persons or service providers who require access for the relevant purpose.

However, no internet transmission or storage system can be guaranteed to be completely secure.

13. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies and similar technologies for essential functionality, security, preferences, analytics and other permitted purposes.

Where consent is legally required, non-essential cookies or similar technologies are activated only after the User has provided the required consent through the Website’s cookie-management system.

Users may change or withdraw their cookie choices through the available consent controls or browser settings. Disabling certain cookies may affect Website functionality.

Where a separate Cookie Policy is available, it should be read together with this Privacy Policy.

14. CHANGES TO THIS PRIVACY POLICY

Night Division may update this Privacy Policy to reflect changes in legal requirements, Website functionality or Outronox services.

The current version will be published on this page and the “Last updated” date will be revised accordingly. Where appropriate, material changes may also be communicated through the Website or other suitable means.

15. CONTACT

For questions regarding this Privacy Policy, the processing of personal data or the exercise of GDPR rights, Users may contact:

Night Division
Email: nightdivisionac@gmail.com