Last updated: 31 August 2026

Privacy notice

At a glance

We only use cookies and analytics/marketing tools with your consent.
Your data may be transferred to the USA in certain cases – see section 10.
You can withdraw your consent at any time with effect for the future (cookie settings in the footer).
The controllers are Zingerle Group AG and the national company responsible for your country (section 1).
Your rights (access, erasure, objection, etc.) are set out in section 9.

1. Controller and joint controllership

The controller for the operation of this website (hosting, cookies, web analytics, content) is:

Zingerle Group AG, Via Val Pusteria 2, 39040 Naz-Sciaves (BZ), Italy, legally represented by its authorised signatory as per the current commercial register extract. Tel.: +39 0472/977100, e-mail: [email protected].

As this website addresses users in several countries at the same time, the national company responsible for your country of residence, or with which a contract is concluded in the event of an enquiry, registration or order, becomes jointly responsible together with Zingerle Group AG within the meaning of Art. 26 GDPR:

Country	Responsible national company
Germany	Zingerle Group Deutschland GmbH, Zur Aumühle 34, 89257 Illertissen, Germany
Austria	Zingerle Group Österreich GmbH, Hegergasse 10/6, 1030 Vienna, Austria
Switzerland	Zingerle Group Schweiz GmbH, Bahnhofstrasse 27, 8864 Reichenburg, Switzerland
Spain	Zingerle Group Iberica S.L., Via Trajana 50-56, Nave 35, 08020 Barcelona, Spain
France	Zingerle Group France Sarl, 1 Rue des Tulipes, 67600 Sélestat, France
Netherlands	Zingerle Group Benelux B.V., Ossenkamp 2D, 8024 AE Zwolle, Netherlands
Poland	Zingerle Group Polska sp. z o.o., Królewiecka 147C/lok 3, 54-117 Wrocław, Poland
Romania	Zingerle Group East s.r.l., Str. II Rákóczi Ferenc nr. 3, 535600 Odorheiu Secuiesc, Romania
Czech Republic	Zingerle Group CZ s.r.o., Národní 135/14, 110 00 Nové Město, Czech Republic
USA	Zingerle Group USA Inc., 6965 Northpark Blvd, Suite N, Charlotte, NC 28216, USA
Italy / all other countries	Zingerle Group AG is the sole controller

Zingerle Group AG and the respective national company have entered into an agreement on joint controllership under Art. 26 GDPR. Under this agreement, Zingerle Group AG is the first point of contact for data subject requests (contact details above) and forwards these to the responsible national company where relevant; both parties are available for the exercise of data subject rights.

2. Data protection officer

No data protection officer within the meaning of Art. 37 GDPR has been appointed to date. For any data protection queries, please contact the address given in section 1.

3. General information on data processing

We only process our users' personal data to the extent necessary to provide a functioning website and our content and services, or where a legal basis or your consent applies.

Legal bases

Art. 6(1)(a) GDPR – where consent has been given (e.g. marketing cookies, newsletter).

Art. 6(1)(b) GDPR – for the performance of a contract or pre-contractual measures (handling enquiries, order processing).

Art. 6(1)(c) GDPR – to comply with a legal obligation (e.g. bookkeeping).

Art. 6(1)(f) GDPR – to pursue legitimate interests (e.g. IT security, basic reach analysis).

4. Provision of the website and log files

Each time the website is accessed, technical data is automatically collected (browser type/version, operating system, referrer URL, IP address, date/time of access). The legal basis is Art. 6(1)(f) GDPR (provision of a functioning website). Access data is automatically rotated and deleted once a defined storage limit is reached, which, depending on traffic volume, typically corresponds to a period of a few days.

5. Cookies and consent management

This website uses cookies and comparable technologies (e.g. local storage). On your first visit, your consent to non-essential categories (functionality, personalisation, analytics, security, advertising) is obtained via a consent banner; necessary cookies are set on the basis of Art. 6(1)(f) GDPR. The banner automatically adapts to your likely location: for visits from the USA, an additional option is shown to opt out of the “sale” or “sharing” of personal information under California law (“Do Not Sell or Share My Personal Information”, see section 12); in all other countries, the standard categories above apply. You can change your settings at any time via the cookie settings link in the footer.

6. Analytics and marketing tools

The following applies uniformly to the tools described below: they are only used with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future via the cookie settings in the footer.

Provider	Purpose	Legal basis	Retention	Opt-out
Google Analytics 4 (Google Ireland Limited)	Web analytics, reach measurement	Consent (Art. 6(1)(a))	Event data: 2 months; user data: 14 months	Cookie settings
Meta Pixel / Custom Audiences (Meta Platforms Ireland Limited)	Conversion tracking, remarketing	Consent (Art. 6(1)(a))	per Meta policies	Cookie settings; youronlinechoices.eu
Google Ads Remarketing / Customer Match (Google Ireland Limited)	Interest-based advertising, audience matching	Consent (Art. 6(1)(a))	per Google policies	Cookie settings
Hotjar (Hotjar Ltd., Malta)	Pseudonymised behaviour analysis (heatmaps)	Consent (Art. 6(1)(a))	per Hotjar policies	Hotjar opt-out link
LinkedIn (LinkedIn Ireland Unlimited Company)	Company profile link	User-initiated click	per LinkedIn policies	Do not click the icon

Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Evaluates pages visited, time spent and referring page; your IP address is shortened/anonymised before being transmitted to Google.

Meta Pixel

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Used for conversion tracking and building remarketing audiences. For Custom Audiences based on e-mail addresses, these are encrypted using a one-way hashing algorithm before transmission; Meta cannot infer the underlying plain-text data.

Google Ads / Customer Match

Provider: Google Ireland Limited. Shows website visitors interest-based advertising on other websites; for Customer Match, encrypted e-mail lists are matched against Google's user database to target existing customers within Google services.

Hotjar

Provider: Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julians STJ 3141, Malta. Used for pseudonymised analysis of user behaviour (e.g. scroll depth, clicks as aggregated heatmaps); IP addresses are stored only in anonymised form.

7. Newsletter

This website offers the option of subscribing to a free e-mail newsletter. When you sign up, we process your e-mail address and any further voluntary information in order to deliver the newsletter and prevent misuse (double opt-in). The legal basis is your consent, Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in the newsletter or by e-mail to the contact address given above.

8. Enquiries, quotes, registration and orders

Through this website you can submit an enquiry (contact form, e-mail, phone), register a customer account or, where offered, order directly. Depending on the process, we collect: company, first and last name, phone number, e-mail address, address, country and product-related details.

Process for direct enquiries: your enquiry is handled by the responsible sales representative; once the order is confirmed, it is put into production, shipped and invoiced. Process for the online shop with direct checkout (where offered on this website): once the order is submitted and payment confirmed, the contract is deemed concluded; a confirmation e-mail is sent. The legal basis in each case is Art. 6(1)(b) GDPR.

Retention period: we store this data for the duration of the business relationship and thereafter in accordance with the statutory retention periods of the country in which the contract is concluded (generally commercial- and tax-law retention periods of 7 to 10 years from the end of the financial year).

Data is passed on to third parties only where necessary for the performance of the contract, e.g. to payment service providers and shipping providers. No further disclosure to third parties for advertising purposes takes place.

9. Your rights

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or of the alleged infringement. The authority responsible for Zingerle Group AG is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy (www.gpdp.it).

10. International data transfers to the USA

When using the Google and Meta services referred to above, personal data may be transferred to the USA (Hotjar processes data within the EU/Malta). We base such transfers on the EU-US Data Privacy Framework (DPF), supplemented as a precaution by EU Standard Contractual Clauses under Art. 46(2)(c) GDPR as a fallback.

Legal background in detail

Google and Meta state that they are certified under the DPF, under which the European Commission generally confirms an adequate level of data protection for such recipients (adequacy decision of 10 July 2023). The legal certainty of this framework has been subject to uncertainty since 29 June 2026: in Trump v. Slaughter, the US Supreme Court held that the constitutionally protected independence of the Federal Trade Commission – the authority whose independent oversight underpins the DPF – is not compatible with the US Constitution. A challenge to the adequacy decision is pending before the CJEU (Case C-703/25 P); a ruling is still pending and the adequacy decision remains in force unchanged in the meantime.

11. Additional information for users in Switzerland

For users based in Switzerland, in addition to section 1: the controller within the meaning of the Swiss Federal Act on Data Protection (revFADP) is, in addition to Zingerle Group AG, Zingerle Group Schweiz GmbH, Bahnhofstrasse 27, 8864 Reichenburg. As the revFADP largely corresponds to the GDPR, sections 2–10 apply accordingly; the following differences apply: no obligation to appoint a data protection officer below certain thresholds, and the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), not an EU supervisory authority.

12. Additional information for users in the USA (CCPA)

For users resident in the United States, in particular California, in addition to section 1: the controller is additionally Zingerle Group USA Inc., 6965 Northpark Blvd, Suite N, Charlotte, NC 28216, USA. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants California residents additional rights: access to the categories of data collected and their sources/purposes, deletion, the right to opt out of the “sale” or “sharing” of personal information (“Do Not Sell or Share My Personal Information” – exercisable via the cookie settings banner), and the right to non-discrimination for exercising these rights.

13. Social media

Facebook & Instagram

This website contains buttons or links to our Facebook and/or Instagram profiles (provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are plain links without an active social plugin on the page itself; only when you click the icon is a connection established to Meta's servers, and Meta receives information that you have visited our site. Further details can be found in Meta's privacy information: https://www.facebook.com/privacy/explanation.

LinkedIn

This website contains a link to our LinkedIn company profile (provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). Clicking the icon establishes a connection to LinkedIn; LinkedIn receives information about your visit. Further information: LinkedIn Privacy Policy (https://www.linkedin.com/legal/privacy-policy).

YouTube

This website contains embedded YouTube videos and/or a link to our YouTube channel (provider: Google Ireland Limited). Embedded videos are loaded in enhanced privacy mode, i.e. a connection to YouTube's servers is only established once you have consented to the relevant cookie category. Further information: Google Privacy Policy (https://policies.google.com/privacy).

14. Changes to this privacy notice

We update this privacy notice whenever changes to the law, case law or our processing activities require it. The version published on the website at any given time applies.