Privacy Policy

This text sets out how we collect and process your personal data through the use of our website, including the information you provide to us via the form provided or when booking a demo. Our services are not available to those whom the rules prevent from giving consent; by submitting the forms to us, you warrant that you have sufficient capacity to give it.

1. Controller

Contact data:

The processing is carried out in accordance with the General Data Protection Regulation as it forms part of the law of Gibraltar («Gibraltar GDPR») and the Data Protection Act 2004 of Gibraltar. Staffy Gibraltar is the controller of your data (hereinafter, «we»)..

2. What data do we collect?

Personal data is any information about an identified or identifiable natural person. The data collected directly from the data subject will be processed confidentially and incorporated into the processing activities owned by Staffy Gibraltar. On our website we may process:

• Identity data: name and surname.
• Contact data: email and telephone.

We do not collect special categories of data (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, genetic or biometric data). If, by law or under the terms of contracting, it were necessary to collect data and you refused to provide it, we may not be able to provide the service

3. How do we collect your data?

Through the web form, the contact email, by telephone or postal mail, when you request information about our products or services or book a demo. We reserve the right to refuse, suspend or cancel a registration if we understand that it does not meet the requirements or the applicable rules.

Through technology or automated interactions: technical data about your device, browsing and usage patterns, collected via cookies or similar technologies (see the cookie policy).

Through third parties: e.g. Google (analytical or search data).

4. Purpose and legal basis

We will process your data to: formalise a contract between Staffy Gibraltar and you; where you give your consent; to comply with a legal or regulatory obligation; or where necessary for our legitimate interest or that of a third party. Applicable legal bases (Gibraltar GDPR).

We will only use your data for the purposes for which it was collected, unless we must use it for another compatible purpose, in which case we will notify you. You may withdraw your consent at any time at dpd@nitvio.com.

5. Retention

We will keep your data for the time necessary to fulfil the purpose for which it was collected and to determine any resulting liabilities, applying the limitation periods in force in Gibraltar. Data of subscribers by email or form: from subscription until unsubscription.

6. Minors

Staffy Gibraltar does not authorise minors under 13 years of age to provide their data through this site. Those who provide data state that they are older than that age. If a minor has provided data, please contact us to exercise the rights that apply.

7. Exercise of rights

You may address your request to the registered office of Staffy Gibraltar or to the email dpd@nitvio.com, enclosing an identity document, to exercise the rights of access, rectification, erasure (right to be forgotten), restriction, objection and portability, as well as to withdraw your consent. We will ask you for information to confirm your identity, as a security measure. We will resolve within one month, extendable by two months for complex requests, of which we would notify you.

If you consider that there is a problem with the processing of your data, you may first address your complaint to our data protection officer (dpd@nitvio.com,). If it is not resolved, you may turn to the competent supervisory authority in Gibraltar: the Gibraltar Regulatory Authority (GRA).

8. Disclosure of data

We may rely on third parties who will only process the data to provide the contracted service, with appropriate measures: providers of systems administration and information technology services; and professional advisers (lawyers, auditors, insurers). All of them will process your data in accordance with the Gibraltar GDPR and our instructions. You may request the list of these providers at in  dpd@nitvio.com.

9. Data security

We have implemented appropriate security measures to prevent your data from being lost, used or accessed in an unauthorised manner, altered or disclosed, limiting access to staff and third parties with a need to know it, subject to a duty of confidentiality. We have procedures to manage suspected data breaches and will notify you and the GRA where appropriate, in accordance with the Gibraltar GDPR.