1. Data controller

The data controller is:

Zolliway Sagl
Via Dante Alighieri 7
6830 Chiasso – Switzerland

2. What information do we collect?

Through the contact form, we can collect:

• First and last name;
• Company and job title;
• Email address and phone number;
• Content of the message sent;
• Any additional information provided voluntarily.

The site also uses technical security and anti-spam protection systems, including Google reCAPTCHA v3.

3. Why we use data

The data is processed for the following purposes:

• Respond to contact requests;
• Provide information about our services;
• Manage business and pre-contractual relationships;
• Organize meetings, calls, or professional briefings;
• Ensure website security and prevent misuse.

4. How we process data

Data is processed confidentially and securely using appropriate IT and organizational measures.

For the technical and operational management of our services, we use qualified vendors, including:

• UNAXUS (https://www.unaxus.com) for website hosting;
• Microsoft (https://www.microsoft.com) for communication and email services;
• Google reCAPTCHA (https://www.google.com/recaptcha/about/) for spam protection;
• Recruit CRM (https://recruitcrm.io) for CRM management of professional contacts.

Recruit CRM states that it adheres to recognized security standards and has implemented appropriate safeguards for any international data transfers.

5. International transfers

Some of the suppliers used by Zolliway may process personal data outside of Switzerland or the European Economic Area (EEA).

In such cases, data processing is carried out in compliance with applicable regulations, including the Standard Contractual Clauses (SCCs) provided for by the GDPR and the security measures required by the Swiss nLPD.

6. Data Retention

Data collected through the contact form is retained for a maximum period of 24 months from the last significant contact, unless otherwise required by law or necessary to protect the Data Controller’s rights.

7. Rights of the data subject

Data subjects may exercise the rights provided for under applicable data protection laws, including the rights of access, rectification, erasure, restriction of processing, and objection.

Requests can be submitted using the contact form available on the website.

8. Updates

This policy may be updated from time to time to reflect regulatory or organizational changes.