Information on the Protection of Personal Data Obtained from Visiting www.zapa.cz

Status as of: 08.09.2026

Depending on the specific data processing process, various entities are responsible for processing your personal data. The contact details of the respective controller can be found in the corresponding section of this privacy policy. If another entity is responsible for processing your data, it will be explicitly stated in this privacy declaration.

The listed companies operate independent data processing systems. Each company is independently responsible for processing personal data in accordance with applicable laws and data protection rules, in particular for the purpose of carrying out selection procedures (recruitment), communicating with you (including email communication), and managing contractual relationships, log files, etc.

In this context, there is no group-wide data processing under joint controllership, nor is there any transfer of data between the individual companies, unless there is a legal basis for such a transfer or you have given your explicit consent. Each company ensures that appropriate technical and organizational measures are taken to ensure the security and confidentiality of your data and to protect your rights under the GDPR.

If websites of other providers are mentioned in this privacy declaration, for example through links, the last check was carried out on December 3, 2025, and the respective privacy notices and declarations on those sites apply.

1. Responsibility of Buzzi S.p.A.

1.1 Controller's Contact Details

Buzzi S.p.A. Via Luigi Buzzi, 6
15033 Casale Monferrato (AL), Italy
Tel.: +39 0142 416111
E-Mail: info@buzzi.com

1.2 Contact Details of the Data Protection Officer

Buzzi S.p.A. Via Luigi Buzzi, 6
15033 Casale Monferrato (AL) – Italy
E-Mail: privacy@buzzi.com

1.3 Log Files

When visiting and using this website, Buzzi S.p.A. processes your IP address, User-Agent, date and time of access, request method, requested files, volume of transferred data, and the path to the page. These data are stored for auditing purposes for a maximum of 7 days in the log files of the web servers of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. The legal basis for processing these data in the log files is Article 6(1)(f) of the GDPR. The legitimate interest is to ensure and control the availability, technical functionality, and security of the website.

Furthermore, Buzzi S.p.A. processes the same data for the purpose of providing the Cookie Consent Manager by OneTrust, LLC, 1200 Abernathy Rd Ste 600, Atlanta, GA 30328, USA, and stores them in the web server log files of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

1.4 Transfer of Personal Data to Third Countries

When using the IT systems and software products of Amazon Web Services, OneTrust LLC (with web servers of Cloudflare, Inc.), Vimeo.com, and Google LLC, your data may be transferred to the United States of America, as these companies have their headquarters there. All of the mentioned companies have joined the EU-US Data Privacy Framework, which constitutes an adequacy decision and ensures an adequate level of personal data protection for certified companies during data transfers to the USA.

1.5 General Use of Cookies

Cookies are small files that are automatically created and stored in the visitor's end-device web browser in connection with each visited website. Cookies can store information about the user's preferred settings, verify browser cookie settings, record the closing or rejection of the Cookie Consent Manager, contribute to maintaining an active session, and serve for load balancing across multiple servers. The legal basis for processing your data through technically necessary cookies is Article 6(1)(f) of the GDPR in conjunction with the relevant national regulations. The legitimate interest is to ensure the functionality of the website. If cookies are not technically necessary, the legal basis for their use is your voluntary consent under Article 6(1)(a) of the GDPR.

1.6 Google Analytics

If you grant your consent pursuant to Article 6(1)(a) of the GDPR, we will process your data for web analytics purposes on this website via the "Google Analytics" tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This requires, provided you have not set your web browser to block tracking services by default, the storage of Google Analytics cookies on your end device. During your use of the website, these cookies collect various data, including information about the origin of the visit, screen resolution, frequency and duration of the visit, as well as data about your device and browser (user-agent), click paths, visited pages, and the time spent on individual pages before leaving them or navigating to another page. In the context of tracking cookies and web analytics, the immediate departure rate is often referred to as the "bounce rate," an indicator expressing the percentage of visitors who enter the website and leave without any further interaction.
Your consent to data processing via Google Analytics is voluntary and is not necessary for the use of this website. You can withdraw your consent at any time with future effect.

When using Google Analytics, your data may be transferred to the USA, as Google LLC has its headquarters there. For this reason, Google LLC has joined the Data Privacy Framework. This is an adequacy decision that ensures certified companies have an adequate level of personal data protection when transferring data to the United States of America.

2. Responsibility of ZAPA beton a.s.

2.1 Controller's Contact Details

ZAPA beton a.s. (hereinafter also "ZAPA", "we")
Michle č. ev. 417
141 00 Praha 4
Czech republic
Tel.: +420 226 004 444
E-mail: zapa@zapa.cz

2.2 Contacting and Communication Process

If you contact ZAPA and provide personal data in this context, for example, to inquire about products and/or deliveries, we process your data in accordance with Article 6(1)(b) of the GDPR.

If your inquiry is not related to the performance of a contract or the implementation of pre-contractual measures, the legal basis for processing your data is Article 6(1)(f) of the GDPR. The legitimate interest lies in the proper and complete handling of the received message. The legal basis for processing your data is Article 6(1)(a) of the GDPR if you have given your consent to the data processing.

Your message will be retained for the time necessary to complete its processing. Longer retention will only occur if we are authorized or obligated to do so in a specific case. If you contact ZAPA via LinkedIn (see the "Social Networks" section) or other comparable internet platforms, the respective operator of the given platform is responsible for processing your data.

2.3 Conducting Selection Procedures (Recruitment)

We process your personal data provided within the recruitment process to assess your suitability and qualifications for the position you are applying for. During the recruitment process, we will process your data to handle your application and assess whether we can offer you a position. The scope of processed data depends on the data you provide to us. Furthermore, we process data obtained during the job interview. We will use your contact details exclusively to inform you about the progress of the recruitment process. The legal basis for processing is Article 6(1)(b). If your application documents contain special categories of personal data, such as data about your health, these data will be processed in accordance with Article 9(2)(b) of the GDPR.

Your personal data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. If, after the conclusion of the recruitment process, an employment or other contractual relationship is established, the data will continue to be stored and included in your personnel file. Otherwise, the recruitment process ends with the delivery of a rejection decision. In the event of a rejection of your application, your data will be retained for six months from the delivery of the decision, unless longer retention is necessary to defend against legal claims.

Applicant Pool

If you wish, we can consider you for future recruitment processes after rejecting your application. To be included in the applicant pool, we require your consent under Article 6(1)(a) of the GDPR. Your consent is voluntary and can be withdrawn at any time

2.4 Social Networks

Mapy.cz

On our website, we use the Mapy.cz map service provided by Seznam.cz, a.s., Radlická 3294/10, 150 00 Prague 5, Czech Republic. This service is used to display locations on an interactive map and to facilitate orientation and route planning.

When activating the map, a connection to the service provider's servers is established. In this context, your IP address, information about your browser and end device, as well as information about the use of the map function, may be processed. Furthermore, in connection with the provision of the map service, cookies are stored on your end device. These are mainly the sznlbr and User-Id cookies. Through the User-Id cookie, an identifier can be assigned to the end device or browser, which persists even after the individual session ends.

Storing information on your end device or accessing it is based on your consent. If personal data are processed in this context, the processing takes place on the basis of your consent under Article 6(1)(a) of the GDPR. The consent is voluntary and can be withdrawn at any time with future effect via the settings of our consent management system.

Further information on the processing of personal data by Mapy.cz, respectively Seznam.cz, can be found in the privacy policy of the respective provider.

Vimeo

If you grant your consent under Article 6(1)(a) and Article 49(1)(a) of the GDPR, Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA, is responsible for processing your data and processes in particular your IP address, browser data (User-Agent), and possibly other identifying data obtained through server requests, cookies, and data stored in Local Storage in order to make videos available on this website.

Vimeo.com, Inc. uses the hosting services of Cloudflare, Inc., 101 Townsend St., San Francisco, California 94107, USA, as its sub-processor. This means that Cloudflare, Inc. provides hosting services for Vimeo.

Within the provision of the Vimeo video player, other external resources may also be integrated. These may in particular be Google resources via the gstatic.com domain, for example, to provide Google Cast (Chromecast) functions. When loading these resources, a connection to Google's servers is established, during which the IP address and technical information about the browser and connection may be processed. The integration of these resources is related to the use of the Vimeo player.

Further information on the processing of your data, including the transfer of personal data to third countries by Vimeo.com, Inc., can be found at: www.vimeo.com/privacy.

Your consent to data processing for the purpose of providing videos on this website is voluntary, is not a condition for using this website, and can be withdrawn at any time with future effect.

Vimeo.com, Inc. and Cloudflare, Inc. are companies headquartered in the USA. If your data, including the aforementioned information, are transferred to these recipients in the USA, this takes place on the basis of the EU–US Data Privacy Framework.

LinkedIn

We operate a page on the LinkedIn social network. LinkedIn is a service of LinkedIn Corp., 1000 West Maude Avenue, Sunnyvale, CA 94085, USA.

For the processing of personal data of persons located in the European Union, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible. As stated by LinkedIn in its privacy policy: "If you are in the Designated Countries, LinkedIn Ireland Unlimited Company ('LinkedIn Ireland') will be the controller of your personal data provided to, or collected by or for, or processed in connection with, our Services."

We process personal data when you contact us via the LinkedIn platform.

When visiting LinkedIn, data and information about you obtained through the use of this service (in particular IP address, browser data (User-Agent), browsing history, and location data for geotargeting purposes) are processed by LinkedIn, which uses cookies and other technologies to track users on the web for this purpose.

The primary recipient of this data is LinkedIn, which may further process it for its own purposes and under its own responsibility make it available to third parties. LinkedIn and its partners operate globally and use cookies, for example, for statistical purposes, service personalization, displaying ads, offers, and content tailored to the user, and for creating user profiles.

It is entirely your decision whether to visit our LinkedIn page and perform other actions, such as leaving a comment, sending us a message, connecting with us, or following our page. Alternatively, you can obtain all other information via our website.

LinkedIn is a certified participant in the EU–US Data Privacy Framework, so an adequate level of personal data protection is ensured when transferring personal data.

3. Your Rights under the GDPR

In accordance with Article 15 of the GDPR, you have the right to request information about the personal data processed about you by the respective company. If incorrect personal data are processed, you have the right to have them rectified under Article 16 of the GDPR. If the legal conditions are met, you have the right to request the erasure of personal data or the restriction of their processing (Articles 17 and 18 of the GDPR). Under the conditions set out in Article 20 of the GDPR, you have the right to data portability. You have the right to withdraw your consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Under Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.

In accordance with Article 77 of the GDPR, you also have the right to lodge a complaint with a competent supervisory authority:

• • Buzzi S.p.A.: www.garanteprivacy.it
• • ZAPA beton a.s.: https://uoou.gov.cz/ (Office for Personal Data Protection of the Czech Republic)