Website Privacy & Legal

Information about website and services are provided by Zextras s.r.l. or its affiliates (which are companies which are controlled by, controlling, under the same control or under joint control of Zextras s.r.l.) with registered office in Largo Richini 6, 20122 Milano, Italy. Email: info[at] – R.E.A. MI 2045436 – P.I. and C.F. 03695830244


About this policy

This policy outlines the processing activities involved in the use of the Website as a whole, within the terms specified hereinafter. Through the website are processed personal data, both provided directly and deliberately by You (such as upon the creation of the account, by filling forms, by uploading files etc.) and indirectly (such as during the mere navigation of the website). It will be also described what are cookies and how We use them. You should read this policy so you can understand what information is collected through the website, why it is collected and how it is used. This policy was last updated on May 16th 2024. All personal data collected and processed through this company’s websites are subject to this policy which specifically covers, and (hereinafter, collectively, the Website).

Data Controller, data subject and data processor

Data controller is Zextras s.r.l. or one of its affiliates (hereinafter defined as Zextras, We, Us, Controller or Data Controller). The data subject (hereinafter defined as You, User, Buyer or Potential Buyer, Candidate, Participant) is the subject accessing the Website, and/or purchasing a product, and/or requesting a demo or a trial, and/or asking information, and/or requesting support, and/or uploading their resume or cover letter. Some activities (for example website hosting) are carried out on behalf of the Controller itself by data Processors providing sufficient guarantees to implement appropriate technical and organizational measures. Please contact us (dataprotection[at] if you would like additional information regarding data processors. Processing activities are entirely carried out within the facilities of the data controller or data processors.

General information about data collected by us

Personal data processed through this Website is carried out only by Zextras’ employees and by technical staff in charge of server maintenance activities. No personal data will be communicated to any third party, except data needed to provide the service or information requested by the User or directly collected by third parties. Personal data is processed with automated means for no longer than is necessary to achieve the purposes for which it has been collected. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorization. Personal data may be disclosed only upon request of competent authorities authorized by law.


Personal data from service use

We acquire personal data as part of the standard transmission of the internet communication protocol. Such information is not collected in order to relate it to identified data subjects, however it might allow the identification of the User. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user’s operating system and computer environment.


This data is only used to extract statistical information, analyse website traffic, and understand where our audience is coming from, as well as to ensure and check the Website functioning. Such data might be also used to establish liability in case cyber crimes are committed against this Website.

Legal basis

Log files are processed on the basis of a prevailing legitimate interest of the data controller, to monitor lawful use of the website and fight threats, according to standard practices.


The aforementioned data is stored for no more than twenty six months.

Personal data voluntarily provided by the User

When You register on the store, or download a trial version, or fill a form, or upload a resume or cover letter, We ask for personal information such as your name, company name, address, phone number, e-mail address, payment information (a third-party intermediary is used to manage credit card processing). Account login credentials are also processed. When You send an email or other communication to Us, including support requests for our services, We may collect the personal information (such as email addresses) that You provide Us and may use it in order to process your inquiries, respond to your requests and improve our services. Keep in mind that when you actively interact with a component of the website (such as a form) you are deliberately giving your consent to the processing of the data it involves. When participating in surveys We collect the type and the operating system of the device you used to take the survey, the browser you used and its set language, the date and time of the survey as well as how much time it took you to complete it in addition to information you deliberately provide (for example the text you type in the text areas) and the results of the survey itself. When you upload your resume and your cover letter We process their content such as the information about your past work experience, your education, your interests.


Any personal data that is provided by Users to request information, services or products is used to:

  • provide the information, services or products which have been requested - those data is disclosed to third parties (professionals, suppliers, registered users etc.) only if this is necessary for the said purposes;
  • personal data provided by Users may be also used to send commercial information on items and services similar to those already purchased by the User, provided that the User may opt-out receiving at any time, either initially or after any subsequent communication;
  • send invitations to participate in surveys regarding products or services whom You requested access to (e.g. Zextras Carbonio Community Edition);
  • evaluate your application regarding the open job positions, posted on the Website.

Legal basis

The legal basis of the processing of personal data provided by the User to request information, services or products consist in the necessity of said data for the performance of a contract to which the data subject (You) is party or in order to take steps at the request of the data subject (You) prior to entering a contract. Otherwise, the legal basis under which the processing activity is to considered lawful is the consent You provide.


The aforementioned personal data provided directly by the User is stored until the User opts-out or delete their account.


The websites uses different cookies - technical and profiling, first party and third party. A cookie is a small piece of data (text file) that a website when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. The Website is scanned with our cookie scanning tool regularly to maintain a list as accurate as possible. We classify cookies in the following categories

  • Strictly Necessary Cookies
  • Functional Cookies
  • Performance Cookies
  • Targeting Cookies

Please read carefully what follows.

You can manage cookies used by Zextras website clicking on the following button:

Data Subjects’ Rights

You as a data subject have a number of rights relating to your personal data and what happens to it. You are entitled at any time to obtain confirmation of the existence of a processing activity of personal data; you are entitled also to be informed of contents and origin of personal data, verify its accuracy, or else request that such data be supplemented, updated or rectified as well as to exercise all right defined in section 2 of EU Regulation 2016/679. The above Section also provides for the right to request erasure, anonymization or blocking of any data that is processed in breach of the law as well as to object in all cases, on legitimate grounds, to processing of the data.
You can contact US or our DPO at dataprotection[at] to exercise one of the following rights or if you need more information regarding our processing activities of your data.
Specifically you have the right to:

  • request access to your personal data and require us to correct any mistakes in your personal data;
  • request erasure of your personal data where there is no good reason for us to continue to process it;
  • request restrictions or the temporary stop on the processing of your personal data in certain situations;
  • object to processing your personal data at any time in certain situations (such as for direct marketing purposes);
  • receive the personal data concerning You in a structured, commonly used and machine-readable format;
  • lodge a complaint with a supervisory authority;