Last updated: June 2026

Gemira respects your privacy and is committed to protecting your personal data. In this privacy statement, we explain what data we collect, why we collect it, and how we use it. This statement has been drawn up in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

Company name: Gemira
Location: Netherlands
Chamber of Commerce number: 82759510
VAT number: NL003725692B96
Email: info@gemira.nl

2. What personal data do we collect?

We may process the following personal data about you:

First and last name
Address details (street, house number, postcode, city)
Email address
Phone number
Date of birth (optional, solely for birthday offers and only with your consent)
Payment details
IP address and browser data
Order history and preferences

3. Purposes of data processing

We process your personal data for the following purposes:

Processing and handling your order
Communication about your order and delivery
Handling payments
Customer service and handling questions or complaints
Improving our website and services
Sending newsletters (only with your prior consent)
Personalization and segmentation of our marketing (only with your consent)
Compliance with legal obligations

4. Legal basis for processing

We process your personal data based on:

Performance of the agreement you have entered into with us
Legal obligations (such as tax administration)
Your consent (e.g., for newsletters and marketing)
Legitimate interest (such as fraud prevention and service improvement)

5. Retention period

We do not retain your personal data for longer than is necessary for the purposes for which it was collected. We retain order data for seven years due to tax obligations. Account data is retained as long as your account is active. Newsletter data is retained until you unsubscribe.

6. Sharing with third parties

We only provide your personal data to third parties if this is necessary for the performance of our services, for payment processing, or to comply with legal obligations. We use the following processors for this:

Shopify webshop platform, hosting and order processing
IDEAL, Mollie, Shopify Payments (including Shop Pay) processing payments. Which party processes your data depends on the payment method you choose (such as iDEAL, credit card, or PayPal)
PostNL delivery of your order
Klaviyo sending emails and newsletters
Google Analytics and Shopify Analytics analysis of website usage
Selleasy displaying additional product recommendations

We only work with reliable parties who comply with the GDPR and implement appropriate security measures. We have concluded data processing agreements with these parties. They may only use your data for the purposes for which we have provided it.

We never sell your data to third parties for marketing purposes.

7. Processing outside Europe

Some of our processors process data outside Europe. We ensure that this occurs in accordance with the GDPR, so that your data remains adequately protected there as well.

8. Automated decision-making and profiling

We do not make decisions based on automated processing that have legal consequences for you or significantly affect you otherwise. However, we do use your data, solely with your consent, for segmenting and personalizing our marketing, so that we can send you more relevant messages. You can withdraw your consent for this at any time.

9. Cookies

Our website uses cookies to improve functionality and optimize your user experience. Cookies are small text files that are stored on your device. You can disable cookies through your browser settings, but this may limit the functionality of the website.

We use the following types of cookies:

Functional cookies: necessary for the operation of the website. No consent is required for these.
Analytical cookies: for analyzing website usage. To the extent that these are not configured to be privacy-friendly, we only place them with your consent.
Marketing cookies: for personalized advertisements and marketing. We only place these with your consent.

On your first visit, we will ask for your preferences via a cookie notification. Tracking technology for analysis and marketing, including Klaviyo's tracking script. This is only activated after you have given your consent. You can adjust your preferences at any time.

10. Security

We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, unlawful processing, and other forms of misuse. Our website uses a secure SSL connection for transmitting sensitive information.

11. Your rights

You have the following rights regarding your personal data:

Right of access you can request what data we process about you
Right to rectification you can have inaccurate data corrected
Right to erasure you can request your data to be deleted
Right to restriction you can request the processing of your data to be restricted
Right to data portability you can receive your data in a structured format
Right to object you can object to the processing of your data
Right to withdraw consent you can withdraw previously given consent at any time

To exercise these rights, you can contact us. We will respond within one month. For a complex request, we may legally extend this period; we will inform you about this in good time.

12. Complaints

If you have a complaint about the processing of your personal data, we request that you contact us directly. You also have the right to file a complaint with the Dutch Data Protection Authority.

13. Changes

We reserve the right to amend this privacy statement. Changes will be published on this page. We advise you to consult this page regularly.

Contact

info@gemira.nl