Privacy Policy

1. Scope of Application

This statement fulfills the requirements of the Kosovar Data Protection Act No. 06/L-082, and – as far as applicable – the EU General Data Protection Regulation (GDPR) and Swiss Data Protection Act (DSG 2023).

2. Responsible Party and Contact

GeGa Corporation L.L.C.

Rr. Tirana R. Sadiku, C4/1, C13, 10000 Prishtinë, Republic of Kosovo

E-Mail: dataprotection@gegacorporation.com

Phone: +383 49 651 653

Web: www.gegacorporation.com

GeGa Corporation L.L.C. has appointed a data protection officer under Kosovar law. For all data protection concerns, please contact us at dataprotection@gegacorporation.com.

3. Collected Data

Depending on the nature of your interaction with us and the services you request, we may process the following categories of personal data:

• • Contact and Identification Data: Name, company name, address, email, phone number, date of birth, nationality
• • Service Request and Project Data: Service inquiries, project requirements, company information, contract numbers
• • Business and Financial Data: Budget information, payment details, bank account details, tax identification
• • Technical and Usage Data: IP address, browser type, operating system, access times, pages visited, device information
• • Communication Data: Email correspondence, phone records, meeting notes, support tickets
• • Employment and Recruitment Data: CV, employment history, qualifications, references

4. Purposes of Data Processing

• • Service delivery and contract fulfillment
• • Legal and regulatory compliance
• • Business operations and IT security
• • Communication and marketing (with consent)
• • Recruitment and HR management

5. Legal Bases for Processing

Contract Fulfillment: Processing necessary for performing service contracts

Legal Obligations: Compliance with Kosovar law, tax regulations

Legitimate Interests: IT security, fraud prevention, business analytics

Consent: For marketing communications and optional services

6. Data Recipients and Transfers

Data transfers occur only to the extent necessary for service delivery and legal compliance:

• • Internal: Authorized employees and management
• • Service Providers: Cloud hosting, CRM tools, payment processors, IT support
• • Business Partners: Project collaborators, specialized service providers
• • Authorities: Tax authorities, courts, regulatory bodies as legally required

7. International Data Transfers

Your data may be processed in Kosovo, within the EEA, or in third countries. We use EU Standard Contractual Clauses and implement appropriate safeguards. For transfers from Kosovo, we obtain necessary AIP authorizations when required.

10. Data Security

We implement comprehensive security measures:

Technical: SSL/TLS encryption, access controls, firewalls, regular backups, pseudonymization

Organizational: Data protection policies, employee training, confidentiality agreements, incident response plan

12. Your Rights

Under applicable data protection laws, you have the following rights:

• • Right to Information: Obtain confirmation and details about data processing
• • Right to Rectification: Request correction of inaccurate data
• • Right to Erasure: Request deletion when no longer necessary
• • Right to Restriction: Request limitation of processing
• • Right to Data Portability: Receive data in machine-readable format
• • Right to Object: Object to processing for direct marketing
• • Right to Withdraw Consent: Withdraw consent at any time
• • Right to Lodge a Complaint: File complaint with supervisory authority

To exercise these rights, contact us at dataprotection@gegacorporation.com. We respond within 30 days.