Cookie Policy

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function, improve efficiency, and provide information to the website owner.

This Cookie Policy explains how ZB Capital S.R.L. uses cookies and similar technologies (such as local storage and session storage) on the ZB Capital platform, in accordance with the GDPR (EU Regulation 2016/679), the Italian Privacy Code (Legislative Decree 196/2003 as amended), and the Garante's guidelines on cookies (Provvedimento del 10 giugno 2021).

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Service and cannot be disabled. They include:

• Authentication session token — set by Supabase to keep you logged in during a session. Without this cookie, you would need to log in on every page. Duration: session.
• CSRF protection token — prevents cross-site request forgery attacks. Duration: session.
• Cookie consent preference — remembers your cookie consent choice so we do not re-prompt on every visit. Duration: 12 months.

Strictly necessary cookies do not require your consent under GDPR and the Garante's guidelines because they are indispensable to provide the service you requested.

Functional Cookies

These cookies enable enhanced functionality and personalisation. If disabled, some features may not work correctly:

• UI preferences — stores your preferred theme, timezone, and display settings in local storage. Duration: persistent until cleared.

Analytics Cookies

With your consent, we use anonymised analytics to understand how users interact with the Service, so we can improve it. These cookies:

• Do not identify you personally
• IP addresses are truncated before storage
• Data is never sold to or shared with advertisers

You may opt out of analytics cookies at any time (see “Managing Cookies” below).

Cookies We Do Not Use

ZB Capital does not use advertising cookies, behavioural targeting cookies, social media tracking pixels, or third-party remarketing tags of any kind.

Under GDPR Art. 6 and the Garante's cookie guidelines:

• Strictly necessary cookies — legal basis: contract performance (Art. 6(1)(b)) and our legitimate interest in maintaining security (Art. 6(1)(f)). No consent required.
• Functional cookies — legal basis: legitimate interest (Art. 6(1)(f)) in providing a coherent user experience. You may disable them via browser settings.
• Analytics cookies — legal basis: your consent (Art. 6(1)(a)). These are only set after you click “Accept” in our cookie banner. You may withdraw consent at any time.

Cookies set by ZB Capital have the following lifespans:

• Session cookies — deleted automatically when you close your browser
• Consent preference cookie — 12 months from the date of consent
• Analytics cookies — up to 13 months, in line with Garante guidelines
• Local storage (UI preferences) — persistent until you clear your browser data or use the in-app reset option

ZB Capital does not allow third parties to set advertising or tracking cookies on our platform. Authentication and session management is handled by Supabase, which may set cookies strictly necessary for those functions. Supabase acts as a data processor on our behalf under a Data Processing Agreement.

If you connect a third-party broker integration, that broker's own cookie policy will apply to any session you initiate on their platform.

You can control cookies in several ways:

Cookie Banner

When you first visit ZB Capital, a cookie consent banner allows you to accept or decline non-essential cookies. You can revisit this choice at any time via the cookie settings link in the footer.

Browser Settings

Most browsers allow you to refuse or delete cookies. Instructions for common browsers:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

Note: disabling strictly necessary cookies will prevent you from logging in or using core features of the Service.

Do Not Track

We honour the DNT (Do Not Track) browser signal. If your browser sends a DNT signal, we will not set analytics cookies even if you have not explicitly opted out via our banner.

With respect to cookies and the personal data they may process, you have the same rights as described in our Privacy Policy under GDPR Art. 15–21: access, rectification, erasure, restriction, portability, and objection.

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) if you believe your rights have been violated.

We may update this Cookie Policy when we introduce new cookies or change how we use existing ones. Material changes will be communicated via the cookie consent banner on your next visit, giving you the opportunity to review and update your preferences.

The effective date of the current version is shown at the top of this page.

For questions about this Cookie Policy or to exercise your data rights, contact us at:

• support@disapline.eu