PRIVACY STATEMENT GIMMY

Good thing you've ended up at GIMMY Products, together we will bring out the best in ourselves. 

This is the privacy statement of GIMMY Product BV (hereinafter: GIMMY), with its registered office at Kapellelaan 5, 3012 Wilsele, Belgium. Ondernemingsnummer 0785.985.060. This statement aims to provide each customer with information on how GIMMY processes and uses your data.

It is important that you read this privacy statement so that you are aware of how and why your data is used. This privacy statement may be amended at any time.

This statement applies to all personal data collected by GIMMY. Both through the use of www.gimmyproducts.com (hereinafter: the Website), and through the creation of an account on our website, the sale of our products and the provision of services to consumers.

1.     DEFINITIONS

1. Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier.
2. Processing: the operation or set of operations involving personal data or a set of personal data, whether or not carried out by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of data.
3. Controller: the legal entity that determines the purposes and means of the processing of personal data. (Hereinafter: GIMMY) In this case, GIMMY is the processing controller.
4. Data subject: the natural person who uses this website, or who calls upon the services, or purchases goods GIMMY. (Hereinafter: Customer)

2.     COOKIES

Cookies are small text files that a website stores on your computer. When you revisit the website, thanks to cookies, you do not have to install personal preferences, such as the user language, over and over again.

We use the following cookies to optimise your experience on our Site and deliver our services. GIMMY uses functional, analytical and tracking cookies.

• Functional cookies: are required for the correct operation of www.gimmyproducts.com.
• Analytical cookies: enable us to analyse the number and behaviour of users of www.gimmyproducts.com.
• Tracking cookies: these cookies track your browsing behaviour so that we can better tailor our advertisements to your profile.
• Some of these cookies are stored in your web browser by our performance providers and advertising partners. GIMMY has no direct control over these cookies.

A list of all such cookies can be found below.

Cookies necessary for the operation of the shop:

Name	Function	Duration
_ab	Used in connection with access to admin.	2y
_secure_session_id	Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.	24h
_shopify_country	For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.	session
_shopify_m	Used for managing customer privacy settings.	1y
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2w
_storefront_u	Used to facilitate updating customer account information.	1min
_tracking_consent	Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.	1y
c	Used in connection with checkout.	1y
cart	Used in connection with shopping cart.	2w
cart_currency	Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.	2w
cart_sig	A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.	2w
cart_ts	Used in connection with checkout.	2w
cart_ver	Used in connection with shopping cart.	2w
checkout	Used in connection with checkout.	4w
checkout_token	Used in connection with checkout.	1y
dynamic_checkout_shown_on_cart	Used in connection with checkout.	30min
hide_shopify_pay_for_checkout	Used in connection with checkout.	session
keep_alive	Used in connection with buyer localization.	2w
master_device_id	Used in connection with merchant login.	2y
previous_step	Used in connection with checkout.	1y
remember_me	Used in connection with checkout.	1y
secure_customer_sig	Used to identify a user after they sign into a shop as a customer so they do not need to log in again.	20y
shopify_pay	Used in connection with checkout.	1y
shopify_pay_redirect	Used in connection with checkout.	1 hour, 3w or 1y depending on value
storefront_digest	Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.	2y
tracked_start_checkout	Used in connection with checkout.	1y
checkout_one_experiment	Used in connection with checkout.	session
checkout_session_lookup	Used in connection with checkout.	3w
checkout_session_token_<<id>>	Used in connection with checkout.	3w
identity_state	Used in connection with customer authentication	24h
identity_state_<<id>>	Used in connection with customer authentication	24h
identity_customer_account_number	Used in connection with customer authentication	12w

Reporting and analysis:

Name	Function	Duration
_landing_page	Track landing pages.	2w
_orig_referrer	Track landing pages.	2w
_s	Shopify analytics.	30min
_shopify_d	Shopify analytics.	session
_shopify_fs	Shopify analytics.	30min
_shopify_s	Shopify analytics.	30min
_shopify_sa_p	Shopify analytics relating to marketing & referrals.	30min
_shopify_sa_t	Shopify analytics relating to marketing & referrals.	30min
_shopify_y	Shopify analytics.	1y
_y	Shopify analytics.	1y
_shopify_evids	Shopify analytics.	session
_shopify_ga	Shopify and Google Analytics.	session
customer_auth_provider	Shopify analytics.	session
customer_auth_session_created_at	Shopify analytics.	session

3.     PLUG-INS AND LINKS

The Website contains links and plug-ins to third-party websites. By clicking on these, these third parties may collect personal data about you. We have no control over these websites and are therefore not responsible for the processing carried out by these third parties.

4.     WHAT PERSONAL DATA DO WE PROCESS?

• Identity data: first name and surname
• Contact details: billing address, delivery address, e-mail address, phone number
• Financial data: bank account and payment card details
• Transaction data (details of payments and products purchased)
• Profile data: username, password, purchases or orders already made, interests, preferences, feedback, communications with GIMMY and survey responses.
• Technical data: IP address, login details, browser type and version, time zone settings, location, types and versions of browser plug-ins, operating system and platform and other technologies on the devices you use to access the Website.
• Marketing and communication data: preferences in relation to receiving marketing and other communication preferences
• Other personal data actively provided to GIMMY
• No special categories of data as defined in Art. 9 General Data Protection Regulation

5.     HOW TO COLLECT YOUR PERSONAL DATA

• Direct correspondence
• Data you actively provide to us, such as when creating a user account on our website
• Automated technologies or interactions (for more information on this, see chapter "Cookies")
• Third parties (such as analytics tool providers)
• Public sources

6.     PURPOSES OF PROCESSING

Personal data will only be processed for the following purposes, or for purposes compatible with those purposes.

• Service (i.e. getting explanations on the best supplements adapted to your personal situation)
• To improve our services and your user experience
• Contact in connection with upcoming deliveries
• Personalised direct marketing
• Payment management
• Management and technical improvement of the gimmyproducts.com website
• Newsletter, provided you subscribed to it
• Occasional sending of Christmas cards and New Year's greetings
• If GIMMY processes your data for a different purpose, GIMMY will inform you of this and the legal basis on which the processing is carried out. The processing is done on one of the following legal grounds:
• The processing is necessary for the performance of a contract to which the Customer is a party, or;
• The express consent of the Customer.
• Legitimate interest of GIMMY. This takes into account the legitimate interests of the Customer and whether the Customer can reasonably expect the processing to be carried out for that purpose. Persons with access to these data
• GIMMY shares data with third parties only when necessary for the provision of services, unless GIMMY is required by law or court order to share data. GIMMY only allows third parties to process this data for specific purposes approved by us.

This data may be shared with:

• Delivery services: so that your goods could be delivered to your home.
• Service providers providing IT and system management services.

7.     RETENTION PERIOD

GIMMY will not retain your data for longer than strictly necessary for the purposes of processing. Specifically, GIMMY keeps your data for no longer than 24 months after the last order.

8.     DATA SECURITY

GIMMY has taken appropriate security measures to protect your personal data. We also require that third parties accessing your personal data apply the same security measures.

9.     YOUR RIGHTS IN RELATION TO PROCESSING

Each Customer shall always have the right to request access to, and rectification or deletion of, their personal data or restriction of the processing concerning them, as well as the right to object to processing and the right to data portability.

If a processing operation is carried out on the basis of the Customer's consent, the Customer also has the right to withdraw consent to a processing operation at any time, such as the withdrawal of consent to obtain direct marketing. However, the withdrawal of consent does not affect the lawfulness of processing already carried out on the basis of the consent, before its withdrawal.

The right to access, rectify or delete personal data, to restrict processing concerning him, to withdraw consent or the right to object to processing may be exercised by sending an e-mail to info@gimmy.be. GIMMY has the right to request your identity before acting on the above requests.

GIMMY will respond in each case no later than 30 days after a request.

You can also visit info@gimmy.be for other questions regarding this privacy notice.

A Customer also has the right to file a complaint with the Belgian Data Protection Authority.

However, GIMMY will not be obliged to comply with a Customer's request for access, correction, deletion or transfer because of legal obligations or for the exercise or substantiation of a legal claim.