Privacy Policy
Information on the Processing of Personal Data Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
Last updated: November 12, 2026
1. Data Controller
The Data Controller responsible for the processing of personal data is:
ZONAM SNC
Registered Office: Via Donatello 12, 20090 Monza (MB), Italy
VAT Number: IT08658220960
Email: info@zonam.it
Hereinafter also referred to as “ZONAM” or the “Data Controller”.
For any inquiries regarding the protection of personal data, users may contact the Data Controller at the email address provided above.
2. Scope of Application
This Privacy Policy describes how ZONAM collects, uses, stores, and protects the personal data of users who visit its website and interact with the services available.
The website presents the company’s activities, including automotive interior customization, restoration services, craftsmanship, and the production of automotive upholstery and motorcycle seats.
This Privacy Policy applies to website browsing, the use of contact forms, and communications voluntarily submitted by users.
3. Categories of Personal Data Processed
3.1 Browsing Data
During website navigation, the computer systems and software procedures used to operate the website may automatically collect certain technical information, including:
IP address of the device used.
Browser type and operating system.
Date and time of requests.
Pages and resources visited.
Technical information relating to HTTP requests.
Any operating errors and data necessary to ensure website security.
This information is processed to enable the website to function properly, monitor its security, prevent unauthorized access, and diagnose potential technical issues.
3.2 Data Voluntarily Provided by Users
When users contact ZONAM through a contact form, email, telephone, or other available communication channels, the following information may be processed:
First and last name.
Email address.
Telephone number.
Information relating to the vehicle or requested service.
Message content.
Any photographs, documents, or other materials voluntarily submitted.
This information will be used to manage inquiries, provide information, prepare quotations, and carry out any requested pre-contractual or contractual activities.
Users are encouraged not to submit unnecessary personal data, particularly sensitive information or data relating to third parties, unless such disclosure is necessary and lawful.
3.3 Cookies and Similar Technologies
The website may use technical cookies and, where the relevant tools are implemented, analytics cookies or other tracking technologies.
Information regarding cookie categories, purposes, durations, and consent management procedures is available in the Cookie Policy.
4. Purposes and Legal Bases of Processing
ZONAM processes personal data for the following purposes:
A. Website Operation and Security
To ensure website accessibility, service stability, technical maintenance, and the prevention of unlawful activities.
Legal basis: the legitimate interests of the Data Controller pursuant to Article 6(1)(f) of the GDPR, where applicable.
B. Management of Contact Requests
To respond to questions, requests for information, and communications voluntarily submitted by users.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) of the GDPR, or legitimate interests in managing communications, where applicable.
C. Quotations and Contractual Relationships
To prepare commercial offers, organize services, manage assignments, and fulfill obligations arising from business relationships.
Legal basis: Article 6(1)(b) of the GDPR.
D. Administrative and Legal Obligations
To comply with tax, accounting, and other obligations established by applicable legislation.
Legal basis: compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR.
E. Protection of Legal Rights
To establish, exercise, or defend the Data Controller’s rights, including in legal proceedings.
Legal basis: the legitimate interests of the Data Controller, within the limits established by the GDPR.
F. Statistical Analysis and Online Promotional Activities
Where analytics tools requiring consent, personalized advertising, or tracking technologies are implemented, the relevant data will be processed only after obtaining the user’s consent, when required by applicable legislation.
Legal basis: consent pursuant to Article 6(1)(a) of the GDPR, together with the applicable provisions governing cookies and other tracking technologies.
Promotional emails are not sent solely on the basis of a request for information. Any direct marketing activities will be subject to appropriate privacy notices and legal bases.
5. Nature of Data Provision
The provision of technical data strictly necessary for the functioning of the website is associated with normal browsing activities.
Providing personal data when contacting ZONAM is voluntary. However, failure to provide the information necessary to process a request may prevent the Data Controller from responding or providing the requested service.
Consent to any non-essential tracking technologies is optional, and refusing such consent does not prevent access to the website’s ordinary content.
6. Processing Methods and Security Measures
Personal data is processed using electronic, telematic, and, where necessary, paper-based systems, with technical and organizational measures appropriate to the level of risk.
ZONAM applies the principles of data minimization, purpose limitation, confidentiality, integrity, and storage limitation.
Access to personal data is restricted to authorized individuals and any service providers who need to process such data for legitimate and documented purposes.
7. Recipients of Personal Data
Within the limits of the purposes described above, personal data may be disclosed to:
Hosting, infrastructure, and IT service providers.
Professionals responsible for website maintenance and management.
Email and communication service providers.
Administrative, tax, and legal consultants, where necessary.
Providers of technical, statistical, or integrated content services, where actually used.
Public authorities and other entities legally entitled to receive such information.
Service providers processing personal data on behalf of ZONAM are appointed as Data Processors pursuant to Article 28 of the GDPR, where applicable.
Personal data is not sold to third parties.
8. Transfers of Personal Data Outside the EEA
The use of certain technology providers may involve transfers of personal data outside the European Economic Area (EEA).
Where such transfers occur, ZONAM undertakes to use the mechanisms provided for by the GDPR, including European Commission adequacy decisions, Standard Contractual Clauses, or other applicable safeguards.
Information regarding the safeguards actually adopted may be requested from the Data Controller.
9. Data Retention Period
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected, unless longer retention is required by law or necessary to protect legal rights.
In particular:
Information requests not resulting in a business relationship: for the time necessary to manage the request and, subsequently, for a period proportionate to any documentation requirements or the protection of legal rights.
Quotations and negotiations: for the period necessary to manage the negotiation and protect the associated legal rights.
Contractual relationships and administrative documentation: in accordance with the retention periods prescribed by applicable legislation, including, where relevant, the ten-year retention requirement for accounting records.
Technical and security logs: for limited periods proportionate to the purposes of technical management and website protection.
Data collected through consent-based technologies: according to the durations indicated in the Cookie Policy and the settings of the relevant services.
Specific operational retention periods are determined by the Data Controller based on the purposes of processing, the type of data, and applicable legal obligations.
10. Third-Party Services and Content
The website may contain links to external platforms, social networks, and third-party services.
The mere presence of an external link does not necessarily involve the transmission of data to the linked platform.
Where embedded content is present, such as videos, maps, social media feeds, or other external elements, the use of such services may result in technical data being transmitted to the relevant provider.
The activation of any non-essential technologies will be subject to the applicable consent requirements.
For processing activities carried out independently by external platforms, users are encouraged to consult their respective privacy policies.
11. Data Subject Rights
In the circumstances and within the limits established by Articles 15–22 of the GDPR, data subjects may exercise the following rights:
Access to their personal data.
Rectification of inaccurate data.
Erasure of personal data.
Restriction of processing.
Data portability, where applicable.
Objection to processing, where provided by law.
Withdrawal of previously given consent, without affecting the lawfulness of processing carried out before such withdrawal.
Data subjects also have the right to object at any time to the processing of their personal data for direct marketing purposes, where such processing takes place.
Requests may be sent to:
The Data Controller will respond within the time limits established by Article 12 of the GDPR, generally within one month of receiving the request, subject to any extensions permitted by law.
12. Complaints to the Supervisory Authority
Data subjects who believe that the processing of their personal data violates applicable legislation may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures described on its official website:
This does not affect the right to seek a judicial remedy before the competent courts.
13. Automated Decision-Making
In the ordinary management of requests submitted through the website, ZONAM does not envisage decisions based solely on automated processing that produce legal effects or similarly significant effects concerning data subjects, within the meaning of Article 22 of the GDPR.
Should such processing activities be introduced, this Privacy Policy will be updated and the additional measures required by law will be implemented.
14. Changes to This Privacy Policy
ZONAM reserves the right to update this Privacy Policy in response to regulatory, organizational, or technological changes, or modifications to the services provided.
The updated version will be made available on the website, indicating the date of the latest revision.
Where required, updates will be accompanied by additional communications to data subjects.
15. Contact Information
For clarification, information, or requests regarding the processing of personal data:
ZONAM SNC
Via Donatello 12, 20090 Monza (MB), Italy
Email: info@zonam.it