🔐 Privacy Policy – POSPOS® Web/App

Effective Date: 28/04/2025

At POSPOS®, we care deeply about your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website (www.pospos.it) and POSPOS® App.

POSPOS® is a registered product of NextStep17 Srl, with registered offices at Via Giovan Battista Vaccarini 1, 90143 Palermo, Italy. VAT No. 07123580826.

📥 What Information We Collect

When you use our website or app, we may collect the following types of data:

• Personal Information: Name, email address, phone number, billing information, and any other data you provide voluntarily.
• Account Information: Username, login credentials, security question answers.
• Usage Data: Pages visited, actions performed, and app interaction data.
• Device and Connection Data: IP address, browser type, operating system, device type, language, time zone.
• Geolocation Data: Only if you grant permission through your device.

🛠️ How We Use Your Information

We process your personal data to:

• Provide access to our services and core app functionality.
• Manage customer support and respond to inquiries.
• Send administrative messages, product updates, and service announcements.
• Monitor and improve the quality and performance of the app.
• Ensure legal compliance with applicable laws and regulations.
• Prevent fraud, misuse, or unauthorized access.

We do not sell or share your personal information with third parties for marketing purposes.

🔄 Data Sharing and Third Parties

We may share your data only with:

• Service Providers (e.g., hosting, analytics, and payments exclusively managed by the banking gateway) that operate under strict confidentiality agreements.
• Legal Authorities when required by law or to protect our legal rights.
• Partners involved in financial or transaction services, but only as necessary and always under strict data protection agreements.

💾 Data Storage and Security

Your data is stored on secure servers and is protected with advanced technical and organizational security measures to prevent unauthorized access, loss, or misuse.

Access to your information is restricted to authorized personnel only.

We retain your data for as long as necessary to provide our services, comply with legal obligations, and resolve disputes.

🌍 Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure such transfers are lawful and protected under GDPR-compliant mechanisms, such as Standard Contractual Clauses.

👥 Your Privacy Rights

As a user, you have the right to:

• Access the personal data we hold about you.
• Request the correction or deletion of inaccurate or unnecessary data.
• Withdraw consent at any time (if processing is based on consent).
• Object to data processing or request restriction in certain cases.
• Request data portability in a structured, commonly used format.

You can exercise these rights by contacting us at: info@pospos.it

🍪 Cookies and Tracking

For details on how we use cookies and similar tracking technologies, please see our Cookies Policy.

📢 Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the effective date above and, where appropriate, sending you a notification.

We encourage you to review this policy regularly.

📩 Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us via our website chatbot or email: pospos@nextstep17.com