Privacy policy

(art. 13-14 of the G.D.P.R. – General Data Protection Regulation (EU) no. 679/2016)


In compliance with the obligations set out in Regulation (EU) 2016/679 (GDPR) with regards to the processing of personal data, we hereby inform you that ZATO Spa, with registered office in Via Campi Grandi 23, 25080 Prevalle (BS), will process the personal data concerning you and that have been or will be communicated to us by you or others. Personal data shall be processed in compliance with current regulations and under the following conditions.

1. Purpose of and legal basis for processing

Personal data shall be processed only for the following purposes:

a) to take the necessary steps prior to entering into sales contracts, for the performance of these contracts and to protect the credit positions resulting therefrom – Art. 6.1. point b) GDPR
b) to fulfil any type obligation required by current laws or regulations, especially, tax matters – Art. 6.1. point c) GDPR

2. Methods of processing

The processing of data may include, in addition to their collection, also their recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Data may be processed on paper, or using computer or on-line tools, in a manner and with tools appropriate to ensure the security and confidentiality of the data, in compliance with the provisions set out in article 32 et seq. of Regulation (EU) 2016/679, concerning the “security of personal data”.

In particular, all technical, IT, organisational, logistic measures and security procedures shall be adopted which are adequate to the risk level based on the nature of the personal data.

Moreover, the methodologies applied ensure access to the data only by persons appointed by our Company to process data.

3. Provision of data

The provision of data is:

a) Mandatory to achieve the purposes related to the obligations prescribed by laws or other binding legislation;
b) Necessary for the proper establishment and continuation of the relationship with you.

Any refusal to provide the aforementioned data, even for legitimate reasons, could compromise the smooth running of the relationship with our Company and, in particular, could prevent us from processing your orders, as well as providing the requested service and related billing.

4. Communication and dissemination of data

The personal data collected to achieve the aforementioned purposes, may be communicated, insofar as it specifically concerns them, to public and private entities, natural and/or legal persons and having commercial purposes and/or management of information and/or payment systems, including external data processors and sub-processors who perform specific tasks on behalf of our Company.

In particular, the data may be disclosed to the following categories of subjects: sales networks, banks and payment service providers, legal and consulting firms, subjects appointed to audit the financial statements of our company, public authorities or administrations for legal requirements, Italian and international suppliers, financing and transport companies, third-party quality controllers of the logistic -trade flow, as well as other companies that are part of the Group.

5. Transfer of data to foreign countries

To the extent strictly necessary for the performance of the ongoing contract with you, your personal data may be disclosed to third-parties (such as suppliers) based abroad, inside or outside the European Union always in compliance with the rules contained in art. 44 to 50 of Regulation (EU) 2016/679.

6. Rights of the data subject

You have the right to exercise, subject to the requirements and limits laid down in aforementioned regulation, the rights set forth in articles 12 and 15 to 22 of the GDPR. To exercise these rights, please write to

7. Data controller

We confirm that the Data Controller is Zato Spa, in the person of its legal representative pro tempore, with headquarters in Via Campi Grandi, 23, 25080 Prevalle, Italy.