INFORMATION & PRIVACY

Privacy notice.

How GACEO handles personal information when you contact us or use our IT services.

info-request@gaceo.co.za

Effective date:

01

Who we are

GACEO cc provides IT advice, remote support, and monitoring and management of customer networks, workstations and servers. Our company registration number is 2000/034901/23.

Business address
Lynnwood, Pretoria
Information Officer
Wally de Bruyn
Information and privacy requests
info-request@gaceo.co.za
Telephone
082 889 2818

This notice covers website visitors, enquiries, customers and their representatives, and personal information involved in our IT services. Additional information may be needed for a particular service or relationship.

We act as the responsible party when we decide why and how information is used for our own enquiries, business administration and service records. When we process information on a customer’s instructions to provide IT support, we may act as that customer’s operator. The customer remains responsible for its own purposes and notices. Our role depends on the processing concerned.

02

Information we handle and where it comes from

The information needed depends on your enquiry, the agreed services and the systems being supported. It may include:

  • Contact and correspondence: names, business contact details, your role or organisation, and information you include in an email, message, support request or conversation.
  • Customer and supplier administration: business, account, quotation, contract, licensing, invoicing and payment information relevant to our work.
  • Technical information: device and user identifiers, network addresses, hardware and software details, alerts, diagnostic information and support activity relevant to monitoring or resolving an issue.
  • Remote support recordings: on-screen information and actions captured during a recorded TeamViewer support session. A recording may contain personal information visible on the supported device.

Information may come directly from you, from an authorised representative of your organisation or our customer, or from systems we are authorised to monitor and support. Website connections also involve technical information, as explained in section 9.

Please share information relevant to the work. Avoid sending passwords, unnecessary identity documents or unrelated sensitive information in an initial enquiry.

03

Why we use information

Relevant purposes include responding to enquiries, assessing support needs, preparing quotations, administering the business relationship, providing agreed IT services, diagnosing faults, monitoring supported systems, and maintaining records of the work.

TeamViewer recordings are used for troubleshooting history, internal training and evidence of work performed.

The applicable lawful ground depends on the circumstances. It may be a contract or steps requested before a contract, a legal obligation, a legitimate interest that justifies the processing, or consent where consent is required or relied upon. A lawful ground for one activity does not automatically cover every later use of the information.

04

Required or optional information

You can read our public website without creating an account or completing a contact form. Choosing to make an enquiry is voluntary.

Some contact, account and technical information may be necessary to respond, verify authority to request support, or provide a requested service. If essential information is not supplied, we may be unable to answer the enquiry or provide that service. Where a law requires particular information, the relevant requirement should be identified when that information is requested.

Optional information should be identified as optional. Visiting this website, emailing us or seeing a recording indicator is not treated by this notice as consent to all processing.

05

Remote support recordings

TeamViewer remote support sessions are recorded. Telephone calls are not recorded. TeamViewer displays a flashing red recording indicator on the screen while a session is being recorded.

Purpose
Troubleshooting history, internal training and evidence of work performed.
Access
Only GACEO technical support staff can access the recordings.
Current retention
Recordings are currently retained indefinitely, rather than on a fixed deletion schedule.

Before a support session, close unrelated applications or documents where possible. Tell the technician if sensitive or unrelated information is visible, or contact us before connecting if you need to discuss the recording or possible support arrangements.

For questions about a recording, or to request access, correction, deletion or to raise an objection, email info-request@gaceo.co.za. Requests are subject to applicable rights, lawful retention requirements and the information of other people.

06

Sharing and service providers

The people and organisations involved depend on the service. Relevant categories may include GACEO personnel engaged in the work, your organisation’s authorised representatives, software and hosting providers, and professional advisers or authorities where a lawful reason applies.

We use the following services:

  • Microsoft Exchange for email.
  • N-able for remote monitoring and management.
  • TeamViewer for remote support, including recorded support sessions.
  • A website hosting provider for serving this website.

The information handled by each service depends on its configuration and the work requested. This list does not mean each provider receives all customer information. Where we act as an operator, sharing must also remain within the customer’s instructions, our agreement and applicable law.

07

Processing outside South Africa

Email, remote support and monitoring services can involve infrastructure, provider support or other recipients outside South Africa, depending on their configuration. We do not represent that all information stays in South Africa.

Where an overseas transfer takes place, section 72 of POPIA requires an applicable permitted basis, such as appropriate protection under law, binding rules or an agreement, or another ground allowed by that section. Contact info-request@gaceo.co.za to ask about the processing locations and protections applicable to a particular service.

08

Retention and safeguards

POPIA limits how long personal information may be retained, subject to permitted exceptions. Relevant considerations include the purpose of a record, applicable legal or contractual requirements, and a justified need to preserve evidence or resolve a dispute. Different record categories may require different rules. The current practice for TeamViewer recordings is disclosed in section 5.

POPIA requires appropriate, reasonable technical and organisational safeguards. Access to TeamViewer recordings is limited to GACEO technical support staff, as stated above. No system or service can remove every security risk.

If a security compromise occurs, applicable law determines the notification duties to the Information Regulator, affected people and, where we act as an operator, the relevant customer.

09

This website and external services

The current website has no contact form, account registration, embedded chat or embedded map. Fonts use your device’s available fonts, and images are served from this website.

Optional website analytics: if you select “Accept analytics”, we load Google Analytics to measure page visits and clicks on telephone, WhatsApp, location and email links. Google receives usage information such as the page path, referring website, browser/device information and cookie identifiers. We do not send contact-link text, phone numbers, email addresses or page query strings as analytics event data. These click counts do not confirm that a call, message or enquiry was completed.

Analytics is off until you accept. You can decline without affecting access to the website, or change your choice using Cookie settings in the footer. We remember your choice in this browser for up to 180 days; if browser storage is unavailable, we cannot remember it between pages. Analytics cookies are configured to expire after 180 days. Withdrawing consent stops future collection and removes this site's accessible Google Analytics cookies; it does not delete information already collected.

Our Google Analytics property is configured to retain user-level and event-level data for two months, without resetting retention on new activity. These settings do not limit most standard aggregated reports. Google processes analytics information and may process it outside South Africa. Advertising storage, advertising personalisation and Google Signals are disabled in our website tag. See Google’s privacy policy (opens in a new tab) for information about Google’s processing. Contact us about information already collected.

A web connection necessarily involves technical details such as a network address and the requested page. The hosting provider may keep technical or security logs. The retention period for provider-managed logs and any host-managed cookies has not been confirmed. For queries about these settings, contact info-request@gaceo.co.za.

Links to WhatsApp and Google Maps open services operated by other organisations. If you choose to follow a link, that service’s privacy practices apply to your interaction there. Messages sent to GACEO may also become part of the enquiry or support record.

Information you send to our request email address is used to handle your request and related correspondence.

10

Your rights and requests

Subject to POPIA and applicable limitations, you may:

  • Ask whether we hold personal information about you and request access to it.
  • Request correction or deletion of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained, or deletion of a record we are no longer authorised to retain.
  • Object to processing where the law allows, including relevant direct marketing.
  • Withdraw consent where processing relies on consent. This does not automatically affect earlier lawful processing or another applicable lawful ground.
  • Lodge a complaint with the Information Regulator.

Email info-request@gaceo.co.za with enough detail to identify the request. We may need proportionate proof of identity or authority before releasing information. We will explain any applicable procedure, prescribed fee or lawful restriction.

If the information belongs to a customer for whom GACEO acts as an operator, that customer’s Information Officer may need to handle the decision. We can help identify the appropriate contact.

11

Questions and complaints

You can raise a concern with Wally de Bruyn through info-request@gaceo.co.za or 082 889 2818.

You may also complain directly to the Information Regulator, South Africa. You do not have to contact GACEO first.

12

Updates and further information

We may update this notice when our processing or contact details change. The effective or revision date identifies the current version. Where a change in processing requires further notification, an updated page alone may not be sufficient.

For information requests, further privacy details or a request for the POPIA/PAIA manual, contact info-request@gaceo.co.za.

Information and privacy requests

info-request@gaceo.co.za

Read the Protection of Personal Information Act 4 of 2013 (opens in a new tab) and the Information Regulator’s complaint guidance (opens in a new tab) for further information.