Controller
The controller is Marco Zipoli, owner of the Italian sole proprietorship ZIPOLI MARCO, with registered office at Via Padova 12, 51018 Pieve a Nievole (PT), Italy.
VAT number 02133610473. Fiscal code ZPLMRC97E18G491P. REA PT-626975. Companies Register of Pistoia-Prato. The enterprise is entered in the special section as a small entrepreneur.
Privacy requests: zipolimarco98@gmail.com. Certified email: zipolimarco@cndlpec.it. Telephone: +39 379 366 1294. There is no separate data-protection officer. The volume and the kind of data do not require one.
Data we process
Identity and contact details you choose to send: name, company, email address, country, the wholesale line you are interested in, and the text of your message. If you write to us later, we keep that correspondence as well.
A language preference (English or Italian) stored in local storage on your device, so the site can open in the language you chose.
Technical data that the host of the website may log in order to deliver the pages, such as IP address, date, and browser type. We do not use those logs to build a profile of you.
We do not ask this form for payment-card numbers, identity-document scans, or special-category data (health, beliefs, and the like). Please do not put those in the message. If a later contract or a legal duty requires a document, we will ask for it on a channel we both already use.
Purposes and legal bases
To read and answer wholesale enquiries, supplier introductions and due-diligence questions, and to prepare a quotation if one is possible. The basis is Article 6(1)(b) GDPR: steps taken at your request before a contract.
To keep accounting records, issue invoices and meet tax and company-law duties if a contract follows. The basis is Article 6(1)(c) GDPR: a legal obligation.
To keep the site available, to limit abuse of the form, and to remember the language you picked. The basis is Article 6(1)(f) GDPR: legitimate interests, which here are narrow and do not include advertising. You may object, as set out below.
We do not use the data for profiling. We do not sell personal data. We do not send newsletters. A reply to your enquiry is not a subscription.
How long we keep it
Enquiry correspondence is kept while the conversation is active and for up to 24 months after the last message, unless a contract, a dispute or a tax duty requires a longer time.
Accounting and invoice records are kept for the period required by Italian law, ordinarily ten years.
The language preference remains on your device until you clear the site data. Host logs follow the host’s ordinary schedule. We do not build a separate archive of them for marketing.
Who receives the data
The sole proprietor reads the enquiries. Providers who process data on instructions may see what they need to do their work: the host of this website, and the providers of the Gmail address and of the PEC mailbox.
If an enquiry becomes an order, the accountant or another adviser engaged by the enterprise may receive the data required to invoice and to file taxes.
Public authorities receive data when the law requires it.
The institutions named on the Treasury page receive personal data only if you pay through them or if we agree with you to use that channel. Opening this website does not open an account and does not forward the form to those institutions.
Transfers outside the EEA
Email and hosting providers may process connection or message data outside the European Economic Area, including in the United States. Where that happens, the transfer rests on an adequacy decision or on standard contractual clauses, with any supplementary measure the law requires.
You may ask us which safeguard applies to a given provider. We will tell you what we actually know and use, and we will not invent a certification we do not hold.
Your rights
You may request access, rectification, erasure, and restriction. Where the basis is a contract or a file you gave us, you may request portability of that data. You may object to processing based on legitimate interests. Where we ever rely on consent, you may withdraw it without affecting earlier lawful processing.
You may lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it, or with the authority of the EU country where you live or work.
We do not take decisions based solely on automated processing, and we do not use this site to score credit.
Children
The website is addressed to businesses and to people who write on behalf of a business. It is not directed at anyone under 18, and we do not knowingly collect children’s data. If you believe a minor has written to us, tell us and we will delete the message.
Security
The measures fit a small enterprise: little data, no account numbers on the website, and no identity documents in the form. Email is not a fully confidential channel. Do not send secrets in the form that you would not put in an ordinary email.
No method of transmission is perfectly secure. We do not claim a certification. The chamber extract records no quality-system certificate, and this notice does not invent one.
Changes and contact
Any change to this notice will be posted on this page, with an updated date. The version you are reading is dated 16 October 2026.
For a request, write to zipolimarco98@gmail.com or to the PEC zipolimarco@cndlpec.it, with the subject “Privacy”. We may need to confirm that the request comes from you. We answer within the time the GDPR allows, ordinarily one month.
Version of 16 October 2026