1. INTRODUCTION

GlobalGift respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, why we collect it, how we use it, and your rights regarding it.

2. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal bases:

• Explicit consent to create an account and receive communications
• Contract execution when you purchase vouchers
• Legitimate interest to improve our services
• Legal obligation for tax and security compliance

3. DATA WE COLLECT

3.1 User Data (Buyers):

• First and last name
• Email address
• Payment information (processed by secure third parties)
• Purchase history and vouchers
• IP address and browsing data

3.2 Business Data:

• Business name and contact person
• Contact information
• Verification documentation
• Banking data for payments
• Sales history

3.3 Transaction Data:

• Purchased voucher details
• Payment amounts and methods
• Redemption dates
• Related communications

4. PROCESSING PURPOSES

We use your data to:

• Process payments and issue vouchers
• Communicate with businesses for redemptions
• Send confirmations and notifications
• Improve our services
• Prevent fraud and ensure security
• Comply with legal obligations

5. WHO WE SHARE YOUR DATA WITH

5.1 Essential service providers:

• Stripe, Mercado Pago (payment processing)
• Email providers (Resend)
• Storage services (AWS S3)

5.2 Affiliated businesses:

• We share minimum necessary information for voucher redemption
• Buyer's name and voucher details
• Contact information for coordination

5.3 Authorities:

• When required by law
• To protect intellectual property rights
• To prevent illegal activities

6. INTERNATIONAL DATA TRANSFERS

We conduct international transfers with:

• Adequate safeguards according to GDPR
• Standard contractual clauses
• Enhanced security measures

7. USER RIGHTS

7.1 Right of access:

You can request what data we have about you.

7.2 Right to rectification:

You can correct incorrect or incomplete data.

7.3 Right to erasure:

You can request deletion of your data when:

• They are no longer necessary for the purposes collected
• You withdraw consent
• You object to processing
• They were processed illegally

7.4 Right to restriction:

You can request restriction of processing when:

• You contest the accuracy of the data
• Processing is illegal but you don't want deletion
• We no longer need the data but you need it for claims

7.5 Right to portability:

You can receive your data in a structured format and transfer it to another provider.

7.6 Right to object:

You can object to processing based on legitimate interest.

8. DATA SECURITY

We implement technical and organizational measures:

• SSL/TLS encryption for all transmissions
• Database encryption
• Restrictive access control
• Periodic security audits
• Staff training in data protection

9. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies to:

• Improve user experience
• Analyze site traffic
• Remember preferences
• Ensure security

See our Cookie Policy for more details.

10. DATA RETENTION

We retain your data for:

• Time necessary for the purposes collected
• Periods required by law
• Legal prescription periods

11. MINORS

Our services are intended for people over 18 years old. We do not intentionally collect data from minors.

12. CHANGES TO THIS POLICY

We will update this policy when necessary. We will notify you of significant changes.

13. CONTACT FOR DATA PROTECTION

To exercise your rights:

• Email: [email protected]
• Address: [your address if you have one]
• Data Protection Officer: [if you have one]

14. COMPLAINTS

If you believe we have violated your rights, you can contact:

• Italian Data Protection Authority
• Data protection authority of your country