About this document
This document outlines and describes the processing activities that the interaction with Zextras Carbonio campaigns-related webpages, forms, and other related touchpoints implies (hereinafter, collectively, "the Pages"), within the terms specified hereinafter.
Through the interaction with the Pages, personal data are processed; these data are both provided directly by you (for example by filling out forms) and indirectly (such as during the mere navigation of the Pages and the interaction with their components). You should carefully read this document to understand what information Zextras collects, why it is collected and how it is used.
Every term used in this privacy policy (for example 'personal data', 'data subject', 'data controller', 'data processor', 'processing activity', 'purpose', 'legal basis', 'transfer', 'third parties') refers to its meaning outlined in the General Data Protection Regulation (Regulation EU 2016/679).
Data controller, data subject, recipients and data processors
Data controller, the entity which determines the means and purpose of the processing activities, is Zextras (hereinafter defined as 'We', 'Us' or 'Controller').
The data subject (defined in this Policy as 'You') is the natural person to whom information related to the interaction with the Pages refers. Data subject is also the natural person who deliberately chooses to fill out forms.
Some activities are carried out on behalf of the Controller itself by data processors providing sufficient guarantees to implement appropriate technical and organizational measures.
Where applicable, the Controller transfers personal data to recipients or data processors in third countries only upon the existence of an adequacy decision by the European Commission.
If no adequacy decision can be relied upon, other appropriate safeguards related to data transfer may be provided for (for example standard contractual clauses agreed upon with partners).
Please contact us at dataprotection[at]zextras[dot]com if you would like additional information regarding data processors or recipients.
General information about data collected by us
Processing of personal data collected through interaction with the Pages is carried out only by Zextras employees or consultants.
Personal data is processed with automated means for no longer than is necessary to achieve the purposes for which it has been collected. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorization. Personal data may be disclosed only upon request of competent authorities authorized by law.
Personal data related to filling out forms
We acquire personal data as part of the activities of filling out forms. Such information always allows users' identification.
These data include:
- Your first and last name;
- The company or public entity or organization you work for and the specific department you work in;
- The country where the company or public entity or organization you work for is based;
- Your email address;
- Other personal data that you may put in input fields.
This data is used to enable Zextras' sales team to contact You with a personalized commercial proposal tailored to the needs You have put in the form. Additionally, based on your location or specific needs, Zextras may connect you with a relevant local partner of Zextras to address Your needs.
Information You put in the form may be therefore communicated to specifically chosen third parties appointed by Zextras.
Email addresses will also be collected by Zextras to send You marketing communications which include updates on Zextras' products, initiatives, or other relevant information that may interest You.
The aforementioned data is stored for no longer than is necessary for the purposes for which they are processed. In any case data are stored no longer than one year.
Personal data related to the interaction with the Pages
We acquire personal data related to some interactions with the Pages and, precisely, with the interactive demonstrations of products that are embedded in those Pages. Such information is not collected to relate it to identified data subjects, however it might allow Zextras (and Zextras only), in exceptional and non-systemic cases, to identify users with the combination of other collected data.
Data processors aren't, as a consequence, able to identify You or other data subjects.
This data category includes:
- the operating system of the device You use;
- the timestamp of the last visit;
- the time it took You to complete the demonstration;
- geolocation data, such as the city from which you access the demonstration.
The aforementioned data is stored for no longer than is necessary for the purposes for which they are processed. In any case data are stored no longer than one year.
This data is only used to conduct analysis and extract statistical information in order to assess the effectiveness of design choices and to improve the overall quality of Zextras products or services. We use data to ensure the Zextras products are working as intended and thus solely to make improvements to our products.
About the consent You give for processing Your personal data
Processing of Your personal data is based on the consent You expressly give by submitting the information you put in the forms through the click on the button displayed at the bottom of the forms.
If You do not give the consent to process Your data to be contacted by Zextras' sales team, You can't submit any information therefore there will not be any processing of that information whatsoever.
If You do not give the consent to process Your data to receive marketing communications, You could still submit Your information to be contacted by Zextras' sales team.
Data Subjects' Rights
You as a data subject have a number of rights relating to your personal data and what happens to them. You are entitled at any time to obtain confirmation of the existence of a processing activity of personal data; you are entitled also to be informed of contents and origin of personal data, verify its accuracy, or else request that such data be supplemented, updated or rectified as well as to exercise all right defined in Section 2 of Regulation EU 2016/679. The aforementioned Section also provides for the right to request erasure, anonymization or blocking of any data that is processed in breach of the law as well as to object in all cases, on legitimate grounds, to processing of the data.
You can contact us or our data protection officer at dataprotection[at]zextras[dot]com to exercise one of the following rights or if you need more information regarding our processing activities of your data or more information about the rights that you can exercise.
Specifically you have the right to:
- obtain from the controller confirmation as to whether or not personal data concerning you are being processed and the access to the personal data where that is the case;
- obtain without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;
- request erasure of your personal data when (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (ii) you object to the processing; (iii) the personal data have to be erased for compliance with a legal obligation;
- request restrictions or the temporary stop on the processing of your personal data in certain situations;
- receive the personal data concerning you in a structured, commonly used and machine-readable format;
- object, on grounds relating to your particular situation, at any time to processing of personal data concerning You. You can also autonomously exercise this right by clicking on the toggle present in the privacy-related section of the application;
- the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with a supervisory authority.