Privacy Policy – G.A.I.N.S.

At G.A.I.N.S., part of Vitalis Group B.V., we respect your privacy and handle your personal data with care. This Privacy Policy explains how we collect, use, store, and protect your personal information. By using our website (www.gains.eu) or our services, you agree to this policy.

Article 1 – Controller

G.A.I.N.S. is a registered trademark under Vitalis Group B.V., located at Noordhoven 19a, 6042NW Roermond, The Netherlands.
Contact: support@gains.eu.
Chamber of Commerce: 95659838.
VAT: NL867227618B01.

Vitalis Group B.V. is the data controller as defined by the General Data Protection Regulation (GDPR).

Article 2 – Personal Data We Process

We collect and process personal data when you use our website or services. This may include:

• Name, address, email address, phone number

• Payment details

• IP address and browsing data

• Order history

• Any other data you actively provide (e.g. creating an account or contacting us).

Article 3 – Purposes of Processing

We process your personal data to:

• Process and deliver your orders

• Handle payments

• Provide customer service and support

• Send order updates

• Improve our website and services

• Send marketing communications (only with your explicit consent)

• Comply with legal obligations

Article 4 – Legal Grounds

We process your personal data based on:

• Performance of a contract (e.g. fulfilling your order)

• Legal obligations (e.g. tax regulations)

• Consent (e.g. newsletters, cookies)

• Legitimate interest (e.g. improving services, preventing fraud).

Article 5 – Retention Periods

• Order data: 7 years (tax regulations)

• Customer data: 2 years after last purchase

• Marketing data: until you withdraw consent

Article 6 – Sharing with Third Parties

We only share personal data when necessary for our services or legal obligations. Examples:

• Payment providers (e.g. iDeal, PayPal)

• Shipping partners (e.g. PostNL)

• IT service providers (e.g. website hosting, Shopify)

If data is transferred outside the European Economic Area (EEA), we ensure adequate protection in line with GDPR (such as EU Standard Contractual Clauses or adequacy decisions).

Article 7 – Data Security

We take appropriate technical and organizational measures to protect your data, including:

• Encrypted connections (SSL/TLS)

• Secure storage of payment information

• Restricted access to authorized staff only

• Regular security updates and monitoring

Article 8 – Your Rights

You have the right to:

• Access your data

• Correct inaccurate or incomplete data

• Request deletion (within legal limits)

• Restrict processing

• Request data portability

• Object to processing

Contact support@gains.eu to exercise your rights. We will respond within 30 days.

Article 9 – Cookies

Our website uses cookies to improve your browsing experience. Some are necessary, others require your consent (e.g. analytics, marketing).
See our [Cookie Policy] for details on the types of cookies used, their purpose, and how you can manage your preferences.

Article 10 – Changes

We may amend this Privacy Policy at any time. The latest version is always available on www.gains.eu.

Article 11 – Complaints

For complaints, please contact support@gains.eu. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

---

Version 1.0 – April 1, 2025