Privacy Notice

1. Controller and Joint Controllership
2. Data Protection Officer
3. General information on Data Processing
4. Provision of the Website and Log Files
5. Cookies and Consent Management
6. Analytics and Marketing Tools
7. Inquiries, Quotes, Registration and Orders
8. Your Rights
9. International Data Transfers to the USA
10. Additional Information for Users in Switzerland
11. Additional Information for Users in the USA (CCPA)
12. Social Media
13. Changes to this Privacy Notice

The controller for the operation of this website (hosting, cookies, web analytics, content) is:

Zingerle Group AG, Via Val Pusteria 2, 39040 Naz-Sciaves (BZ), Italy, legally represented by its authorized signatory as per the current commercial register extract. Tel.: +39 0472/977100, e-mail: [email protected].

As this website addresses users in several countries at the same time, the national company responsible for your country of residence, or with which a contract is concluded in the event of an inquiry, registration or order, becomes jointly responsible together with Zingerle Group AG within the meaning of Art. 26 GDPR:

• Germany: Zingerle Group Deutschland GmbH, Zur Aumühle 34, 89257 Illertissen, Germany
• Austria: Zingerle Group Österreich GmbH, Hegergasse 10/6, 1030 Vienna, Austria
• Switzerland: Zingerle Group Schweiz GmbH, Bahnhofstrasse 27, 8864 Reichenburg, Switzerland
• Spain: Zingerle Group Iberica S.L., Via Trajana 50-56, Nave 35, 08020 Barcelona, Spain
• France: Zingerle Group France Sarl, 1 Rue des Tulipes, 67600 Sélestat, France
• Netherlands: Zingerle Group Benelux B.V., Ossenkamp 2D, 8024 AE Zwolle, Netherlands
• Poland: Zingerle Group Polska sp. z o.o., Królewiecka 147C/lok 3, 54-117 Wrocław, Poland
• Romania: Zingerle Group East s.r.l., Str. II Rákóczi Ferenc nr. 3, 535600 Odorheiu Secuiesc, Romania
• Czech Republic: Zingerle Group CZ s.r.o., Národní 135/14, 110 00 Nové Město, Czech Republic
• USA: Zingerle Group USA Inc., 6965 Northpark Blvd, Suite N, Charlotte, NC 28216, USA
• Italy / all other countries: Zingerle Group AG is the sole controller
  
  

Zingerle Group AG and the respective national company have entered into an agreement on joint controllership under Art. 26 GDPR. Under this agreement, Zingerle Group AG is the first point of contact for data subject requests (contact details above) and forwards these to the responsible national company where relevant; both parties are available for the exercise of data subject rights.

No data protection officer within the meaning of Art. 37 GDPR has been appointed to date. For any data protection queries, please contact the address given in section 1.

We only process our users' personal data to the extent necessary to provide a functioning website and our content and services, or where a legal basis or your consent applies.

Legal Bases:

• Art. 6(1)(a) GDPR – where consent has been given (e.g., marketing cookies, newsletter).
• Art. 6(1)(b) GDPR – for the performance of a contract or pre-contractual measures (handling inquiries, order processing).
• Art. 6(1)(c) GDPR – to comply with a legal obligation (e.g., bookkeeping).
• Art. 6(1)(f) GDPR – to pursue legitimate interests (e.g., IT security, basic reach analysis).

Each time the website is accessed, technical data is automatically collected (browser type/version, operating system, referrer URL, IP address, date/time of access). The legal basis is Art. 6(1)(f) GDPR (provision of a functioning website). Access data is automatically rotated and deleted once a defined storage limit is reached, which, depending on traffic volume, typically corresponds to a period of a few days.

This website uses cookies and comparable technologies (e.g., local storage). On your first visit, your consent to non-essential categories (functionality, personalization, analytics, security, advertising) is obtained via a consent banner; necessary cookies are set on the basis of Art. 6(1)(f) GDPR. The banner automatically adapts to your likely location: for visits from the USA, an additional option is shown to opt out of the “sale” or “sharing” of personal information under California law (“Do Not Sell or Share My Personal Information”, see section 11); in all other countries, the standard categories above apply. You can change your settings at any time via the cookie settings link in the footer.

The following applies uniformly to the tools described below: they are only used with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future via the cookie settings in the footer.

Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Evaluates pages visited, time spent and referring page; your IP address is shortened/anonymized before being transmitted to Google.

Meta Pixel
Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Used for conversion tracking and building remarketing audiences. For Custom Audiences based on e-mail addresses, these are encrypted using a one-way hashing algorithm before transmission; Meta cannot infer the underlying plain-text data.

Google Ads / Customer Match
Provider: Google Ireland Limited. Shows website visitors interest-based advertising on other websites; for Customer Match, encrypted e-mail lists are matched against Google's user database to target existing customers within Google services.

Hotjar
Provider: Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julians STJ 3141, Malta. Used for pseudonymized analysis of user behavior (e.g., scroll depth, clicks as aggregated heatmaps); IP addresses are stored only in anonymized form.

Through this website you can submit an inquiry (contact form, e-mail, phone), register a customer account or, where offered, order directly. Depending on the process, we collect: company, first and last name, phone number, e-mail address, address, country and product-related details.

Process for direct inquiries: your inquiry is handled by the responsible sales representative; once the order is confirmed, it is put into production, shipped and invoiced. Process for the online store with direct checkout (where offered on this website): once the order is submitted and payment confirmed, the contract is deemed concluded; a confirmation e-mail is sent. The legal basis in each case is Art. 6(1)(b) GDPR.

Retention period: we store this data for the duration of the business relationship and thereafter in accordance with the statutory retention periods of the country in which the contract is concluded (generally commercial- and tax-law retention periods of 7 to 10 years from the end of the fiscal year).

Data is passed on to third parties only where necessary for the performance of the contract, e.g., to payment service providers and shipping providers. No further disclosure to third parties for advertising purposes takes place.

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or of the alleged infringement. The authority responsible for Zingerle Group AG is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy (www.gpdp.it).

When using the Google and Meta services referred to above, personal data may be transferred to the USA (Hotjar processes data within the EU/Malta). We base such transfers on the EU-US Data Privacy Framework (DPF), supplemented as a precaution by EU Standard Contractual Clauses under Art. 46(2)(c) GDPR as a fallback.

Legal Background in Detail:
Google and Meta state that they are certified under the DPF, under which the European Commission generally confirms an adequate level of data protection for such recipients (adequacy decision of July 10, 2023). The legal certainty of this framework has been subject to uncertainty since June 29, 2026: in Trump v. Slaughter, the U.S. Supreme Court held that the constitutionally protected independence of the Federal Trade Commission – the authority whose independent oversight underpins the DPF – is not compatible with the U.S. Constitution. A challenge to the adequacy decision is pending before the CJEU (Case C-703/25 P); a ruling is still pending and the adequacy decision remains in force unchanged in the meantime.

For users based in Switzerland, in addition to section 1: the controller within the meaning of the Swiss Federal Act on Data Protection (revFADP) is, in addition to Zingerle Group AG, Zingerle Group Schweiz GmbH, Bahnhofstrasse 27, 8864 Reichenburg. As the revFADP largely corresponds to the GDPR, sections 2–9 apply accordingly; the following differences apply: no obligation to appoint a data protection officer below certain thresholds, and the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), not an EU supervisory authority.

For users resident in the United States, in particular California, in addition to section 1: the controller is additionally Zingerle Group USA Inc., 6965 Northpark Blvd, Suite N, Charlotte, NC 28216, USA. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants California residents additional rights: access to the categories of data collected and their sources/purposes, deletion, the right to opt out of the “sale” or “sharing” of personal information (“Do Not Sell or Share My Personal Information” – exercisable via the cookie settings), and the right to non-discrimination for exercising these rights.

Facebook & Instagram
This website contains buttons or links to our Facebook and/or Instagram profiles (provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are plain links without an active social plugin on the page itself; only when you click the icon is a connection established to Meta's servers, and Meta receives information that you have visited our site. Further details can be found in Meta's privacy information: https://www.facebook.com/privacy/explanation.

LinkedIn
This website contains a link to our LinkedIn company profile (provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). Clicking the icon establishes a connection to LinkedIn; LinkedIn receives information about your visit. Further information: LinkedIn Privacy Policy (https://www.linkedin.com/legal/privacy-policy).

YouTube
This website contains embedded YouTube videos and/or a link to our YouTube channel (provider: Google Ireland Limited). Embedded videos are loaded in enhanced privacy mode, i.e., a connection to YouTube's servers is only established once you have consented to the relevant cookie category. Further information: Google Privacy Policy (https://policies.google.com/privacy).

We update this privacy notice whenever changes to the law, case law or our processing activities require it. The version published on the website at any given time applies.