Privacy Policy

1. Data controller

The controller of the personal data collected through this website and through the EasySyncPOS service is:

• APDSoftware
• Via C. Colombo 15, 24047 Treviglio (BG), Italy
• VAT no. IT03835250162
• Business Register no. REA BG 431224
• Email: [email protected]

No Data Protection Officer (DPO) has been appointed; whether an appointment is mandatory is one of the points to be assessed by the professional who will review this document.

2. Personal data we collect

EasySyncPOS is a cloud software service (SaaS) for point-of-sale and inventory management. We collect:

• Registration data: business name (tenant), administrator's first and last name, email address, password, base currency and country of the business. Passwords are never stored in clear text: only a cryptographic hash is kept.
• Service usage data: technical data generated by use of the platform (access logs, IP address, date and time, browser and device type), needed to deliver the service and to keep it secure.
• Customer content: the data users upload to their own instance (contacts, items, stock movements, sales documents). With respect to this content APDSoftware normally acts as a processor on behalf of the customer, who is the controller.

We do not knowingly collect data relating to minors, nor special categories of personal data (Art. 9 GDPR).

3. Purposes of processing

• Creating and managing the customer's account and instance.
• Delivering, maintaining and supporting the service.
• Ensuring security, abuse prevention and operational continuity.
• Meeting tax, accounting and other legal obligations.
• Sending service communications (for example technical notices or changes to the contract).

4. Legal basis

• Performance of a contract (Art. 6(1)(b) GDPR) for registration, service delivery and support.
• Legal obligation (Art. 6(1)(c) GDPR) for tax, accounting and record-keeping requirements.
• Legitimate interest (Art. 6(1)(f) GDPR) for infrastructure security and the prevention of unlawful use.
• Consent (Art. 6(1)(a) GDPR) for non-necessary cookies only, if and when they are enabled (see section 8).

5. Recipients and transfers

Data may be processed by technical suppliers acting as processors (hosting, transactional email delivery, monitoring tools), appointed under Art. 28 GDPR. An up-to-date list of processors is available on request by writing to [email protected].

Any transfers to third countries take place only where an adequacy decision or standard contractual clauses approved by the European Commission are in place. Mapping each supplier and its safeguards in detail is one of the points still to be completed with legal counsel.

6. Retention period

• Account data: for the duration of the relationship and for 12 months after it ends, unless a longer legal obligation applies.
• Accounting and tax data: 10 years, as required by Italian law.
• Technical and security logs: up to 12 months.

At the end of these periods the data is deleted or anonymised.

7. Your rights

Data subjects may exercise at any time the rights set out in Arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection, as well as withdrawal of any consent given (without affecting the lawfulness of processing carried out beforehand).

Requests should be sent to [email protected]. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Cookie policy

This site currently uses strictly necessary technical cookies only, which do not require consent: keeping the authenticated session, security, and storing the choice made in the cookie banner.

In the future we may introduce statistics cookies to analyse site usage in aggregate form. This is a possible future use and is not active today: no analytics tool is installed. If and when such cookies are enabled, they will be loaded only after explicit consent given through the banner, and this section will be updated with a detailed list of the cookies, their purposes and their lifetimes.

The choice made in the banner is saved in your browser (localStorage) and can be changed at any time by clearing this site's data in your browser: the banner will be shown again on your next visit.

9. Changes to this policy

This policy may be updated; the date of the latest update is shown at the top of the page. Substantial changes will be communicated to registered users by email or through a notice inside the service.

10. Contact

For any question about this policy: [email protected].