This notice explains how APDSoftware handles personal data when you visit EasySyncPOS, contact us, create an account or use the service. It is intended to provide the information required by Articles 12–14 of the GDPR.
1. Data controller
The controller is APDSoftware, Advanced Programs Developers, Via C. Colombo 15, 24047 Treviglio (BG), Italy, P.IVA 03835250162, REA BG 431224. Privacy contact: info@easysyncpos.com. Phone: +39 0363 180 6491.
2. Scope and roles
This policy applies where APDSoftware decides why and how personal data is processed, including website, account, sales and support activity. When a business uses EasySyncPOS to process personal data about its own customers, employees or suppliers, that business may be the controller and APDSoftware may act as processor under a separate data-processing agreement.
3. Personal data we collect
- Account and identity data: name, business name, email, account role and authentication information.
- Business configuration: country, currency, locations, catalogue and settings.
- Support and contact data: the contents of requests, correspondence and troubleshooting information you provide.
- Transaction and service data: records needed to provide checkout, inventory, synchronization and reporting functions. Payment-card data should be handled by supported payment providers and not entered into general contact fields.
- Technical and security data: IP address, device and browser information, timestamps, log events, synchronization status and security signals.
- Billing data: plan, invoices, payment status and limited transaction references received from payment providers.
- Preference data: language, communications and cookie choices.
We receive data directly from you, from authorized users in your organization, automatically from use of the service, and from providers you choose to connect.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create accounts, provide POS features, synchronize data and support users. | Performance of a contract or steps requested before a contract. |
| Billing, accounting and compliance with lawful requests. | Legal obligation. |
| Protect accounts, prevent abuse, monitor reliability and improve essential service performance. | Legitimate interests in security, continuity and product improvement, balanced against user rights. |
| Reply to contact or sales enquiries. | Pre-contractual steps, legitimate interests, or consent where required. |
| Optional analytics or marketing communications. | Consent, which may be withdrawn at any time. |
Where information is required to create an account or provide the service, not providing it may prevent us from fulfilling that request.
5. Cookies and local storage
The supplied website template stores the visitor’s cookie preference in first-party local storage. It does not currently activate analytics or advertising trackers. If optional tools are introduced, they must remain disabled until valid consent is collected where required. See the Cookie Policy for the current inventory and preference controls.
6. Recipients and service providers
We may share data with personnel and contractors who need it to provide the service; cloud hosting, communications, support, security and payment providers acting under appropriate terms; professional advisers; public authorities when required by law; and a successor in a legitimate corporate transaction. We do not sell personal data.
The production policy should identify material providers or categories used by the deployed stack and be updated whenever that stack changes.
7. International transfers
If personal data is transferred outside the European Economic Area to a country without an adequacy decision, we use an applicable safeguard such as European Commission Standard Contractual Clauses and supplementary measures where required. Information about applicable safeguards can be requested using the contact below.
8. Retention
We keep personal data only for as long as needed for the purposes described and to meet legal, accounting, security and dispute-resolution requirements. Account and service data is generally retained while the account is active and for the period needed after closure to provide exports, resolve issues and comply with law. Accounting records are retained for the legally required period. Contact requests and technical logs are reviewed and deleted or anonymized when no longer needed. Production retention schedules must be documented for each deployed data store.
9. Security
We use organizational and technical safeguards designed for the nature of the service, including access controls, encryption where appropriate, backups, monitoring and tenant separation. No system is completely risk-free. Account owners should use strong unique passwords, restrict staff permissions and keep devices secure.
10. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability, or objection to processing; withdraw consent without affecting earlier lawful processing; and lodge a complaint with a supervisory authority. In Italy, the authority is the Garante per la protezione dei dati personali.
Send requests to info@easysyncpos.com. We may need to verify identity. We normally respond within one month, with extensions permitted for complex requests under applicable law.
11. Children
EasySyncPOS is a business service and is not directed to children. Account owners must ensure that authorized users have the capacity and permissions required by applicable law.
12. Changes to this policy
We may update this policy when the service, providers or legal requirements change. We will update the date above and provide additional notice for material changes where required.
13. Contact
APDSoftware, Via C. Colombo 15, 24047 Treviglio (BG), Italy
Email: info@easysyncpos.com
Phone: +39 0363 180 6491