This notice explains how ZAOT S.r.l. processes the personal data of visitors to zaot.com and of anyone who contacts us through the details published on the site. The site has no registration or contact forms and uses no profiling or analytics tools.
1. Data controller
ZAOT S.r.l.
Via Restelli 20, 20009 Vittuone (MI), Italy
VAT IT08812280157 · REA MI 1248727
Email: info@zaot.com · Phone +39 02 9026 0681
2. Data we process
Browsing data
The systems running this website collect, during normal operation, some data whose transmission is implicit in Internet protocols: IP address, date and time of the request, requested page, server response code, browser type and operating system. This data is used only to keep the site working and secure and is not used to identify visitors.
Data you provide
If you email us or call the numbers shown on the site, we process the data you give us (for example name, company, contact details and the content of your request) in order to reply.
Cookies
The site only uses one technical cookie to remember your cookie choices. Full details are in the Cookie Policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Running the website and keeping it secure (browsing data) | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Replying to requests for information, quotes or advice | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Managing any resulting business relationship | Performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c) GDPR) |
| Establishing, exercising or defending legal claims | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
4. Providing your data
Browsing data is necessary to use the site. Providing data to contact us is optional, but without it we cannot reply to your request.
5. How and how long we keep data
Data is processed electronically and manually, with technical and organisational measures that protect it against unauthorised access, loss or disclosure.
- Browsing data: kept only as long as needed for site security and in any case no longer than 12 months, unless needed to investigate offences.
- Contact requests: as long as needed to handle the request and no longer than 24 months after the last contact.
- Data related to a contract: 10 years after it ends, as required by Italian civil and tax law.
6. Recipients
Data is processed by authorised ZAOT S.r.l. staff and may be shared with service providers appointed as processors under Art. 28 GDPR: the website hosting provider (Aruba S.p.A., servers in Italy), email and IT service providers, and administrative and tax advisors. It may also be disclosed to public authorities where required by law. Data is never published.
7. Transfers outside the EU
Data is stored in the European Union. Should a provider process it outside the European Economic Area, the transfer will only take place under an adequacy decision of the European Commission or other safeguards under Articles 45-49 GDPR.
8. Links to third-party sites
The site links to other websites, such as Google Maps (directions to our premises) and TÜV Rheinland. These services are not loaded until you click the link; once opened, their own privacy policies apply.
9. Your rights
At any time you can ask the controller, by writing to info@zaot.com, for:
- access to your data and a copy of it (Art. 15);
- correction of inaccurate data or completion of incomplete data (Art. 16);
- erasure of your data (Art. 17) or restriction of processing (Art. 18);
- data portability (Art. 20);
- objection to processing based on legitimate interest (Art. 21).
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country of residence.
10. Changes
This notice may be updated, for example when new site features are added or the law changes. The date of the last update is shown at the top of this page.