Personal Data Processing Notice pursuant to Art. 13 EU Regulation 2016/679 (GDPR)

Version 2.1 — May 2026

1. Data Controller

The Data Controller is AvMap S.r.l. (sole shareholder), with registered office at Viale Domenico Zaccagna 6, 54033 Carrara (MS), Italy, VAT No. IT00610230450.

For any matter relating to the processing of your personal data, you may contact the Controller at: [email protected].

2. Scope of Application

This Privacy Policy applies to the processing of personal data carried out by the Controller in connection with browsing the avmap.it website and its associated portals, as well as user account registration and use of the services offered (collectively, the "Website"). For specific service portals — such as MyFarmnavigator, Autoshield and other telematics services — dedicated notices are provided at the time of registration for each specific service, given the different types of data processed.

3. Data Processed, Purposes, Legal Bases and Retention Periods

The table below sets out, for each category of processing, the data collected, the purposes pursued, the applicable legal basis and the retention period.

Note on legal basis for account and services: The provision of data required for account creation and service delivery is based on the performance of the Terms of Use contract accepted by the user — not on consent. Failure to provide such data will make it impossible to access the services. Consent is required solely for optional processing activities (e.g. newsletter).

4. Processing Methods

Data is processed by electronic means and, where necessary, manually, in compliance with Art. 32 GDPR regarding appropriate technical and organisational security measures. Personal data is not subject to automated decision-making processes within the meaning of Art. 22 GDPR, nor to profiling.

5. Location of Processing

Data is stored exclusively on Amazon Web Services (AWS) and Microsoft Azure cloud infrastructure located within the European Union. AvMap has entered into data processing agreements with both providers — including the Standard Contractual Clauses approved by the European Commission — ensuring that users' personal data is not transferred to third countries outside the European Economic Area. No transfers outside the EEA are envisaged.

6. Recipients of Personal Data

Users' personal data is not sold or transferred to third parties for their own purposes. Data may be communicated or made accessible, to the strictly necessary extent, to the following categories of recipients:

•     AvMap employees and collaborators authorised to process data within the scope of their duties;

•     Technical service providers (cloud infrastructure, transactional email, newsletter, statistical analysis) appointed as Data Processors pursuant to Art. 28 GDPR, with whom AvMap has entered into appropriate data processing agreements;

•     Professional firms and consultants (legal, tax, administrative) for compliance with obligations arising from the business relationship;

•     Public authorities and judicial bodies, in cases required by law.

The list of Data Processors under Art. 28 GDPR is available upon written request to [email protected].

7. Cookies and Tracking Technologies

The Website uses exclusively technical cookies necessary for its functioning and analytics cookies with IP address anonymisation (Google Analytics 4 with default IP anonymisation). In accordance with the Italian Data Protection Authority Guidelines of 10 June 2021, analytics cookies with anonymised IP are treated as equivalent to technical cookies and do not require prior user consent. No profiling cookies or third-party marketing cookies are used.

No consent banner is therefore displayed. The Cookie Policy, accessible via the link in the footer of every page of the Website, provides full details of the cookies installed and their purposes.

Should AvMap introduce profiling or marketing cookies in the future, a consent management platform (CMP) will be implemented before their use, and this Privacy Policy will be updated accordingly.

8. Minors

The services offered through the Website are not intended for individuals under the age of 14 years (pursuant to Art. 8 GDPR and the applicable Italian implementing legislation). AvMap does not knowingly collect personal data from children under 14. If the Controller becomes aware of having inadvertently collected data from a child under 14, it will proceed to delete it immediately.

9. Rights of the Data Subject

You have the right to exercise, at any time and without formality, the following rights against the Controller:

•     Right of access (Art. 15 GDPR): to obtain confirmation as to whether personal data concerning you is being processed and, if so, to access such data and the information relating to the processing;

•     Right to rectification (Art. 16 GDPR): to obtain the correction of inaccurate data or the completion of incomplete data;

•     Right to erasure (Art. 17 GDPR): to obtain the deletion of your data, in the cases provided for by law;

•     Right to restriction of processing (Art. 18 GDPR): to obtain restriction of processing in the cases provided for by law;

•     Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used and machine-readable format, or to request its transfer to another controller;

•     Right to object (Art. 21 GDPR): to object to processing based on legitimate interest or for direct marketing purposes;

•     Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please write to: [email protected]. The Controller will respond to requests within thirty days of receipt, subject to a possible extension of a further two months in cases of complexity or high volume of requests (with reasoned notification to the data subject).

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it), or with the supervisory authority of your country of residence, if you believe that the processing of your personal data violates the GDPR or applicable national legislation.

11. Updates to this Privacy Policy

This Privacy Policy is subject to periodic review following regulatory changes, the introduction of new processing activities or amendments to existing ones. The updated version is published on the Website with the date of the latest amendment. In case of material changes affecting data subjects' rights, AvMap will provide prior notice to registered users by email.

Last updated: May 2026