1. General

This Privacy Policy describes how GEZZINA processes personal data in connection with the use of its website and related services.

GEZZINA processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Dutch data protection legislation.

This Privacy Policy applies when you:

• visit our website;
  
• contact us via the website or by e-mail;
  
• place orders via the website, as a guest or through an account;
  
• subscribe to newsletters or receive other communications.
  

2. Identity of the Data Controller

GEZZINA
Hoofdweg 415/H
1056 CT Amsterdam
The Netherlands

E-mail: info@gezzina.com
Chamber of Commerce (KvK) registration number: 91940672
VAT number: NL004926410B16

GEZZINA is the data controller within the meaning of Article 4(7) GDPR.

3. Personal Data We Process

Depending on how you use our website and services, we may process the following categories of personal data:

a. Website usage data

• IP address
  
• browser type and version
  
• device and operating system information
  
• referral URLs
  
• interaction and usage data
  

b. Orders and transactions

• name and address details
  
• e-mail address and telephone number
  
• billing and delivery information
  
• order details and order history
  
• payment-related data (processed via payment service providers)
  

c. Customer accounts (optional)

• login credentials
  
• order history
  
• voluntarily provided information such as date of birth, clothing sizes and preferences
  

d. Communication and marketing

• e-mail address
  
• communication preferences
  
• consent records
  

4. Purposes and Legal Bases for Processing

GEZZINA processes personal data for the following purposes and on the following legal bases:

• to ensure the proper functioning, security and improvement of the website (legitimate interest – Article 6(1)(f) GDPR);
  
• to conclude and perform purchase agreements, including order processing, delivery and customer service (performance of a contract – Article 6(1)(b) GDPR);
  
• to comply with legal and fiscal obligations (legal obligation – Article 6(1)(c) GDPR);
  
• to create and manage customer accounts (performance of a contract);
  
• to send marketing communications and newsletters, where permitted (consent or legitimate interest under the soft opt-in regime);
  
• to analyse website usage and improve services through cookies and similar technologies, where required based on consent (Article 6(1)(a) GDPR).
  

5. Cookies and Similar Technologies

GEZZINA uses cookies and similar technologies to ensure the proper functioning of the website and, subject to your consent, to analyse usage and improve performance.

• Strictly necessary cookies are placed without consent.
  
• Analytical and marketing cookies are placed only after your explicit consent via the cookie banner.
  

Further information about the types of cookies used and how you can manage your preferences is available in our Cookie Policy.

6. Newsletter and Marketing Communications

You may receive marketing communications from GEZZINA if:

• you have given explicit consent; or
  
• you have purchased products from GEZZINA and have not objected to receiving such communications (soft opt-in).
  

Each marketing message contains a clear and simple option to unsubscribe. You may also object to marketing communications at any time by contacting us.

7. Minors

The website and services of GEZZINA are not intended for individuals under the age of 16. GEZZINA does not intend to knowingly process personal data of minors.

If personal data of a person under the age of 16 is processed, the consent of a parent or legal guardian is required in accordance with Article 8 GDPR. GEZZINA does not actively verify the age of users.

If GEZZINA becomes aware, or reasonably suspects, that personal data of a minor has been collected without valid parental consent, GEZZINA will delete such personal data without undue delay, unless a statutory retention obligation applies.

Parents or legal guardians who believe that GEZZINA has unintentionally processed personal data of a minor may contact GEZZINA via info@gezzina.com. GEZZINA will handle such requests in accordance with applicable legal requirements.

GEZZINA does not intentionally direct its marketing or communication activities at minors and takes reasonable organisational measures to prevent minors from being targeted by direct marketing.

8. Recipients of Personal Data

GEZZINA does not sell personal data. Personal data may be shared with the following categories of recipients:

a. Processors

Third parties that process personal data on behalf of GEZZINA, such as:

• payment service providers;
  
• IT, hosting and security providers;
  
• e-mail and marketing service providers (e.g. Klaviyo).
  

GEZZINA has concluded data processing agreements with these processors in accordance with Article 28 GDPR.

b. Independent data controllers

• delivery and logistics providers;
  
• review platforms;
  
• payment institutions.
  

These parties independently determine the purposes and means of their processing.

c. Authorities

Public authorities where disclosure is required by law.

9. International Data Transfers

Some service providers used by GEZZINA may be located outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, GEZZINA ensures that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission; or
  
• other lawful transfer mechanisms under Chapter V GDPR.
  

10. Data Retention

GEZZINA retains personal data no longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Indicative retention periods include:

• order and invoice data: in accordance with applicable tax legislation;
  
• customer account data: until account deletion;
  
• marketing data: until withdrawal of consent or objection.
  

11. Security Measures

GEZZINA has implemented appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These measures include access controls, encryption and secure storage.

12. Your Rights

You have the right to:

• access your personal data;
  
• rectify inaccurate personal data;
  
• request erasure of personal data;
  
• restrict processing;
  
• object to processing, including direct marketing;
  
• data portability;
  
• withdraw consent at any time.
  

Requests may be submitted via info@gezzina.com. GEZZINA will respond within the statutory time limits. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

13. Third-Party Websites

The website may contain links to third-party websites. This Privacy Policy does not apply to those websites. GEZZINA is not responsible for their privacy practices.

14. Changes to This Privacy Policy

GEZZINA reserves the right to amend this Privacy Policy. Material changes will be communicated via the website.

15. Language Versions

This Privacy Policy is drawn up in English and Dutch.
In the event of discrepancies, the interpretation most favourable to the data subject shall prevail.

Last updated: 2026