SAPI · TRANSPARENCY
Privacy
Last updated: 15 September 2026
1. Data controller
SAPI S.r.l. — Servizi Avanzati per Industrie
S.S. 195 km 13,300 — Su Spantu I snc, 09012 Capoterra (CA), Italy
VAT and tax code 01080960923 — Companies Register CA-101350
Telephone +39 070 728777 — certified email sapisrl@cgn.legalmail.it
SAPI S.r.l. determines the purposes and means of the processing of personal data collected through this website and is the data controller under art. 4(7) of Regulation (EU) 2016/679 (GDPR). For any matter concerning personal data, write to the certified email address above or call our switchboard during office hours.
2. What data we collect
The site has no forms: it collects only the data you choose to send us by writing or calling, together with the technical data any website records in order to work.
- Email and certified email: the data contained in messages sent to the addresses published on the Contact page — name, contact details, company or organisation, content of the enquiry.
- Telephone: the data you give us during the conversation. Calls are not recorded.
- Applications: if you send a CV, the data it contains. Please do not include information that is not relevant to the selection process, in particular special categories of data under art. 9 GDPR.
- System logs: IP address, date and time of the request, page requested, browser and operating system. They serve the operation and security of the service, not the identification of visitors.
Providing data is optional: without the necessary contact details, however, we cannot reply to an enquiry or consider an application.
The site uses no cookies and no analytics tools: the details are in the cookie policy.
3. Why we process data, on what basis and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Replying to enquiries received by email, certified email or telephone | Pre-contractual measures requested by the data subject (art. 6(1)(b) GDPR) | 24 months from the last contact |
| Preparing quotations and managing the contractual relationship | Performance of the contract (art. 6(1)(b) GDPR) | 10 years from completion, for civil and tax obligations |
| Assessing applications received | Pre-contractual measures at the candidate’s request (art. 6(1)(b) GDPR) | 24 months from receipt, unless deletion is requested |
| Site security and prevention of misuse | Legitimate interest of the controller (art. 6(1)(f) GDPR) | Logs for up to 12 months |
| Legal, accounting and tax obligations | Legal obligation (art. 6(1)(c) GDPR) | For the periods laid down by law |
Data is not used for marketing messages or newsletters, is not subject to profiling and does not feed automated decision-making within the meaning of art. 22 GDPR.
4. Who receives the data
Data is processed by SAPI S.r.l. staff authorised and instructed to do so. It may be disclosed to external parties appointed as processors under art. 28 GDPR, in the following categories:
- website hosting and maintenance provider;
- email and certified email provider;
- accounting, tax, legal and employment advisers;
- IT and security service providers.
It may also be disclosed to authorities and supervisory bodies where required by law. It is never disseminated or sold to third parties for commercial purposes.
Data is processed within the European Economic Area. The site calls no third-party services, so browsing involves no disclosure to providers located outside the European Union.
5. Your rights
You may exercise at any time the rights set out in articles 15 to 22 of the GDPR: access and a copy of your data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest and withdrawal of consent already given.
Simply write to sapisrl@cgn.legalmail.it stating the right you wish to invoke. We reply within one month, a period that may be extended by two months in complex cases.
If you believe the processing infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome) or bring the matter before the courts.
6. Security
We take appropriate technical and organisational measures to protect data against destruction, loss, unauthorised access and unlawful processing: encrypted HTTPS connection, access limited to authorised staff, system updates and storage of documents in secure environments.