Privacy policy

Dear Customer/Supplier,

We inform you that, in accordance with the aforementioned legislation, the processing of your personal data will be based on principles of fairness, lawfulness, and transparency, as well as the protection of your privacy and your rights.

Pursuant to Article 13 of GDPR 2016/679, we therefore provide you with the following information.

The Data Controller is AP2 Automazione Processi Produttivi Srl , Tax Code and VAT No. 02612910246, with registered office in 36100 Vicenza (VI), Viale della Scienza n. 22, tel. (+39) 0444 289.310.

Object, purpose and legal basis of the processing

The Data Controller processes the personal data of natural persons, both identifiable and non-sensitive, provided by you as part of the contractual relationship (for example, but not limited to, name, surname, company name, address, telephone number, email address) for the following purposes:

1. A) without your express consent for:
   
   

• pre-contractual negotiations (such as, for example, receiving and processing requests for quotations) and activities necessary for the conclusion of the contract and its subsequent fulfillment, including after-sales assistance;
  
  
• fulfillment of obligations established by law, regulations, community legislation or by an order of the Authority including, by way of example, administrative, accounting and tax activities;
  
  
• issuing the entry visa required to access our foreign clients’ facilities for assembly and qualified assistance.
  
  

Please note that, given the purposes of the processing as described above, providing your data is optional, but failure to provide it, or providing it partially or inaccurately, will result in the impossibility of concluding the contract.

1. B) only with your specific and separate consent, for the following other purposes:
   
   

• sending informative or advertising newsletters and/or invitations to events by email, or registering for events in which the Data Controller is involved or organized by the latter or by accredited training institutions.
  
  

With regard to this last purpose, please note that providing personal data is optional. You can therefore decide not to provide any data or to subsequently deny the processing of data already provided. In this case, you will not receive email invitations to events, newsletters, and opinion and satisfaction surveys, but you will continue to be entitled to the Services referred to in letter A).

Treatment methods

Your personal data is processed using the operations indicated in Article 4(2) of the GDPR, specifically: collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, restriction, erasure, and destruction. Your personal data is processed both on paper and electronically and/or digitally, using organizational and processing methods strictly related to the purposes for which they were collected and, in any case, in a manner that guarantees the security, integrity, and confidentiality of the data.

Access and communication

Your data may be made accessible and/or communicated:

• to employees and collaborators of the Data Controller, in their capacity as authorised persons and/or internal data controllers and/or system administrators;
  
  
• to third-party companies or other entities contractually linked to the Data Controller (for example, cloud providers, suppliers, hardware and software support technicians, freight forwarders and carriers, credit institutions, professional firms, etc.) who carry out outsourcing activities on behalf of the Data Controller, including where applicable in their capacity as data processors;
• to agencies, offices, bodies, or in any case to parties that issue entry visas for non-EU countries in order to enable the execution of the signed service supply contract (in this case, there is the possibility that personal data, including sensitive data, of the interested parties involved may be requested);
  
  
• to supervisory bodies, judicial authorities and all other entities to whom communication is required by law for the fulfillment of the aforementioned purposes;

Your data will not be disclosed.

Data transfer

Personal data will be managed and stored within the European Union on servers located in Italy belonging to the Data Controller and/or third-party companies duly appointed as Data Processors.

Data retention period

The Data Controller will process the personal data collected

• for the purpose referred to in letter A): for the time necessary to fulfill the contract and in any case for no longer than 10 years from the termination of the relationship;
  
• for the purpose referred to in point B): for no longer than 2 years from the date of data collection.

Diritti dell’interessato

As an interested party, you may exercise the following rights at any time:

• request access to your personal data: art. 15
• request and obtain the rectification or updating of the aforementioned data: art. 16
• request, where applicable, the deletion of processed personal data (right to be forgotten): art. 17 • request the limitation of the processing of your data, where applicable: art. 18
• obtain data portability, where applicable: art. 20
• object to processing: art. 21
• not be subjected to automated decision-making processes: art. 22
• withdraw consent, where applicable: withdrawing consent does not affect the lawfulness of processing based on consent given before its withdrawal;
• lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11 – 00187 Rome: art. 77.
  
  

You may exercise your rights by sending a request via email to privacy@ap2.it
Vicenza, January 28, 2026

THE OWNER

AP2 Production Process Automation Srl