Gatti Services

Privacy Policy

We at Gatti Services are committed to protecting the privacy of visitors to our website, users of our services and our customers. Our Privacy Policy explains how we collect, use, store, share and protect your personal data in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable privacy laws. In this policy, "we", "us" and "our" refer to Gatti Services.

Gatti Services is the data controller responsible for your personal data collected via our website and services. Should you wish you to contact us directly regarding any information stated in the below Privacy Policy, our full details can be found in Section 15 below.

1. Types of Personal Data We Collect

At Gatti Services, we are committed to protecting your privacy while providing our services. To deliver our services and improve user experience, we may collect and process the following types of personal data:

Identity and Contact Data

This includes your full name, email address, phone number, billing address and company name. This information is used to identify you and facilitate communication.

Account Information

We may collect login credentials, securely encrypted passwords, user preferences and profile information. This data is essential for creating and managing your account with us.

Technical Data

This includes information such as your IP address, browser type and version, time zone settings, operating system and platform, device type and device identifiers. This data helps us enhance the performance and security of our services.

Usage Data

We may collect information about how you interact with our website, app and services. This includes clickstream data, browsing history and engagement metrics, which allows us to improve your experience and personalize our services.

Enquiry Data

If you contact us through forms, support tickets, or other communication channels, we collect information about your enquiries to ensure we respond effectively and provide relevant assistance.

Service Data

We may process data necessary for the provision of services to customers, including project details, service preferences and communication logs. This helps us deliver services tailored to your needs.

Marketing and Communications Data

We collect information about your preferences for receiving marketing communications from us, including whether you wish to receive marketing emails, newsletters, or other updates.

2. Legal Basis for Processing

Gatti Services only processes your personal data where we have a valid legal basis to do so under the General Data Protection Regulation (GDPR). The lawful basis we rely on depends on the context and purpose of the processing:

We process your personal data based on the following lawful bases:

  • Consent: Where you have given us clear and informed consent to process your personal data for a specific purpose (e.g., receiving marketing emails).
  • Contractual necessity: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
  • Legal obligation: Where processing is required to comply with legal or regulatory duties (e.g., tax, financial reporting, responding to law enforcement authorities).
  • Legitimate interests: When processing is necessary for our legitimate business purposes—such as enhancing security, providing customer support, or analyzing website usage—provided that these interests do not override your fundamental rights and freedoms.

We assess the necessity and proportionality of each processing activity to ensure that your personal data is handled responsibly and lawfully.

3. How We Use Your Data

Gatti Services may use your personal data to provide and improve our services, communicate with you and meet our legal and operational obligations. Specifically, we may process your data to:

  • Manage and authenticate your account.
  • Process transactions and send billing information.
  • Communicate with you, including responding to enquiries and customer support requests.
  • Send administrative information, such as service updates and security alerts.
  • Send marketing communications, where you have provided consent to do so.
  • Ensure the security and integrity of our website, services and IT systems.
  • Comply with legal obligations and enforce our terms, rights and policies.

We process personal data only where we have a lawful basis under the General Data Protection Regulation (GDPR) or other applicable laws.

4. Data Sharing and Third Parties

Gatti Services is committed to ensuring the confidentiality and security of your personal data. We may share your personal data in the following circumstances:

4.1 With Service Providers and Partners

We may share your personal data with trusted third-party service providers who assist us in delivering our services. These partners may include payment processors, hosting providers, customer support platforms, or analytics providers. We ensure that these third parties comply with data protection laws and only process your personal data on our behalf.

4.2 For Legal Compliance

We may disclose your personal data where required to do so by law, in response to lawful requests by public authorities, or to meet legal obligations, such as compliance with tax laws, financial reporting, or in connection with law enforcement requests.

4.3 In Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction. We will notify you of any change in ownership or control of your personal data.

4.4 With Your Consent

We may share your personal data with third parties if you have given us explicit consent to do so. This may include marketing partners, business affiliates, or other parties for whom you have specifically authorized us to share your data.

4.5 For Security Reasons

We may also disclose your personal data when we believe such action is necessary to protect the rights, property, or safety of Gatti Services, our customers, or others, in accordance with applicable laws.

We ensure that any data sharing is carried out in full compliance with the GDPR and only when necessary for the fulfilment of the purposes outlined in this Privacy Policy.

5. International Transfers of Personal Data

At Gatti Services, we are committed to protecting your personal data when it is transferred outside the UK. Any such transfers are made in strict compliance with the GDPR and only to recipients that ensure an adequate level of data protection.

5.1 Transfers Outside the UK

There may be circumstances in which it becomes necessary to transfer your personal data to countries outside the UK—for example, when using international service providers or partners.

5.2 Adequacy Decisions and Safeguards

Gatti Services will only transfer personal data to countries that the UK has deemed to offer an adequate level of data protection status under UK law.

  • Where adequacy is not recognised, we use UK Standard Contractual Clauses (SCCs) or other lawful safeguards.
  • You may request more details about international transfers in Section 15.

5.3 Access to Safeguards

You have the right to obtain more information about these safeguards or to request a copy of the applicable SCCs or transfer mechanisms by contacting us. See Section 15: Our Details for how to get in touch.

6. Retaining and Deleting Personal Data

At Gatti Services, we retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, in accordance with the General Data Protection Regulation (GDPR) and other applicable UK data protection laws.

6.1 Retention Periods Based on Purpose

We retain your personal data only as long as necessary to fulfil the purposes outlined in this Privacy Policy. Once the data is no longer required for these purposes, we take steps to securely delete or anonymize it.

6.2 Retention Periods Vary by Data Type

The duration for which we retain personal data depends on the type of information and the purpose for which it is processed. For example, data collected for contractual purposes may be retained for the duration of the contract and any subsequent legal retention period, while data collected for marketing may be held until you withdraw consent or object to its use.

6.3 Secure Deletion or Anonymization

At the end of the relevant retention period, your personal data will either be securely deleted from our systems or irreversibly anonymized so that it can no longer be associated with you.

6.4 Right to Request Deletion

You have the right to request the deletion of your personal data at any time. We will comply with such requests unless we are legally obliged to retain the data for compliance, tax, audit, or other regulatory purposes.

6.5 Further Information

For more details about how long we retain different categories of personal data or to request additional information, please contact our Data Protection Officer (DPO). Contact details can be found in [Section 15: Our Details].

7. Your Rights Regarding Your Personal Data

As a user of our website and a data subject under the General Data Protection Regulation (GDPR), you are entitled to a number of rights that allow you to understand, access and control how your personal data is used. We take these rights seriously and are committed to upholding them in full.

7.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to access a copy of that data. This includes information such as the purpose of processing, the types of data we hold, who we share it with, how long we keep it and where we obtained it.

7.2 Right to Rectification

If you believe that any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without unnecessary delay.

7.3 Right to Erasure ('Right to be Forgotten')

You may ask us to delete your personal data where:

  • it is no longer needed for the purposes for which it was collected;
  • you withdraw your consent (where consent was required);
  • you object to the processing and there are no overriding legitimate grounds for us to continue;
  • the data was processed unlawfully; or
  • deletion is required by law.

Please note that certain legal or regulatory obligations may prevent immediate erasure in some cases.

7.4 Right to Restriction of Processing

You can request that we restrict how we use your personal data under certain circumstances, such as:

  • while we verify the accuracy of your data;
  • if the processing is unlawful and you oppose deletion;
  • when you need us to retain the data for legal claims; or
  • if you have objected to processing and we are considering whether our legitimate grounds override yours.

During a restriction, we will store your data securely but not use it for any other purpose without your consent, unless required by law.

7.5 Right to Object to Processing

You have the right to object to our processing of your personal data when it is based on our legitimate interests, including profiling related to those interests. You also have an absolute right to object at any time to your data being used for direct marketing purposes. If you do so, we will stop using your data for that purpose.

7.6 Right to Data Portability

Where we process your personal data based on your consent or a contract and the processing is automated, you can request to receive your data in a structured, commonly used and machine-readable format. You may also ask us to transfer it directly to another organization, where this is technically possible.

7.7 Right to Withdraw Consent

Where we rely on your consent to process your personal data (for example, for certain types of cookies or marketing communication), you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing that took place before your withdrawal.

7.8 Right to Lodge a Complaint

  • If you are concerned about how we are handling your personal data, you have the right to lodge a complaint with the supervisory authority, the Information Commissioner's Office (ICO).
  • Contact Details for the ICO:
    Information Commissioner's Office
    Wycliffe House, Water Lane
    Wilmslow, Cheshire SK9 5AF
    Website: www.ico.org.uk

7.9 How to Contact Us to Exercise Your Rights

To exercise any of the rights listed above, please contact us using the details provided in [Section 15: Our Details]. For your security, we may need to verify your identity before processing your request. We will respond as quickly as possible and in most cases within one calendar month.

8. About Cookies

Cookies are small text files that are stored on your device when you visit a website. They serve various purposes, such as enabling essential site functions, remembering your preferences and settings, improving performance and helping us understand how visitors use our website through analytics. Cookies can also be used to enhance your user experience.

Some cookies are necessary for the website to function properly, while others are used for marketing or personalization purposes through content and ads - only with your consent. You can choose to accept or manage your cookie preferences at any time.

For further information on how to manage your cookie preferences, please refer to Section 10 of this Privacy Policy.

9. Cookies We Use

At Gatti Services, we use the following types of cookies:

  • Strictly Necessary Cookies which are required for basic website functionality (e.g., session management).
  • Performance Cookies which help us understand how visitors interact with our website (e.g., Google Analytics).
  • Functional Cookies which enable enhanced functionality and personalization.
  • Targeting/Advertising Cookies which track browsing habits to provide tailored advertising (only with your consent).

10. Managing Cookies

At Gatti Services, you have full control over your cookie preferences. You can manage or decline cookies at any time through the following methods:

  • Adjust your browser settings to refuse some or all cookies
  • Use our cookie consent banner when you first visit our website
  • Click the following button to decline all non-essential cookies:

For more detailed information about managing cookies, please visit www.aboutcookies.org.

11. Use of Google Analytics

We use Google Analytics to collect anonymised statistical data about how visitors use our website, such as page views, time spent and referral sources to help us understand website performance and improve user experience.

The data collected by Google Analytics may include your IP address, but we have configured IP anonymisation so that no personally identifiable information is recorded.

The legal basis for this processing is your consent, which we request via our cookie banner. Google may transfer this data to servers outside the UK (e.g., in the US); such transfers are subject to Standard Contractual Clauses (SCCs) to safeguard your data.

You can withdraw your consent or disable analytics cookies at any time via our cookie preferences tool or your browser settings. For more information, you can visit: https://support.google.com/analytics/answer/6004245.

12. Use of Google reCAPTCHA

We use Google reCAPTCHA v2 on our contact form to protect against spam and abuse by automated software (bots). reCAPTCHA analyzes interactions on the site (e.g., mouse movements, time spent) to determine whether a visitor is human.

This involves the collection of technical data such as IP address, browser details, and potentially other device information. The legal basis for this processing is our legitimate interest in maintaining website security and preventing misuse.

Data collected by reCAPTCHA is subject to Google's:

13. Website Security

Gatti Services understands the importance of both website and data security and we are committed to ensuring your data is secure. We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or alteration.

  • Our website uses SSL (Secure Socket Layer) encryption
  • Access to personal data is restricted to authorized personnel only, subject to confidentiality obligations
  • We conduct regular testing and review of our security measures

14. Amendments to This Policy

On occasion, we may be required to update this Privacy Policy. Any material changes will be communicated by:

  • Updating this page
  • Where appropriate, notifying you by email or through our website

Gatti Services encourages you to review this page periodically to stay informed about how we are protecting your information.

15. Our Details

This website is owned and operated by Gatti Services, a UK based business under Ultrascale Digital Infrastructure Limited (company registration number 14567566).

Our Registered Office Address is:

19 Shenley Pavilions
Chalkdell Drive
Milton Keynes
United Kingdom, MK5 6LB

You may contact us:

16. Data Protection Officer (DPO)

Gatti Services has an appointed Data Protection Officer who may contact directly in the event you have questions regarding our Privacy Policy, the storage, retention and or transfer or your personal data. Our data controller is Marion McCallum who can be contacted at: privacy@gatti-services.com.

We use cookies that are essential for our site to function. We do not collect personal information. By using our site, you agree to our Privacy Policy.