GDPR Compliance — ZTSPT International

Contents

Our Commitment
Data Controller
Principles We Follow
Legal Bases
Processors We Use
International Transfers
Security
Your Rights
Data Breaches
Complaints

1. Our Commitment

ZTSPT International (“ZTSPT”, “we”) processes personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679). This page summarises how we meet its requirements. Full details of what we collect and why are in our Privacy Policy and Cookie Policy.

2. Data Controller

ZTSPT, the operating entity of Shanghai ZT Smart Packaging Technology Co., Ltd., is the data controller for personal data collected through this website.

Europe & Nordic Region Office · Malmö, Sweden
Email: info@ztspt-international.com
Phone: +46 700 439 103

3. Principles We Follow

Data minimisation — our contact form asks only for what we need to reply: name, work email, company, area of interest and your message.
No tracking cookies — our website analytics are cookieless and aggregated. We do not use advertising, retargeting or cross-site tracking.
Purpose limitation — enquiry data is used only to respond to you and continue the business conversation you started.
No automated decisions — we do not use profiling or automated decision-making that affects you.
Storage limitation — enquiries are kept for up to 2 years from last contact, unless an ongoing business relationship requires longer.

4. Legal Bases

Legitimate interests (Art. 6(1)(f)) — responding to enquiries, operating and securing the website, and aggregated website analytics.
Contract (Art. 6(1)(b)) — steps you ask us to take before or during a contract, such as preparing a quote.
Consent (Art. 6(1)(a)) — optional functional cookies, which you can change at any time in our Cookie Policy.
Legal obligation (Art. 6(1)(c)) — where the law requires us to keep records.

5. Processors We Use

We use a small number of service providers to run this website and handle enquiries:

Provider	Purpose
Cloudflare, Inc.	Website hosting, security, email routing and cookieless website analytics
Google	Email inbox where enquiries are received

6. International Transfers

Some of our processors, and our group company in China, may process personal data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or, for providers in the United States, the EU–U.S. Data Privacy Framework.

7. Security

All connections to this website are encrypted (HTTPS with TLS 1.2 or higher, and HSTS).
Security headers protect visitors against common web attacks.
Our contact form is protected against spam and abuse through rate limiting and bot filtering.
Access to enquiry data is limited to the staff who need it.

8. Your Rights

Under the GDPR you have the right to access, correct, delete, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time.

To exercise any of these rights, email info@ztspt-international.com. We will respond within one month and may ask you to confirm your identity first. More detail on each right is in section 9 of our Privacy Policy.

9. Data Breaches

If a personal data breach occurs, we will assess it promptly. Where required, we will notify the Swedish Authority for Privacy Protection (IMY) within 72 hours and inform affected individuals without undue delay.

10. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority — in Sweden, IMY (Integritetsskyddsmyndigheten), or the authority in your own EU country.