loader image

Gessamí

PRIVACY POLICY
INTRODUCTION

1. Gessamí attaches great importance to careful and secure handling of privacy-sensitive information. That is why Gessamí has drawn up this privacy statement. With this privacy statement Gessamí provides insight into how we handle personal data in appropriate situations. Personal data means all data that can be directly or indirectly traced to a natural person. This privacy statement applies to processing of all online and offline types of personal data that Gessamí receives from:

  • You;
  • Visitors to the website (www.gessami.nl) or any domain name affiliated with it;
  • Customers, (potential) suppliers, clients, contractors and other relations of Gessamí;
  • Recipients of information from Gessamí;
  • All other persons in contact with Gessamí.

2. Wherever in this privacy statement a person is referred to as "she" or "her", "he" or "him" is also meant.

WHAT PERSONAL DATA CAN WE PROCESS?

3. Gessamí may process the personal data listed below, always basing the processing on a legal basis from the General Data Protection Regulation (“GDPR”):

Personal data that you have provided yourself:

  • Contact information (name, e-mail address, address, place of residence, phone number(s), IP address);
  • Payment information (bank account number, credit card number);

Personal data obtained through means of communication, such as the website, newsletters, and emails:

  • Contact information (as described above);
  • Information about which device you used to visit our website, such as an IP address.
PRINCIPLES RELATING TO PROCESSING

4. Gessamí determines the purpose and means for processing personal data. This makes Gessamí a processing controller in the sense of the GDPR. Gessamí shall ensure that it always bases the processing of personal data on one of the bases described in Article 6 of the GDPR.

Gessamí processes your personal data on the following bases:

  • You have given your consent to Gessamí to process your personal data for one or more specific purposes;
  • If the processing is necessary for the performance of an agreement to which you are a party, or to take measures at your request prior to the conclusion of an agreement;
  • The processing is necessary to comply with a legal obligation incumbent on Gessamí;
  • If the processing is necessary to protect your vital interests or those of another natural person.
USE OF PERSONAL DATA

5. When using your personal data, Gessamí observes the GDPR and the resulting laws and regulations. The use of personal data is referred to in the GDPR as ‘processing’. Gessamí collects and processes personal data from customers for the purposes set out below. These purposes are:

  • To process your orders and inform you of their progress; At the time you place an order with Gessamí, you will be asked for a number of details: your name, phone number, email address, delivery address, billing address, method of payment, account number/credit card number, credit card expiration date and credit card security code. These details are needed to process an order and to properly process any returns. Credit card details are never shared with third parties.
  • To perform analyses for reports.
  • To optimize Gessamí's services;
  • To inform you about products, benefits and events.
  • To display personalized advertising.
  • If you participate in the Loyalty Program, link your data to this program in order to provide you with the best possible personal privileges associated with the Loyalty Program;
  • To provide you or third parties with information necessary to execute an order, to handle a complaint, to process a return shipment or if you have given your permission to do so.
  • To provide information about you to third parties if we are required to do so by law or regulation (e.g., to law enforcement agencies);
  • Information required to process credit card payments and transactions is sent to our bank. Gessamí makes arrangements with these companies regarding the processing of your personal data to ensure your privacy.
  • To secure, adapt and improve the website.
  • To verify your identity and to prevent fraud
SHARING WITH THIRD PARTIES

6. Gessamí never sells your personal data to third parties.

RIGHTS OF DATA SUBJECTS

7. Data subjects within the meaning of the GDPR are the natural persons to whom personal data relates. These may include consumers, relations, employees, clients, contractors and visitors to Gessamí's web pages. Data subjects are informed by Gessamí in an accessible and understandable way by Gessamí about the data processing of personal data. If you would like to know whether Gessamí processes personal data about you or would like to exercise any of the rights listed below, please send a written request, possibly accompanied by your views, to: info@gessami.nl. Gessamí handles a (inspection) request within 4 weeks. Gessamí is required to verify your identity before your request can be fulfilled.

8. In the case of processing of personal data, data subjects have the following rights:

  • Viewing and/or modifying personal data

You may request Gessamí at any time to indicate which (categories of) personal data Gessamí processes about you, for what purposes, from what source the personal data come and what retention periods are used. In addition, you may contact us at any time to submit a request to supplement, correct or delete your personal data. The request will be granted insofar as it does not conflict with laws and regulations.

  • Right to be forgotten

If you no longer wish to use the services of Gessamí, you may request the deletion of all your personal data. Gessamí will comply with this request to the extent not contrary to laws and regulations.

  • Right to file a complaint

If you disagree with Gessamí's use of your personal data, you may indicate this by sending an e-mail to Info@gessami.com, file a complaint with the Personal Data Authority or initiate legal proceedings.

PROCESSORS AND (SUB-)PROCESSORS

9. Gessamí is the so-called controller within the meaning of the GDPR who controls the processing of personal data and determines the purposes and means of processing.

RETENTION PERIOD PERSONAL DATA

10. Gessamí never keeps personal data longer than necessary for the purpose of processing. Gessamí keeps your personal data at least for the period you have an agreement with Gessamí.

CHANGES AND APPLICABLE LAW

11. Gessamí reserves the right to modify or change this privacy statement. None of the provisions of this privacy statement are intended to create any obligation or agreement between Gessamí and a data subject. Dutch law applies to the provisions of this privacy statement and all disputes arising from this.

 

 

 
Cart0
Your cart is empty
Continue shopping