Legal documents

What these terms govern

They govern the use of this website. By using it you accept them. They do not govern the use of the Zinkis platform by a client body, which is the subject of a separate contract.

1. Definitions

"Zinkis" means this website and every related material published by Protocol-Z. "Platform" means the Zinkis software product, which is not the subject of these terms. "User" means anyone accessing the site.

2. Subject

The site is informational. It allows you to write to Protocol-Z through a contact form and to sign up to a newsletter. Neither constitutes a contractual offer.

3. The contact form

Sending a request is free and voluntary. It does not oblige Protocol-Z to answer within any set time, nor to supply the platform. Whoever sends it declares the data is true and that, if writing on behalf of an organisation, they are entitled to do so.

4. The newsletter

Signing up is free and can be revoked at any time by writing to info@protocol-z.com. It grants no early access and no commercial condition.

5. Intellectual property

All intellectual property rights in Zinkis, including source code, trade marks, names, content, documentation and drawings, remain the exclusive property of Protocol-Z. Nothing in these terms transfers any right to the user.

6. Permitted use

It is forbidden to use the site for unlawful purposes, to extract data or content from it systematically with automated tools, to attempt to reach non-public parts, or to carry out activity that compromises its security or operation.

7. Citation and training

The content of this site may be cited, with the source indicated, including by artificial intelligence systems answering a question. Using the content to train artificial intelligence models is not authorised without written consent from Protocol-Z. The same is stated in /llms.txt.

8. Commercial use and integrations

Adoption of the Zinkis platform by administrations, companies or organisations, as well as any integration with external systems, is subject to a separate written agreement with Protocol-Z.

9. No warranty on the site

The site is provided as is, without warranties of any kind, express or implied, including fitness for a particular purpose or continuity of service. Published figures and examples are illustrative and carry their own source.

10. Limitation of liability

To the maximum extent permitted by applicable law, Protocol-Z is not liable for indirect, incidental or consequential damages arising from the use of or inability to use the site.

11. Changes

Protocol-Z may update these terms. Using the site after a change constitutes acceptance of the new version, whose date is shown at the top of this page.

12. Governing law

Italian law. Courts of Milan.

13. Severability

If a provision of these terms is invalid or unenforceable, the remaining ones stay in full effect.

14. Reference language

These terms are drafted in Italian. Versions in other languages are informational: in case of discrepancy the Italian prevails.

Copyright

© 2026 Protocol-Z. Zinkis is a trade mark of Protocol-Z. All rights reserved.

1. Who we are, and what this document covers

Zinkis is a Protocol-Z product line. This policy describes how personal data is processed when you browse this site, when you write through the forms, and when a public body adopts the platform on its territory. It is written under Regulation (EU) 2016/679 and Italian Legislative Decree 196/2003.

The three situations follow different rules and are treated separately, because in one of them Protocol-Z is not the data controller.

The controller is Protocol-Z, based in Milan, Italy. Contact: info@protocol-z.com. Given the size of the organisation and the nature of the processing, there is no obligation to appoint a Data Protection Officer under Article 37 GDPR. Any request can still be sent to the address above.

This policy covers the Zinkis website and its forms. It does not cover third-party sites and services reachable from here, which have policies of their own. For the other Protocol-Z products, that is the corporate platform, Z Home and Z Marine, the policy published on protocol-z.com applies.

2. What this website collects

The web server records the minimum technical data needed to run and protect the site: IP address, date and time of the request, page requested, browser type. The legal basis is the controller's legitimate interest in security and correct operation, Article 6(1)(f) GDPR. There is no profiling, no advertising tooling, no third-party analytics.

No special categories of data within the meaning of Article 9 GDPR are collected. The site carries out no solely automated decision-making within the meaning of Article 22 GDPR.

The site uses no cookies. Theme and language preferences are saved in the browser's local storage, stay on the device and are never transmitted. Fonts, icons and every other resource are served from the site's own domain: there is no third-party request, so no third party receives the IP address of anyone browsing.

As these are strictly necessary technical components and local storage functional to the service, no consent is required under Article 122 of Italian Legislative Decree 196/2003 and the Italian Data Protection Authority's cookie guidelines of 9 July 2021. The detail of what is stored is on the Cookies page.

3. When you write to us

Anyone writing through the form provides their own name or their organisation's, an email address, a phone number if they choose to leave one, the text of the message, the language of the page and the fact that the request comes from the Zinkis site. The data goes into the contact management system the controller uses to answer and to follow the conversation.

Legal basis: performance of pre-contractual measures requested by the data subject, Article 6(1)(b) GDPR, for answering the request; legitimate interest, Article 6(1)(f), for subsequent commercial contact, with the right to object at any time by writing to info@protocol-z.com.

Signing up collects the email address and the language of the page. The legal basis is the data subject's consent, Article 6(1)(a) GDPR, given by ticking the box before sending. The address is used only to send project updates, and is not passed to anyone.

Consent can be withdrawn at any time by writing to info@protocol-z.com, without affecting the lawfulness of processing carried out before withdrawal. On withdrawal the address is deleted.

4. When a city adopts Zinkis

This is the part about urban footage, and it is where the roles separate. The body or company operating the fixed cameras, the public transport or the emergency vehicles remains the controller of its own streams: that footage is already collected for its own purposes, on its own legal bases, and Zinkis does not move it.

Raw footage does not leave the infrastructure of whoever produces it. Faces, number plates and every other element traceable to a natural person are removed on local processing nodes, before any transmission outward. Surfaces and volumes reach the reconstruction servers, that is, data that is no longer personal. This holds for every source.

On what it receives, Protocol-Z acts as a processor under Article 28 GDPR, on the basis of a written agreement with the controller setting out purposes, duration, security measures and instructions. The initial drone and radar survey produces geometry, not recognition of people, and is carried out under the applicable flight authorisations and requirements.

Before adoption over a territory it is normally the controller that has to carry out a data protection impact assessment under Article 35 GDPR. Protocol-Z supplies the technical documentation needed to write it.

5. Purposes, legal bases and retention

a) Running and securing the site, legitimate interest, Article 6(1)(f). b) Answering requests sent through the form, pre-contractual measures, Article 6(1)(b), and legitimate interest for subsequent contact, Article 6(1)(f). c) Newsletter, consent, Article 6(1)(a). d) Providing the platform to a client body, performance of a contract, Article 6(1)(b), with Protocol-Z as processor under Article 28 for the controller's data. e) Compliance with legal, tax and accounting obligations, Article 6(1)(c). f) Establishing, exercising or defending legal claims, Article 6(1)(f).

Technical server logs, including IP addresses: 90 days. Requests sent through the contact form: 24 months from the last contact, unless a contractual relationship has arisen in the meantime, in which case contractual retention applies. Newsletter sign-ups: until consent is withdrawn. Contractual and billing data: for the statutory period, normally 10 years under Article 2220 of the Italian Civil Code. Once the periods expire the data is deleted or irreversibly anonymised.

6. Who processes the data, where it sits, how it is protected

The controller uses the following providers as processors under Article 28: a server infrastructure and storage provider, based with its machines in Switzerland, which the European Commission recognises as an adequate country, so the transfer requires no further safeguards; a publishing and distribution provider for the public sites, based in the United States, with transfer under Standard Contractual Clauses and adherence to the EU-US Data Privacy Framework.

An up-to-date list of providers, naming each of them, is available by writing to info@protocol-z.com. Data is not sold, assigned or disclosed to third parties for their own purposes.

The controller adopts technical and organisational measures appropriate to the risk, under Article 32 GDPR. Communications with the site are encrypted in transit. In the event of a personal data breach posing a risk to data subjects, the controller notifies the Italian Data Protection Authority and, where required, the data subjects, within the deadlines of Articles 33 and 34 GDPR.

7. Model training and the right to object

To the extent permitted by applicable law, the controller reserves the right to use anonymised geometry and technical usage data to train, fine-tune and improve artificial intelligence models and systems, its own or third parties', including the generative model that completes portions of geometry no camera ever reached. Raw footage cannot be used for this purpose, because it never reaches the controller's servers.

Right to object: anyone who does not wish their data to be used for the training purposes described may object at any time under Article 21 GDPR by writing to info@protocol-z.com. The objection is not subject to any deadline and takes effect for the future, since a model already trained cannot be decomposed into its individual contributions.

8. Your rights, minors, changes

Under Articles 15 to 22 GDPR you have the right to access your data, rectify it, erase it, restrict its processing, receive it in a portable format, object to processing and withdraw consent where it was given. To exercise them write to info@protocol-z.com: the answer arrives within 30 days, extendable by 60 in complex cases.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country of residence. If the processing concerns urban footage in your city, the controller to address is the body operating it, and this policy says why.

The site and its forms are not directed at children under 16, and no knowing collection of children's data takes place.

This policy may be updated to reflect changes in law or in the service. The updated version is published on this page within 14 days of the update, with the date at the top.

This site uses no cookies

Not one, not even a technical one. The two preferences the site remembers live in the browser's local storage, which is a different thing: it stays on the device and is not sent to the server with every request.

There are no profiling cookies, tracking pixels, advertising tools or analytics services. There is no banner because there is nothing to consent to.

What stays on your device

Two values, saved in the browser's local storage when you make a choice. Until you make one, nothing is written.

No third-party request

Fonts, icons, images and scripts all come from the site's own domain. No third party receives your IP address while you browse here. The Geist fonts and the Noto fonts for Arabic, Hindi and Bengali are served by us, not from an external delivery network.

How to delete it

From the browser settings, under site data. Deleting those two values makes the site follow the device's language and theme again: nothing breaks, you will simply be offered the choice once more.

The rest

Personal data processing is described in the Privacy Policy.

The commitment

Protocol-Z works to make the Zinkis site usable by as many people as possible, including those browsing with assistive technology, by keyboard, at 200 per cent zoom or with reduced motion.

Reference standards

Web Content Accessibility Guidelines 2.2, level AA, and European standard EN 301 549, in line with the European Accessibility Act.

Conformance status

Partially conformant. Semantic structure, contrast, keyboard navigation and assistive technology support were verified on the public pages. The checks were done with Chromium; Safari, Firefox and mobile screen readers were not tested directly, and that is stated here rather than left implied.

What is in place

A link to skip to the main content. A heading hierarchy that follows the content. A visible focus ring on every control. Targets of at least 44 pixels where a finger touches. Respect for prefers-reduced-motion, which switches off all movement and leaves only opacity changes. Right-to-left direction on the Arabic pages. Forms have associated labels, and the error appears on the field that caused it rather than at the bottom of the page.

The card colours were chosen by measuring contrast through the translucent layers, not by eye: the measured value is the one the text actually has over the glass, not the one it would have on a solid background.

Known limitations

Sections fade in as they enter the screen. This switches itself off when the operating system reports a preference for reduced motion. Historical photographs taken from external sources have alternative text written by us, describing the scene, which does not replace the source's own caption.

Reporting

If you hit a barrier write to info@protocol-z.com, naming the page and what does not work. We answer within 30 days.

Fonts

Geist and Geist Mono, by Vercel, under the SIL Open Font License 1.1. Inter, by Rasmus Andersson, same licence, used only for the wordmark. Noto Sans Arabic, Devanagari and Bengali, by Google, same licence. All served from the site's own domain.