WHO IS THE CONTROLLER OF YOUR DATA?

GIGIEFFE S.r.l., Via dell’Artigiano n. 2/4, e-mail amministrazione@gigieffe.com, tel. 054532900, certified e-mail gigieffe@pec.fastmail.it, is the data controller, committed to protecting the privacy and security of your personal information and the personal information of third parties which is collected in the course of the provision of goods and/or services by you to GIGIEFFE S.r.l.

WHY DO WE PROCESS YOUR PERSONAL DATA?

A) Processing your data to perform the contract
According to the Italian data protection law (D.Lgs. 196/2003) and the European General Data Protection Regulation (GDPR), GIGIEFFE S.r.l. needs your personal data to manage the contractual/commercial relationship, such as, satisfying the specific requests of the data subject before concluding the contract and concluding, modifying and executing the contract. Also supplying and managing the associated services and handling complaints. The lawful bases of the processing are: – Execution of the contract for the Data of the customer/supplier’s legal representative (GDPR Art. 6 (1)b) – Legitimate interests for the Data of the customer/supplier’s employees or consultants involved in the activities covered by the contract (GDPR Art. 6 (1)f). Administrative – accounting, such as, invoicing, handling payments, arrears and non-payments and for communicating the Data for internal organization, administrative, financial and accounting purposes to do with the activities involved. The lawful basis of the processing is the need to fulfil a legal obligation with which GIGIEFFE s.r.l. must comply (GDPR Art. 6 (1)c). Fulfilling obligations or exercising rights provided under the national or European Union law or by collective contracts in conformity with national law, such as: fulfilling obligations provided for by EC and national legislation, in particular by laws, regulations, including contingent and urgent provisions to maintain public order, investigate and fight crime. Processing is necessary for compliance with a legal obligation to which the controller is subject (GDPR Art. 6 (1)c).
B) Implement UNI EN ISO 9001 (quality management system) 
Personal data is processed for the purpose of managing, administering, maintaining and developing the controller’s quality management system. The quality management system comprises the organization’s way of operating and developing and it also covers the controller’s entire organization (e.g. manage your questions, handle complaints and warranty matters and to provide technical support as well as to improve customer experience, eventually evaluating the suppliers). Processing basic details of data subjects, such as name, address, tax code etc., is necessary for the purposes of the legitimate interests pursued by the controller (GDPR Art. 6 (1)f).
C) Setting up a remote customer support service using TeamViewer
Customers are reminded that GIGIEFFE S.r.l. and its business partners provide the support consisting of the remote internet connection made by the technician directly on the user’s computer (or a different electronic device including a mobile one) or on the devices produced by GIGIEFFE S.r.l. on the customer’s behalf. There will be a single remote connection session and the client’s assistance will be carried out with the utmost expertise and attention in compliance with the relevant legislation. In this regard, a tool must be downloaded, and the program will be removed from your computer by removing completely without leaving traces of it after the session ends. During the session the customers will be asked to keep a phone contact with the technical support of GIGIEFFE S.r.l. or of the business partner responsible for the support and check the activities done on their own device. The clients will be able to visually follow the activities done by the technical support of GIGIEFFE S.r.l. or of the business partner in real time and can at any time discontinue desktop sharing or remote service at any time during the remote service session by locking the screen or terminating remote service, if experiencing any issue.
By installing or otherwise using the Teamviewer tool and accepting the remote connection request from GIGIEFFE S.r.l. or from the business partner, the user is giving permission to a remote assistance agent to log in to his/her computer, which may contain his/her personal information, files, documents, etc. The user is requested to close all the files, programs and applications that may contain personal or confidential information that can be watched on the computer where the connection has to be started before using the service. So that the agent won’t accidentally see the information on the screen. During the remote assistance session GIGIEFFE s.r.l. or the business partner will do everything possible to access only the relevant data for the purpose of carrying out the assistance. The agent will take the necessary measures to ensure the confidentiality of non relevant data according to the General Data Protection Regulation (GDPR), in the event he/she has access to that kind of information. The processing of the personal data is based on the contract of the service that the user has agreed to (GDPR Art. 6 (1)b). It is the responsibility of the users to keep a backup copy of their data and applications before stating the remote service session.
By using TeamViewer the clients agree that GIGIEFFE s.r.l. or the business partner will have the temporary remote control of their computer in order to ensure proper operation of the product or to verify and resolve reported issues. It should be noted that some problems might still not be solved during the remote service session. The customer is aware and expressly accepts that GIGIEFFE s.r.l. or the business partner shall under no circumstances be held responsible for any direct, indirect, incidental, consequential, special, exemplary damages or losses whatsoever, without regard to cause or theory of liability (including but not limited to losses or unearned profits, loss of privacy, lack of access to a computer or software, business interruption, loss of business information or other pecuniary or nonpecuniary loss), resulting from the remote assistance service.
Please note that the above terms and conditions and disclaimer have no connection with TeamViewer Gmbh and have been defined by GIGIEFFE Srl as a user of the TeamViewer software. TeamViewer's privacy policy can be found here. https://www.teamviewer.com/en/privacy-policy/ . The interested parties are invited to read it. TeamViewer is a software product distributed by TeamViewer Gmbh and used by GIGIEFFE S.r.l. and/or its business partners previously selected, highly competent and able to deal with the issues to provide remote support to the clients. GIGIEFFE S.r.l. does not provide any warranty coverage on TeamViewer and cannot be held responsible for any failures caused directly or indirectly by the installation or use of TeamViewer on the client’s computer. GIGIEFFE S.r.l. and its business partners have all the TeamViewer licenses required to use this tool.

HOW DO WE PROCESS YOUR PERSONAL DATA?

Notwithstanding the fact that we will process your data for the time strictly necessary to achieve the purpose in question, we will subsequently keep them duly stored and protected for the time during which liability may arise for their processing, in compliance with legislation in force from time to time. We also will keep your personal data confidential and ensure that you may exercise your rights.

DO WE SHARE YOUR DATA WITH THIRD PARTIES?

To achieve the purposes mentioned in this Privacy Policy, the data may be communicated to external third parties acting as independent data controllers, by way of mere example, authorities and supervisory bodies and in general public or private entities with legitimate reason to request the data (e.g. banks and credit institutions; Local governments and other public authorities).
The data may be processed, on behalf of the data controller, by external persons appointed as data processors, who carry out specific activities on behalf of the controller, by way of mere example, its distribution network, companies and agents engaged in credit recovery for the controller, legal, taxation and business consultants.

HOW LONG WILL WE KEEP YOUR DATA?

For the performance of the contract we will process your data for the time necessary to manage the purchase of the products or services that you buy, including potential returns, complaints or claims related to the purchase of the product or service in question. Retention time is 10 years.
In order to implement UNI EN ISO 9001 (quality management system) we will process your data occasionally for the time during which we proceed to carry out a specific quality action or survey implementing the quality management system. Retention time is 5 years.
For the remote support using Teamviewer we will process your personal data no more than necessary for us to fulfil the purpose. Thereafter the data will be immediately erased for this type of use. The data retention time could also vary depending on specific local legal requirements.

WHERE DO WE TRANSFER YOUR PERSONAL DATA?

The personal data that we collect from you is processed in your country or within a country of the European Union or the European Economic Area (“EU/EEA”) but may also, whenever necessary, be transferred to and processed in a country outside of the EU/EEA to support our global operations. Any such transfer of your personal data will be carried out in compliance with the applicable laws and without undermining your statutory rights. We will also provide adequate guarantees regarding the security and confidentiality of your personal data.

WHAT ARE YOUR RIGHTS?

Under certain circumstances, by law you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us. If you have complaints about the way GIGIEFFE s.r.l. processes and protects your personal data and privacy you have the right to make a complaint to the Italian Authority for Privacy Protection (Garante Privacy) or any other competent a supervisory authority in the country of residence.

MANDATORY OR VOLUNTARY COMMUNICATION OF DATA AND POSSIBLE CONSEQUENCES OF A FAILURE TO PROVIDE

IT If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you, or we may be prevented from complying with our legal obligations. Terms and conditions and the disclaimer related to the remote customer support using TeamViewer shall be deemed accepted in the moment you install or otherwise you use TeamViewer software or accept the remote connection to your computer or to the devices produced by GIGIEFFE s.r.l. started by GIGIEFFE S.r.l. or one of its business partners.