Personal data protection

Privacy Policy

This page explains in simple terms what happens to data when you visit the website.

Last updated: 12 July 2026

1. Data controller

The data controller is Z & Y FASHION DI ZHANG XIAOMIN, a sole proprietorship with its registered office at Via Nazionale, 42/44/R, 50123 Florence FI, Italy, VAT number 02095000978.

2. Technical data and purpose

The website does not require accounts and has no forms for submitting personal data. Browsing still involves the normal technical data required for internet communication, such as the IP address, requested page, date and time, browser type and network information.

This data is used only to display and protect the website, prevent abuse and resolve technical problems. The legal basis is the controller’s legitimate interest under Article 6(1)(f) GDPR. It is not used for profiling, advertising or automated decisions and is not sold.

3. Cloudflare, retention and transfers

The website is delivered and protected through Cloudflare, which processes the technical data needed to provide the service. The controller does not create or retain its own database of visitors or their IP addresses.

Cloudflare retains data for as long as needed to operate and secure the service, according to its privacy policy and legal obligations. Its infrastructure is global; transfers outside the European Economic Area use the safeguards described by Cloudflare. Data may also be disclosed to authorities where required by law.

4. Cookies and tracking

The website does not set cookies, use browser local storage, or contain analytics tools, advertising pixels or other non-essential tracking systems. For this reason, no cookie-consent banner is displayed.

6. Rights and updates

Where provided by the GDPR, you may request access, rectification, erasure, restriction or portability of your data and may object to processing. Requests can be addressed to the controller at the registered office listed in section 1.

You may also lodge a complaint with the Italian Data Protection Authority or another competent supervisory authority. This notice will be updated if the website’s features or processing activities change.