Privacy statement

We respect your privacy and only process your personal data for the purpose for which you provided it and in accordance with the Personal Data Protection Act / General Data Protection Regulation.

  1. Company details

    Zola Group OÜ

    Narva mnt 5

    10117Tallinn

    VAT number : EE102738995

    Registration number : 16984122


    In this privacy statement, 'We' refers to ZOLA.
  2. Website
    When we talk about the website we mean: www.zola-aluminium.com
  3. Cookies & Google analytics
    If you use the website, the following cookies are used by default: collecting and analyzing statistics (Google Analytics). There are no or minor consequences for the privacy of website visitors. These cookies are stored for approximately 6 months. We do not process full IP addresses and no full IP addresses or other data are shared with Google.
  4. Personal data
    a) General. We maintain digital and/or physical files of our customers and relations. We process personal data for the execution of the agreements concluded with our customers and (insofar as there is no agreement for this) for the delivery of orders and for the provision of information or advice to our customers and relations.
    b) What personal data? The personal data that we process concerns the following data of our customers:
    * Name, address, city, telephone number and email address
    * Chamber of Commerce number
    * VAT number
    * other data that we receive or process in the context of the assignment given to us.
    We store as little customer data as possible and only process necessary data.
    c) Accessibility. In principle, every employee of ZOLA has access to the personal data that is processed for the benefit of customers or relations.
    d) Provision to third parties. For the processing of personal data, we use software that is made available by one or more third parties and for which they provide support services. We also use ICT service providers. It is possible that these entities also have access to personal data if this is necessary for the provision of support or maintenance. We do not provide personal data to other third parties, unless this is necessary or useful for the execution of the agreement or as stated above.
    e) Terms . We store personal data for a period of (approximately) 7 years. We assume at least the period within which the tax authorities can still request data or can still apply assessments or corrections. We store personal data of private individuals, received from our customers for the purpose of carrying out warranty work, for a period of up to 5 years (being our warranty period).
  5. Security of personal data
    Personal data is processed in a secure environment and stored within the European Union. We have taken security measures at multiple levels for this purpose. We periodically evaluate the level of security and adjust our security policy if necessary.
  6. Right of data subject
    The person whose personal data we process (the data subject) has various rights under the General Data Protection Regulation. In short, it concerns the following.
    * The data subject may ask us for access to the personal data that is processed about him.
    * The data subject has the right to rectify his or her personal data,
    * The right to request the deletion of personal data,
    * The right to restriction of processing,
    * The right to transfer personal data,
    * The right to object.

    The exact content of these rights and any limitations thereof are stated in the General Data Protection Regulation. We adhere to what is stated there about these rights.
  7. Complaint
    If you believe that your privacy rights are being violated, you have the right to file a complaint with the Dutch Data Protection Authority.

Data leaks
If a personal data breach has occurred, we will report this to the Dutch Data Protection Authority without undue delay, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, we will notify the data subject of the personal data breach without undue delay.