1. Data Controller

The Data Controller responsible for the processing of personal data is:

ZENAERO S.R.L.
Via Valeriano De Bonis 22
87029 Scalea (CS), Italy
VAT Number: IT03968950786
Email: info@zenaero.it

2. Scope of this Privacy Policy

This Privacy Policy applies to websites, online services, customer accounts, contact forms, quotation requests, newsletters, online store functions and other digital services operated by ZENAERO S.R.L.

It applies in particular to:

• www.zenaero.it
• www.zenaero.eu

3. Personal Data We May Collect

Identity and contact data

• Name and surname
• Company name
• Email address
• Phone number
• Billing and shipping address
• Country and location information

Order and customer data

• Products purchased or requested
• Order history
• Quotation requests
• Customer account information
• Customer support messages

Technical and usage data

• IP address
• Browser type and version
• Device and operating system information
• Pages visited
• Session information
• Cookie identifiers and similar technologies

Marketing data

• Newsletter subscriptions
• Marketing preferences
• Consent records

4. How We Collect Data

We may collect personal data when you:

• Visit our websites
• Submit a contact form
• Request a quotation
• Create a customer account
• Place an order
• Subscribe to a newsletter
• Communicate with our customer support

Some technical information may be collected automatically through cookies and similar technologies, depending on your cookie consent choices.

5. Purposes of Processing

We may process personal data to:

• Provide products and services
• Process and deliver orders
• Create and manage customer accounts
• Respond to inquiries and support requests
• Prepare quotations and product offers
• Send newsletters and marketing communications where permitted
• Improve website performance and user experience
• Analyze website usage and marketing effectiveness
• Prevent fraud, misuse and security incidents
• Comply with legal, tax, accounting and regulatory obligations

6. Legal Basis for Processing

We process personal data on one or more of the following legal bases:

• Consent, where you have given permission for a specific processing activity.
• Contract, where processing is necessary to provide products or services.
• Legal obligation, where processing is required by law.
• Legitimate interest, where processing is necessary for our business operations and does not override your rights.

7. Payments

Payments may be processed by third-party payment service providers, including credit card processors, digital wallets, online payment gateways and bank transfer services.

We do not store complete payment card information on our own servers. Payment data is processed by the relevant payment provider according to its own security and privacy standards.

8. Shipping and Logistics

To deliver products, we may share necessary personal data with shipping, courier and logistics providers selected by ZENAERO or by the customer, depending on destination, availability and delivery method.

Only the data required for shipment, delivery and customer communication is shared with logistics providers.

9. Marketing Communications

If you subscribe to our newsletter or give marketing consent, we may send you product updates, educational content, offers and company news.

Marketing communications may be delivered through third-party email marketing service providers.

You may unsubscribe at any time by using the unsubscribe link in our emails or by contacting us directly.

10. Cookies and Tracking Technologies

Our websites may use cookies, pixels, local storage and similar technologies to operate the website, remember preferences, analyze performance, measure advertising effectiveness and improve user experience.

Where required by law, non-essential cookies and tracking technologies will only be activated after obtaining your consent.

More detailed information is provided in our Cookie Policy.

11. Third-Party Service Providers

We may use third-party service providers to support our business operations. These providers may assist with:

• Website hosting and technical infrastructure
• Online store functionality
• Payment processing
• Shipping and logistics
• Email delivery and newsletters
• Analytics and performance measurement
• Advertising and marketing tools
• Customer support
• Fraud prevention and cybersecurity
• Accounting, tax and legal compliance

Specific providers may change over time without affecting the principles described in this Privacy Policy.

12. International Data Transfers

Some third-party service providers may process personal data outside the European Economic Area.

Where such transfers occur, appropriate safeguards will be implemented in accordance with GDPR requirements, including Standard Contractual Clauses or other legally recognized transfer mechanisms.

13. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

• Contact and quotation requests: up to 24 months
• Customer account data: while the account remains active or as required by law
• Order and accounting records: up to 10 years where legally required
• Marketing consent records: until consent is withdrawn
• Technical and security logs: for a reasonable period necessary for security and operation

14. Data Security

We apply appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

These measures may include secure hosting, encryption, access controls, authentication procedures, software updates, backups and security monitoring.

15. Your GDPR Rights

Subject to applicable law, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your personal data
• Restrict the processing of your data
• Object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a data protection supervisory authority

To exercise your rights, contact us at info@zenaero.it.

16. Children’s Privacy

Our websites and services are not specifically directed toward children under the age of 16.

We do not knowingly collect personal data from children where such collection would require parental authorization under applicable law.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technologies, business operations or data processing practices.

The latest version will be published on our websites together with the revision date.