This document applies to all personal information held by the PISCOPO GROUP as defined below, which are the controllers of your personal data and goes into detail on how we process your data, why do we process it, with whom this data may be shared, in what situations we may share this data and all the measures we are taking to ensure that your data is safe and secure. The terms of this policy will apply for all personal information provided to PISCOPO GROUP and will continue to apply for as long as we hold your personal data in terms of the law. This policy shall also apply to any personal information collected on our social media pages and thus if you provide us with personal data on these pages, such information shall also be stored in terms of this policy.

On our website, you may also find links to other websites which are not managed or owned by PISCOPO GROUP. PISCOPO GROUP is not responsible for any such websites and this privacy policy shall not apply in this regard. The businesses operating these websites, may or may not have their own privacy policy and in this regard, PISCOPO GROUP is no way responsible for the way such companies manage the processing of your personal data.

PISCOPO GROUP seeks to provide the best possible protection to your data given to us through our website.

Details about the data controller
The data controller as defined under the Regulation (EU) 2016/679 which is generally referred to as the General Data Protection Regulation (hereinafter referred to as “GDPR”), are the below two companies who are joint controllers of your personal data:

Piscopos’ Cash & Carry Limited, a company registered under the laws of Malta, having company registration number C 20431 and having registered address at 115, Triq Haz-Zabbar, Paola, Malta

Antonio Piscopo Company Limited, a company registered under the laws of Malta, having company registration number C 7149 and having registered address at 115, Triq Haz-Zabbar, Paola, Malta.

Herein referred to as ‘Piscopo Group’.

Any personal data collected in terms of this policy by PISCOPO GROUP may be shared between all the member companies of our group in terms of the law.

What is GDPR?
GDPR is a new EU regulation, which seeks to strengthen the protection given to personal data. In the highly digitized world we live in today, information has become essential. We strive to ensure that any personal data that we have in our possession, is properly processed in terms of the law and shall strive to ensure proper protection for your personal data.

What is Personal Information?
Personal data is personal information about an individual, like you. We collect such information about our customers for relationship management, statistical reasons and for marketing purposes and also on our employees or potential employees when they apply for a position with us. We may also collect some personal information from other individuals who are not our customers, for marketing purposes, subject to their consent.

How Information is collected from you
To enable us to sell our products we would require to collect personal data from you. This may be done in the following situations:

Requesting a Quote - When requesting a quote for our products, either online and physically at our premises, we will require certain categories of personal data, which we would need to process to be able to provide you with the required quote.

Ordering hampers - When ordering a hamper, we would need to collect and process personal data to be able to carry out the order. When the person ordering the hamper is ordering for someone else, as a gift, certain personal data of such third party may also be required.

Creating an Account on our website - When you create an account on our website, we would need to collect and store certain categories of personal data, to maintain your account.

When purchasing online - When purchase products online, we would need to process certain categories of personal data, to process any purchases and properly deliver such orders.

Submitting to our mailing list or for marketing – You may subscribe to our mailing list or to our marketing, at any time through this website or when visiting any of our outlets, so that we can send you updates and offers from our outlets.

Applying for a position with PISCOPO GROUP - You may send us a CV in relation to applying for a position with us and therefore, you will provide us with your personal data.

Social Media or submitting a query - We may also collect some personal information from social media or when you submit a query for any general or specific matter.

When you come to any of our outlets - Visual images may also be collected when you visit our shops due to CCTV for security purposes.

Legal Basis of Data Processing
We shall always process your data legally in terms of the current laws and regulations and in terms of the GDPR.

When requesting a quote, we would process your personal data in order to process the quote on the legal basis that: You have directly contacted us for such a request and that the processing of your personal data is necessary to be able to cater to your request.

When ordering hampers, we would process your personal data or the personal data of a third party on the legal basis that: We would require the personal data to process the order, due to a contractual obligation we would have with you in relation to the order of the hamper. If you are ordering the hamper for a third party, you must ensure that you have the required permission to be able to provide us with that person’s personal data.

When creating an Account on our website, we would process any personal data provided on the legal basis that: You would have directly created your account and thus have consented to the processing of your personal data.

In the event you delete your account, we may retain some personal data in terms of our retention periods, to protect our legitimate interest in terms of the law.

When purchasing online, we would process personal data required for the processing of such purpose on the legal basis that: We would require the personal data to process the order, due to a contractual obligation we would have with you in relation to the order

We may also process your personal data in terms of our retention periods, to protect our legitimate interest in terms of the law.

In relation to marketing, we process your information due to the fact that: You have consented to receive such information. We shall never send direct marketing material to you unless you have provided us with your consent.

As an applicant to work at PISCOPO GROUP, we process your information due to the fact that: You have consented to the Processing of the personal data. As soon as PISCOPO GROUP determines that we no longer require your data in terms of the law or to protect our legitimate interest, your data shall be deleted unless you consent to your data being kept for a further period.

Social Media or submitting a query: You have contacted us and thus we would need to process your personal data to be able to assist you.

We may retain and keep processing certain categories of personal data in certain cases to protect our legitimate interest

When you come to any of our outlets, we will process CCTV recordings of you: This is due to the fact that we would require to process such personal data for security reasons to protect our legitimate interest.

What information we collect

Information we collect when requesting a quote:
► Name and Surname
► Address
► ID Card Number
► Contact details

Information we collect when ordering hampers:
► Name and Surname
► Address
► Delivery Address
► Contact details

Information we collect when creating your account with us:
► Name and Surname
► Address
► Delivery address
► Information we collect when purchasing online
► Name and Surname
► Address
► Delivery address
► Payment and bank details

Information we collect when submitting to our mailing list or for marketing:
► Name and Surname
► Address
► Contact details

Such information shall be collected only for direct marketing purposes as explained below. Should you wish to subscribe to our mailing list, please click here.

Information we collect when applying for a position with PISCOPO GROUP would include:
► Name and Surname
► Your CV and any information contained therein
► Residential address
► Date of Birth
► ID Card no
► Home and mobile telephone number

Additional information may be collected if you are accepted with PISCOPO GROUP and this shall be regulated under the PISCOPO GROUP internal data protection policy.

Information we collect when you contact us via social media or submitting a query:
► Name and Surname
► Contact Details

Information we collect when you come to any of our outlets:
►Video Images

Special Categories of Data

The law makes a distinction between personal data and special categories of data. The latter includes personal data of a more sensitive nature, which usually cannot be processed unless there is a special reason which allows such processing. Such information includes personal data relating to an individual’s;
Racial or ethnic origin;
Political opinions;
Religious or philosophical beliefs;
Trade union membership;
Genetic data;
Biometric data for the purpose of uniquely identifying a natural person;
Data concerning health;

Data concerning a natural person's sex life or sexual orientation

We will never store or process any data which is deemed to consist of special categories of data without obtaining your prior written consent unless authorised or required by law.

How will your personal information be Processed?

Your data is processed through our systems usually for PISCOPO GROUP to be able to provide goods and services to our customers. Any personal data processed shall be processed in line with the purpose for which it is gathered and in line with the law.

In some cases, your data may also be processed by a third party, in terms of the current data protection laws, who would be assisting PISCOPO GROUP in selling our products or in our marketing function. The law further obliges us to share your data with the competent authorities in certain situations as detailed under the relevant laws and regulations.

Your Rights

Your personal data appertains to you and thus you have the right to decide what happens to your data. Below we have listed the rights that the law gives you in relation to any of the personal data provided to us.

You have the right to access your data. You have the right to ask for a copy of your personal data.

You have the right of rectification of incorrect data. If any data we have is incorrect, you have a right to ask for the correction of such data.

You have the right to be forgotten and that your data is erased after the passage of time. You may request PISCOPO GROUP so that any data that we have on you is deleted. As stated above, due to legal requirements, your data will be held by PISCOPO GROUP for the periods stated in the data retention section and then deleted.

You have the right to the restriction of the procession. This can be done in the following cases:

Where you are contesting the accuracy of the data, while such a claim is being checked;

If we process your data unlawfully

iii. If we no longer need your data but are keeping the data because we need it for a legal

claim;

Kindly note however the if you exercise this right, it may hinder the ability of PISCOPO GROUP to provide you with our products.

You have the right to data portability. Your data may be requested in a machine-readable format and you may also request that your data is transferred directly to another person.

You may object to the processing of your data. You may at any time inform us that you are objecting to the use of your data for direct marketing and after which we shall stop using your data for such purposes.

If you have provided consent for the processing of your data you have the right to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.

In making your request in relation to the above, please note that:

We will analyse your request and provide you with a reply within one month, except in extreme situations as allowed under law. In such a case we will provide information as to why your request was not acceded to within the one-month period.

We have the right to refuse your request if your request is not justified. In this case, we shall inform you as to the reasons why your request was refused.

We have the right to charge a fee or refuse your request in extreme situations where your requests are manifestly repetitive or excessive.

When you are making a request, we may request documentation to identify the person making the request.

You have the right to lodge a complaint to the data protection authority of your habitual residence if you believe that we have not complied with the requirements of the law. You may also file an action against us in a court of competent jurisdiction if you feel your rights have been infringed.

Legal Protection

In terms of the local laws and regulations and the GDPR, we strive to provide the best possible protection for your personal data.

This is to ensure that:
► Your data is processed according to law;
► Your data is not processed in violation of your rights;
► Your data is obtained and stored for a specific lawful purpose;
► You are properly informed about your rights and about your data;
► The data processed is required and not excessive;
► Your information is accurate and updated;
► Your information is stored safely and securely;

Our IT systems are properly protected from attack in order to safeguard your data;

Your data is kept accordingly to our established time frames and not for a longer period than required;

Your data is not transferred to jurisdictions which do not adhere to equivalent standards without the appropriate safeguards as stated under the law.

Marketing & Customer Relations

From time to time we may send marketing material to individuals subscribed to our mailing list and marketing services. We will not send any such material unless you have consented to receive this information and you can unsubscribe at any time, after which, we will delete any relevant personal data in our systems related to the sending of marketing material to you. You can click here to subscribe or here to unsubscribe.

Providing your information to Third Parties

To be able to provide you with our products we utilise the services of third parties to assist us. In some cases, your data is transferred to such third parties, or such third parties have access to your data. These third parties can be classified in the following categories:

IT Security Service providers who help PISCOPO GROUP in ensuring that your data remains secure
IT Backups & Mail Servers Service providers who assist PISCOPO GROUP in relation to backups for business continuity purposes so that your data is not lost
Administration Service providers who provide software and assistance to assist us with general administration
Marketing Service providers who assist us in relation to marketing and website
Website Service providers who assist PISCOPO GROUP to host and maintain our website.
Such information shall only be shared or accessed by such third parties, if:

We have obtained your consent before;

Such a transfer of data is necessary for our operations.

Such a transfer of personal data is required under law or other a lawful request by a competent judicial authority.

In this regard, we shall always provide information on such transfers, unless prohibited by law.

Surveillance at our Outlets

Our outlets contain cameras as part of our group policy. Such cameras are used for security purposes. Our cameras do not record sound.

Transfers to third countries

We shall strive to send your data only to other EU countries or other countries which ensure proper protection for your data. When transferring your data to countries which are not deemed as such, proper measures in terms of the law shall be applied to ensure the protection of your personal data. In cases where such measures cannot be achieved, personal data shall only be sent to these countries if necessary to perform our services and also subject to your prior consent.

Retention

We shall retain any personal information provided to us in terms of the law and shall delete any personal data when such a retention period lapses. In this regard, PISCOPO GROUP stores your information as follows:

1. Any personal data on individuals collected for the purpose of ordering a quote shall be kept for at least 12 months and then deleted if the quote is not confirmed.


2. Any personal data collected in the process of the ordering of hampers shall be kept for at least 5 years. This is due to the fact that we may need to process your personal data to protect our legitimate interest in the event of legal action.


3. When creating an account on our website, if you never utilise your account to make any purchase, we would delete your personal data immediately, when you delete your account.


4. Should you have an account on our website where you have purchased goods online, we would retain your personal data in relation to such a transaction for at least 5 years after the transaction has taken place. Should you delete your account, we may still retain your personal data up to 5 years from the date of your final purchase.


5. Any information in relation to our marketing services, we shall retain such personal data until you unsubscribe from such marketing services.