Privacy Policy

1. Data controller

Fratelli Zuccato S.r.l. — Via Dante, 2, 36010 Chiuppano (VI), Italy — VAT no. 02569330240.

Email: info@zuccato.com — Phone: +39 0445 896000.

The Controller has not appointed a Data Protection Officer: for any privacy request please write to the contacts above.

2. Categories of data processed

• Browsing data: IP addresses (anonymised where possible), browser and device type, operating system, pages visited, date and time of access, collected automatically by the site systems and server logs.
• Data provided voluntarily: name, surname, company, email, phone and the content of the message sent through the contact form or to our published email addresses.
• Data collected through cookies and similar technologies: see our Cookie Policy.

3. Purposes and legal bases

• Replying to requests sent through the contact form or by email — legal basis: pre-contractual measures and legitimate interest in managing the relationship (Art. 6.1.b and 6.1.f GDPR).
• Ensuring the operation, security and correct delivery of the website — legitimate interest (Art. 6.1.f GDPR).
• Statistical measurement and improvement of the site through analytics cookies — consent (Art. 6.1.a GDPR).
• Compliance with legal, accounting and tax obligations — legal obligation (Art. 6.1.c GDPR).

4. Nature of the provision of data

Providing browsing data is necessary to use the website. Providing data via the contact form is optional, but failure to complete the mandatory fields makes it impossible to handle your request.

5. Recipients and processors

Data may be processed by authorised staff of the Controller and by external suppliers acting as processors under Art. 28 GDPR: hosting and CDN providers, email services, statistical analysis providers (Google Analytics 4) and professional consultants. Data is never disseminated or sold to third parties.

6. Transfers outside the EU

Some suppliers (e.g. Google LLC for Google Analytics) may process data outside the European Economic Area. Such transfers rely on European Commission adequacy decisions (EU-US Data Privacy Framework) or on Standard Contractual Clauses with appropriate supplementary measures.

7. Retention periods

• Contact requests: up to 24 months from the last communication, unless otherwise required by law.
• System and security logs: maximum 12 months.
• Statistical data from analytics cookies: maximum 14 months.
• Data subject to tax and accounting obligations: 10 years.

8. Your rights

You may at any time exercise the rights under Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent (without affecting the lawfulness of processing carried out before withdrawal).

Requests should be sent to info@zuccato.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it).

9. Security and automated decision-making

We adopt appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction, including encrypted HTTPS connections and access restricted to authorised staff. We do not carry out automated decision-making or profiling under Art. 22 GDPR.

10. Third-party links and updates

This site may contain links to third-party websites: the Controller is not responsible for their privacy practices. This notice may be updated; changes will be published on this page together with the update date.