Privacy Notice

Privacy Notice

• We use cookies and analytics and marketing tools only with your consent.

• In certain cases, your personal information may be transferred to the United States. See Section 10.

• You may withdraw your consent at any time, effective going forward, through the cookie settings in the website footer.

• The data controllers are Zingerle Group AG and, where applicable, the national company responsible for your country. See Section 1.

• Information about your privacy rights, including access, deletion, and objection, is provided in Section 9 and, for U.S. residents, Section 12.

Table of Contents

1. Data Controller and Joint Controllership

2. Data Protection Officer

3. General Information on Data Processing

4. Website Operation and Server Log Files

5. Cookies and Consent Management

6. Analytics and Marketing Tools

7. Newsletter

8. Inquiries, Quotes, Registration, and Orders

9. Your Rights

10. International Data Transfers to the United States

11. Additional Information for Users in Switzerland

12. Additional Information for Users in the United States (CCPA)

13. Social Media

14. Changes to This Privacy Notice

1. Data Controller and Joint Controllership

The data controller responsible for operating this website, including hosting, cookies, web analytics, and content, is:

Zingerle Group AG
Via Val Pusteria 2
39040 Naz-Sciaves (BZ), Italy
Represented by its authorized signatory, as identified in the current commercial register
Phone: +39 0472 977100
Email: [email protected]

Because this website serves users in multiple countries, the national company responsible for your country of residence, or the company with which you enter into a contract following an inquiry, registration, or order, acts as a joint controller with Zingerle Group AG under Article 26 of the General Data Protection Regulation (GDPR), where applicable.

Zingerle Group AG and the respective national company have entered into a joint controllership agreement under Article 26 of the GDPR. Under this agreement, Zingerle Group AG serves as the primary point of contact for requests relating to personal data and forwards them to the responsible national company when appropriate. Both parties are available to assist with the exercise of applicable data protection rights.

2. Data Protection Officer

No Data Protection Officer within the meaning of Article 37 of the GDPR has been appointed. If you have questions about data protection, please contact us using the contact information provided in Section 1.

3. General Information on Data Processing

We process personal information only to the extent necessary to operate our website and provide our content and services, or when a legal basis or your consent permits us to do so.

Legal bases under the GDPR

• Article 6(1)(a): Your consent, for example, for marketing cookies and newsletter subscriptions.

• Article 6(1)(b): Performance of a contract or steps taken before entering into a contract, such as handling inquiries and processing orders.

• Article 6(1)(c): Compliance with a legal obligation, such as recordkeeping requirements.

• Article 6(1)(f): Our legitimate interests, such as maintaining IT security and conducting basic website reach analysis.

4. Website Operation and Server Log Files

Whenever you access our website, certain technical information is collected automatically. This may include your browser type and version, operating system, referring URL, IP address, and the date and time of access.

Under the GDPR, the legal basis for this processing is Article 6(1)(f), which allows us to maintain a functioning and secure website.

Server access logs are automatically rotated and deleted when a defined storage limit is reached. Depending on website traffic, this generally occurs within a few days.

5. Cookies and Consent Management

This website uses cookies and similar technologies, such as local storage.

When you first visit the website, a consent banner allows you to provide consent for non-essential cookie categories, including functionality, personalization, analytics, security, and advertising. Essential cookies are used on the basis of Article 6(1)(f) of the GDPR, where applicable.

The consent banner adapts to your approximate location. For visitors from the United States, an additional option is provided to opt out of the sale or sharing of personal information under California law through the “Do Not Sell or Share My Personal Information” option. See Section 12.

Visitors in other countries are presented with the standard cookie categories described above.

You can change your cookie preferences at any time using the cookie settings link in the website footer.

6. Analytics and Marketing Tools

The following tools are used only with your consent, where required. Under the GDPR, the legal basis is Article 6(1)(a). You may withdraw your consent at any time, effective going forward, through the cookie settings link in the website footer.

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 analyzes information such as pages visited, time spent on the website, and referring pages. Your IP address is shortened or anonymized before being transmitted to Google.

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

The Meta Pixel is used for conversion tracking and to create remarketing audiences. When email addresses are used to create Custom Audiences, they are encrypted using a one-way hashing algorithm before transmission. This process is intended to prevent the underlying plain-text email addresses from being directly readable by Meta.

Google Ads / Customer Match

Provider: Google Ireland Limited.

Google Ads allows us to show interest-based advertising to website visitors on other websites. For Customer Match, encrypted email lists are matched against Google's user database to reach existing customers through Google services.

Hotjar

Provider: Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville, St. Julian's STJ 3141, Malta.

Hotjar is used to analyze user behavior in pseudonymized form, including scrolling behavior and clicks displayed in aggregated heatmaps. IP addresses are stored only in anonymized form.

7. Newsletter

You may subscribe to our free email newsletter through this website.

When you subscribe, we process your email address and any additional information you voluntarily provide to deliver the newsletter and prevent misuse. We use a double opt-in process to confirm your subscription.

Under the GDPR, the legal basis for this processing is your consent under Article 6(1)(a).

You may unsubscribe at any time by clicking the unsubscribe link in the newsletter or by emailing us at the contact address provided in Section 1.

8. Inquiries, Quotes, Registration, and Orders

Through this website, you may contact us using a contact form, email, or phone; register for a customer account; or place an order directly where an online ordering option is available.

Depending on the process, we may collect the following information:

• Company name

• First and last name

• Phone number

• Email address

• Mailing or business address

• Country

• Product-related information

Processing of direct inquiries

Your inquiry is handled by the responsible sales representative. Once an order is confirmed, it is put into production, shipped, and invoiced.

Processing of online orders

Where direct checkout is available, the contract is considered concluded once the order has been submitted and payment has been confirmed. We then send an order confirmation email.

Under the GDPR, the legal basis for these activities is Article 6(1)(b), relating to the performance of a contract or steps taken before entering into a contract.

Data retention

We retain this information for the duration of the business relationship and thereafter in accordance with the statutory retention requirements of the country in which the contract is concluded. Commercial and tax records are generally retained for 7 to 10 years after the end of the relevant fiscal year.

Disclosure to third parties

We share personal information with third parties only when necessary to fulfill a contract, for example, with payment processors and shipping providers. We do not otherwise disclose this information to third parties for advertising purposes.

9. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

• Right of access: Obtain access to your personal data (Article 15).

• Right to rectification: Request correction of inaccurate personal data (Article 16).

• Right to erasure: Request deletion of your personal data (Article 17).

• Right to restriction of processing: Request that the processing of your personal data be restricted (Article 18).

• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format, where applicable (Article 20).

• Right to object: Object to certain processing activities (Article 21).

You may withdraw your consent at any time, effective going forward.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state where you normally reside, work, or where the alleged infringement occurred.

The supervisory authority responsible for Zingerle Group AG is:

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Rome, Italy
Website: www.gpdp.it

Additional rights applicable to U.S. residents, particularly California residents, are described in Section 12.

10. International Data Transfers to the United States

When you use the Google and Meta services described above, your personal data may be transferred to the United States. Hotjar processes data within the European Union, in Malta.

Where applicable, transfers are based on the EU–U.S. Data Privacy Framework (DPF), supplemented as a precaution by the European Commission's Standard Contractual Clauses under Article 46(2)(c) of the GDPR as a fallback mechanism.

Legal background

Google and Meta state that they are certified under the DPF. Under this framework, the European Commission has adopted an adequacy decision recognizing an adequate level of data protection for covered recipients, dated July 10, 2023.

As described in the underlying legal assessment, the legal certainty of this framework has been subject to uncertainty since June 29, 2026. In Trump v. Slaughter, the U.S. Supreme Court held that the constitutionally protected independence of the Federal Trade Commission—the authority whose independent oversight underpins the DPF—is incompatible with the U.S. Constitution.

A challenge to the adequacy decision is pending before the Court of Justice of the European Union (Case C-703/25 P). A ruling remains pending, and the adequacy decision remains in force unchanged in the meantime.

11. Additional Information for Users in Switzerland

For users residing in Switzerland, in addition to the information provided in Section 1, the controller under the Swiss Federal Act on Data Protection (revised FADP) is also:

Zingerle Group Schweiz GmbH
Bahnhofstrasse 27
8864 Reichenburg, Switzerland

Because the revised FADP largely corresponds to the GDPR, Sections 2 through 10 apply accordingly, subject to the following differences:

• The obligation to appoint a Data Protection Officer does not apply below certain thresholds.

• The relevant supervisory authority is the Swiss Federal Data Protection and Information Commissioner (FDPIC), rather than an EU data protection supervisory authority.

12. Additional Information for Users in the United States (CCPA)

For users residing in the United States, particularly California, the following additional information applies.

In addition to the company identified in Section 1, the relevant controller is:

Zingerle Group USA Inc.
6965 Northpark Blvd, Suite N
Charlotte, NC 28216
United States

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California residents with additional privacy rights.

These include:

• Right to know and access: Request information about the categories of personal information collected, the sources from which it was collected, and the purposes for which it is used.

• Right to deletion: Request deletion of personal information, subject to applicable legal exceptions.

• Right to opt out of sale or sharing: Opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising, where applicable.

• Right to non-discrimination: Exercise applicable privacy rights without being discriminated against for doing so.

You can exercise the right to opt out of the sale or sharing of personal information through the “Do Not Sell or Share My Personal Information” option available in the cookie settings banner.

13. Social Media

Facebook and Instagram

This website contains buttons or links to our Facebook and Instagram profiles. The provider identified in the source notice is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

These are standard links, not active social media plugins embedded directly into the page. A connection to Meta's servers is established only when you click the relevant icon. Meta then receives information indicating that you visited our website.

For more information, please review Meta's Privacy Policy:

https://www.facebook.com/privacy/explanation

LinkedIn

This website contains a link to our LinkedIn company profile. The provider identified in the source notice is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Clicking the LinkedIn icon establishes a connection to LinkedIn, which receives information about your visit.

For more information, please review LinkedIn's Privacy Policy:

https://www.linkedin.com/legal/privacy-policy

YouTube

This website contains embedded YouTube videos and/or a link to our YouTube channel. The provider identified in the source notice is Google Ireland Limited.

Embedded videos are loaded in enhanced privacy mode. This means a connection to YouTube's servers is established only after you have consented to the relevant cookie category.

For more information, please review Google's Privacy Policy:

https://policies.google.com/privacy

14. Changes to This Privacy Notice

We update this Privacy Notice whenever required by changes in applicable laws, court decisions, or our data processing activities.

The version published on this website at any given time is the applicable version.