{"id":172781,"date":"2026-11-08T23:43:42","date_gmt":"2026-11-08T23:43:42","guid":{"rendered":"https:\/\/zbdev.highqcell.com\/privacy-policy\/"},"modified":"2026-11-08T23:52:12","modified_gmt":"2026-11-08T23:52:12","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/zbdev.highqcell.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

[vc_row][vc_column width=”1\/1″][vc_column_text uncode_shortcode_id=”467996″]<\/p>\n

Privacy Policy<\/strong><\/span><\/p>\n

pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR)<\/strong>
Website www.zuccatobiotech.it<\/a><\/strong><\/p>\n

ZUCCATO HC S.r.l., with registered office at Via della Consortia no. 2 \u2013 37127 Verona (VR), Tax Code and VAT no. 01725500233 (hereinafter, for brevity, \u201cZUCCATO HC\u201d<\/strong> or the \u201cController\u201d<\/strong>), recognises the importance of personal data protection and considers its safeguarding one of the main objectives of its business activity.<\/p>\n

This Privacy Policy is provided with reference to the website www.zuccatobiotech.it<\/a><\/strong> (hereinafter, the \u201cWebsite\u201d<\/strong>), relating to Zuccato Biotech<\/strong>, the regenerative medicine division of ZUCCATO HC S.r.l. It is hereby specified that Zuccato Biotech is not an independent legal entity but represents an internal organisational division of ZUCCATO HC, dedicated to the field of regenerative medicine and related medical devices. Any reference to \u201cZuccato Biotech\u201d<\/strong> contained in this Privacy Policy or on the Website shall therefore be understood as referring to ZUCCATO HC S.r.l.<\/strong>, the sole legal entity acting as data controller.<\/p>\n

Before disclosing any personal data, ZUCCATO HC invites users to carefully read this Privacy Policy (hereinafter also the \u201cPrivacy Policy\u201d<\/strong>), as it contains relevant information on the protection of personal data and on the security measures adopted to ensure its confidentiality, in full compliance with Regulation (EU) 2016\/679 (hereinafter, \u201cGDPR\u201d<\/strong> or \u201cApplicable Legislation\u201d<\/strong>), Legislative Decree no. 196 of 30 June 2003, as amended by Legislative Decree no. 101 of 10 August 2018 (\u201cPrivacy Code\u201d<\/strong>), and the measures issued by the Italian Data Protection Authority.<\/p>\n

This Privacy Policy applies exclusively to the Website and not to any other websites that may be visited by the user through external links, to which their respective privacy policies apply. It shall be deemed to be provided, pursuant to Article 13 GDPR, to all subjects who access and interact with the Website.<\/p>\n

ZUCCATO HC has also deemed it appropriate to comply with Recommendation no. 2\/2001 on the minimum requirements for collecting personal data online in the European Union, adopted on 17 May 2001 by the Article 29 Working Party, as well as with the Guidelines of the European Data Protection Board (EDPB) on consent, transparency and cookies.<\/p>\n

ZUCCATO HC informs users that the processing of personal data shall be based on the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, minimisation, accuracy, integrity and confidentiality, in accordance with the provisions of the Applicable Legislation.<\/p>\n

\n

1. Data Controller and Data Protection Officer (DPO)<\/strong><\/span><\/h2>\n

The Data Controller of the personal data collected through the Website is:<\/p>\n

ZUCCATO HC S.r.l.<\/strong>, with registered office at Via della Consortia no. 2 \u2013 37127 Verona (VR), Italy \u2013 Tax Code and VAT no. 01725500233 \u2013 e-mail: privacy@zuccatohc.it<\/a><\/strong> \u2013 certified e-mail (PEC): pec@pec.zuccatohc.it<\/a><\/strong>.<\/p>\n

The Controller may be contacted at any time to receive information regarding the processing of personal data, to exercise the rights recognised by the Applicable Legislation or to report any issues.<\/p>\n

The Controller has appointed a Data Protection Officer (Data Protection Officer \u2013 DPO<\/strong>), namely Avv. Enrico Sinigaglia<\/strong>, who may be contacted at the dedicated e-mail address: dpo@zuccatohc.it<\/a><\/strong>. Any request or report relating to the processing of personal data may be addressed to the DPO, including the exercise of the rights set out in Articles 15-22 GDPR.<\/p>\n

\n

2. Categories of personal data subject to processing<\/strong><\/span><\/h2>\n

\u201cPersonal Data\u201d<\/strong> means any information relating to an identified or identifiable natural person, with particular reference to identifiers such as a name, an identification number, location data, an online identifier or one or more elements characteristic of their physical, physiological, genetic, mental, economic, cultural or social identity.<\/p>\n

Through the Website, ZUCCATO HC may collect the following categories of personal data:<\/p>\n

\n

2.1. Browsing data<\/strong><\/span><\/h3>\n

The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.<\/p>\n

This category includes the IP addresses or domain names of the devices used to connect to the Website, the URI\/URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user\u2019s operating system and IT environment.<\/p>\n

These data are used solely to obtain anonymous statistical information on the use of the Website, to check its proper functioning, to ensure system security and to ascertain any liability in the event of cybercrimes against the Website or third parties. Browsing data are retained for the time strictly necessary to pursue the aforementioned purposes and, as a rule, for no longer than 7 days, without prejudice to any need to investigate offences by the Judicial Authority.<\/p>\n

\n

2.2. Data voluntarily provided by the user<\/strong><\/span><\/h3>\n

Through the Website, the user may voluntarily provide personal data such as, by way of example, name, surname, professional qualification, organisation of affiliation, e-mail address, telephone number and any other information contained in communications sent via the \u201cContact Us\u201d<\/strong> form or via direct e-mail to the addresses published on the Website, in particular info@zuccatobiotech.it<\/a><\/strong>.<\/p>\n

ZUCCATO HC will process such data in compliance with the Applicable Legislation, assuming that the data refer to the user or to third parties who have expressly authorised the user to provide them on the basis of an appropriate legal basis. In such cases, the user acts as an independent data controller for third-party data, assuming all legal obligations and responsibilities, and hereby grants ZUCCATO HC the broadest indemnity against any dispute, claim or request for compensation for damages made by third parties whose personal data have been processed through the Website in violation of the Applicable Legislation.<\/p>\n

The user is expressly invited not to communicate, through the Website or contact channels, data belonging to the special categories referred to in Article 9 GDPR, in particular health-related data, or identifying data of patients, except where strictly necessary for the medical device vigilance purposes referred to in paragraph 2.4 below. In the event that such data are transmitted, responsibility for the lawfulness of the disclosure, including any legal bases and information obligations towards the data subject, shall remain with the sending user.<\/p>\n

\n

2.3. Data collected through cookies and similar technologies<\/strong><\/span><\/h3>\n

The Website uses cookies and similar technologies. Detailed information on the types of cookies used, their purposes, retention periods and the methods for giving, changing or withdrawing consent is provided in the specific Cookie Policy<\/strong>, to which full reference is made and which forms an integral part of this Privacy Policy.<\/p>\n

\n

2.4. Data relating to medical device vigilance<\/strong><\/span><\/h3>\n

Due to the activity carried out by ZUCCATO HC in the medical device sector and, in particular, in regenerative medicine, by way of example: PBMNC High Q Cell\u00ae<\/strong>, ADSC Lipo-Stem\u00ae<\/strong>, RGTA Cacipliq20\u00ae<\/strong>, GLASS AktiBone\u00ae<\/strong>, the Controller may receive \u2014 including through the Website or the contact addresses published on it \u2014 reports of incidents, serious incidents, complaints or field safety corrective actions pursuant to Regulation (EU) 2017\/745 (MDR<\/strong>), from healthcare professionals, healthcare facilities or other economic operators.<\/p>\n

Such reports may involve the processing of the reporter\u2019s personal data, e.g. name, qualification, contact details, organisation of affiliation, and, in some cases, health-related data concerning patients involved in the incident. Such processing is carried out in compliance with legal obligations provided for by the MDR and by the relevant national legislation, Legislative Decree no. 137 of 5 August 2022 and Legislative Decree no. 46 of 24 February 1997, where applicable, and is based on Articles 6(1)(c) and \u2014 with regard to health-related data \u2014 9(2)(i) GDPR, namely reasons of public interest in the area of public health, including ensuring high standards of quality and safety of medical devices.<\/p>\n

Data collected as part of vigilance activities may be disclosed, in compliance with legal obligations, to the competent authorities, including the Ministry of Health, national health authorities and EUDAMED, and to the manufacturer of the device involved, within the limits strictly necessary.<\/p>\n

\n

3. Purposes, legal bases and retention period<\/strong><\/span><\/h2>\n

Personal data collected through the Website shall be processed by ZUCCATO HC for the purposes set out below, on the basis of the corresponding legal bases and for the retention periods indicated below:<\/p>\n

a)<\/strong> to perform a contract to which the user is a party or to take pre-contractual measures at the user\u2019s request, by way of example: management of contact, information or quotation requests submitted via the \u201cContact Us\u201d<\/strong> form or via direct e-mail;<\/p>\n

b)<\/strong> to allow possible access to reserved areas of the Website, in performance of contractual or pre-contractual obligations;<\/p>\n

for the purposes under a)<\/strong> and b)<\/strong>, the legal basis is identified in Article 6(1)(b) GDPR and the data shall be retained until the request has been answered; in the event of continuation of the contractual relationship, for a period not exceeding 10 years from the conclusion of the contract, without prejudice to any longer limitation periods provided for by law;<\/p>\n

c)<\/strong> to carry out research and statistical analyses on aggregated or anonymous data, without the possibility of identifying the user, aimed at measuring the functioning of the Website, traffic, usability and user interest;<\/p>\n

this activity does not involve the processing of personal data;<\/p>\n

d)<\/strong> to ensure the security of the Website, prevent abuse, fraud and cyber incidents, and protect the integrity of systems and networks;<\/p>\n

e)<\/strong> to establish, exercise or defend a right in judicial, administrative or out-of-court proceedings, or whenever judicial authorities exercise their functions;<\/p>\n

for the purposes under d)<\/strong> and e)<\/strong>, the legal basis is identified in the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR, respectively: protection of the security of the Website and IT systems; protection of its rights in court. The data shall be retained for a period not exceeding 10 years from the last interaction, or for the longer period necessary to settle any disputes and for the expiry of limitation periods;<\/p>\n

f)<\/strong> to comply with legal obligations to which ZUCCATO HC is subject, including tax, accounting, administrative, medical device vigilance and anti-money laundering obligations;<\/p>\n

for this purpose, the legal basis is identified in Article 6(1)(c) GDPR and the data shall be retained for the periods provided for by the individual regulations, generally 10 years, extended to at least 15 years for vigilance documentation relating to medical devices, pursuant to Article 10(8) MDR;<\/p>\n

g)<\/strong> to manage reports of incidents, complaints and field safety corrective actions relating to medical devices, as described in paragraph 2.4 above;<\/p>\n

for this purpose, the legal basis is identified in Article 6(1)(c) GDPR and, for any health-related data, in Article 9(2)(i) GDPR;<\/p>\n

h)<\/strong> to install cookies and similar technologies other than technical cookies, such as non-anonymised analytics cookies, profiling cookies and third-party cookies, where the user has given consent through the dedicated banner;<\/p>\n

for this purpose, the legal basis is identified in the consent of the data subject pursuant to Article 6(1)(a) GDPR and Article 122 of Legislative Decree 196\/2003, as supplemented by the Cookie Guidelines of the Italian Data Protection Authority of 10 June 2021. Consent may be withdrawn at any time in accordance with the methods indicated in the Cookie Policy.<\/p>\n

A summary table of the processing purposes is provided below:<\/p>\n

\n
\n\n\n\n\n\n\n\n\n\n\n\n
Purpose<\/strong><\/th>\nLegal basis (GDPR)<\/strong><\/th>\nNature of provision<\/strong><\/th>\nRetention period<\/strong><\/th>\n<\/tr>\n<\/thead>\n
(a) Response to contact, information, quotation or technical-commercial support requests (\u201cContact Us\u201d form, e-mail, telephone)<\/strong><\/td>\nArticle 6(1)(b) \u2013 performance of pre-contractual measures and\/or of a contract<\/td>\nOptional; failure to provide the data prevents a response<\/td>\nUntil the response has been provided; in the event of continuation of the relationship, up to 10 years from the conclusion of the contract<\/td>\n<\/tr>\n
(b) Compliance with legal obligations (tax, accounting, medical device vigilance, anti-money laundering, etc.)<\/strong><\/td>\nArticle 6(1)(c) \u2013 legal obligation<\/td>\nMandatory where required by law<\/td>\nTerms provided for by the individual regulations, generally 10 years; for vigilance documentation, up to 15 years pursuant to Article 10(8) MDR<\/td>\n<\/tr>\n
(c) Medical device vigilance: management of incident reports, complaints, field safety corrective actions (FSCA)<\/strong><\/td>\nArticle 6(1)(c) \u2013 legal obligation (Reg. EU 2017\/745); Article 9(2)(i) for any health-related data<\/td>\nMandatory for the purposes of reporting<\/td>\nAt least 15 years from the cessation of distribution of the device<\/td>\n<\/tr>\n
(d) Security of the Website, prevention of abuse, fraud and cyber incidents, integrity of systems<\/strong><\/td>\nArticle 6(1)(f) \u2013 legitimate interest in system security and protection of company assets<\/td>\nNecessary for use of the Website<\/td>\nSecurity logs: maximum 12 months; other data: up to 10 years from the last interaction<\/td>\n<\/tr>\n
(e) Exercise or defence of a right in judicial, administrative or out-of-court proceedings<\/strong><\/td>\nArticle 6(1)(f) \u2013 legitimate interest in protecting its rights<\/td>\nNecessary in the event of litigation<\/td>\nFor the duration of the litigation and until expiry of limitation periods<\/td>\n<\/tr>\n
(f) Aggregated and anonymous statistical analyses on Website use<\/strong><\/td>\nProcessing not involving personal data, anonymous data<\/td>\n\u2014<\/td>\n\u2014<\/td>\n<\/tr>\n
(g) Installation of cookies and similar technologies other than technical cookies<\/strong><\/td>\nArticle 6(1)(a) \u2013 consent, Article 122 of Legislative Decree 196\/2003 and Italian Data Protection Authority Guidelines of 10.6.2021<\/td>\nOptional, withdrawable at any time<\/td>\nDuration indicated in the Cookie Policy<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

The provision of personal data for the purposes listed above is optional, but failure to provide such data may make it impossible to respond to the user\u2019s requests or to comply with legal obligations to which ZUCCATO HC is subject. For purposes based on consent, refusal to provide consent does not entail any adverse consequence other than ZUCCATO HC\u2019s inability to pursue the specific purpose.<\/p>\n

\n

4. Processing methods and security measures<\/strong><\/span><\/h2>\n

Personal data are processed using manual, IT and telematic tools, with logic strictly related to the purposes indicated and, in any case, in such a way as to ensure the security and confidentiality of the data, in accordance with the principles set out in Articles 5 and 32 GDPR.<\/p>\n

ZUCCATO HC adopts appropriate technical and organisational measures \u2014 taking into account the state of the art, implementation costs, the nature, scope, context and purposes of processing, as well as the risk to the rights and freedoms of data subjects \u2014 in order to ensure an adequate level of security, including, by way of example: encryption of data in transit, access control through individual credentials, backup and disaster recovery systems, segregation of environments, training of authorised personnel, access logging and security incident management procedures, data breaches, pursuant to Articles 33 and 34 GDPR.<\/p>\n

ZUCCATO HC, as an economic operator pursuant to Regulation (EU) 2017\/745 and \u2014 where applicable \u2014 as a relevant entity pursuant to Directive (EU) 2022\/2555 (NIS 2) and the related Legislative Decree no. 138 of 4 September 2024, also implements proportionate cyber risk management measures, under the supervision of the National Cybersecurity Agency (ACN) within the scope of its respective competence.<\/p>\n

The data are processed exclusively by authorised personnel, duly instructed pursuant to Articles 29 GDPR and 2-quaterdecies of the Privacy Code, and by external parties appointed as data processors pursuant to Article 28 GDPR.<\/p>\n

ZUCCATO HC declares that it does not carry out, through the Website, automated decision-making processes \u2014 including profiling \u2014 that produce legal effects concerning the data subject or similarly significantly affect them pursuant to Article 22 GDPR.<\/p>\n

\n

5. Recipients of personal data<\/strong><\/span><\/h2>\n

Personal data may be disclosed, for the purposes referred to in paragraph 3 and in compliance with the principles of necessity and proportionality, to the following recipients or categories of recipients:<\/p>\n